AbuseIPDB » 103.245.166.17

103.245.166.17 was found in our database!

This IP was reported 467 times. Confidence of Abuse is 0%: ?

ISP	Bangmod Enterprise
Usage Type	Data Center/Web Hosting/Transit
Domain Name	bangmodhosting.com
Country	Thailand
City	Bangkok, Krung Thep Maha Nakhon

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 103.245.166.17

Whois 103.245.166.17

IP Abuse Reports for 103.245.166.17:

This IP address has been reported a total of 467 times from 111 distinct sources. 103.245.166.17 was first reported on October 21st 2023, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-03-04 17:38:39 (6 months ago)	2024-03-04T18:38:38.581569+01:00 soli-gate postfix/submissions/smtpd[186499]: warning: unknown[103.2 ... show more2024-03-04T18:38:38.581569+01:00 soli-gate postfix/submissions/smtpd[186499]: warning: unknown[103.245.166.17]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
adlp.org	2024-03-04 14:41:48 (6 months ago)	Mar 4 14:41:41 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;103.245.166.17;[UNAVAI ... show moreMar 4 14:41:41 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;103.245.166.17;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Mar 4 14:41:44 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;103.245.166.17;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Mar 4 14:41:47 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;103.245.166.17;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
Paul Smith	2024-03-04 10:26:03 (6 months ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
cticom.ms	2024-03-04 09:18:28 (6 months ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
Anonymous	2024-03-04 08:13:56 (6 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
smtp.com.es	2024-03-04 06:53:31 (6 months ago)	Brute force attempt	Brute-Force Exploited Host
kreativstrecke	2024-03-04 02:49:48 (6 months ago)	Mar 4 03:49:46 srv02 postfix/smtps/smtpd[1805838]: warning: unknown[103.245.166.17]: SASL LOGIN aut ... show moreMar 4 03:49:46 srv02 postfix/smtps/smtpd[1805838]: warning: unknown[103.245.166.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 4 03:49:47 srv02 postfix/smtps/smtpd[1805838]: lost connection after AUTH from unknown[103.245.166.17] Mar 4 03:49:47 srv02 postfix/smtps/smtpd[1805838]: disconnect from unknown[103.245.166.17] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
lavnet.net	2024-03-03 22:03:46 (6 months ago)	Mar 3 22:03:44 angela postfix/submission/smtpd[1394705]: warning: unknown[103.245.166.17]: SASL LOG ... show moreMar 3 22:03:44 angela postfix/submission/smtpd[1394705]: warning: unknown[103.245.166.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=licei.82 Mar 3 22:03:45 angela postfix/submission/smtpd[1394705]: lost connection after AUTH from unknown[103.245.166.17] Mar 3 22:03:45 angela postfix/submission/smtpd[1394705]: disconnect from unknown[103.245.166.17] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force Web App Attack
Anonymous	2024-03-03 16:10:44 (6 months ago)	7 Login Attempts	Port Scan Brute-Force
opcenter	2024-03-03 14:57:15 (6 months ago)	2024-03-03 dovecot_login authenticator failed for ([103.245.166.17]) [103.245.166.17]: 535 Incorrect ... show more2024-03-03 dovecot_login authenticator failed for ([103.245.166.17]) [103.245.166.17]: 535 Incorrect authentication data (set_id=postmaster) 2024-03-03 dovecot_login authenticator failed for ([103.245.166.17]) [103.245.166.17]: 535 Incorrect authentication data (set_id=irc@REMOVED.de) 2024-03-03 dovecot_login authenticator failed for ([103.245.166.17]) [103.245.166.17]: 535 Incorrect authentication data (set_id=www-data) show less	Brute-Force
mickael137	2024-03-03 14:00:23 (6 months ago)	2024-03-03T15:00:21.393099+01:00 X postfix/smtps/smtpd[1469086]: warning: unknown[103.245.166.17]: ... show more2024-03-03T15:00:21.393099+01:00 X postfix/smtps/smtpd[1469086]: warning: unknown[103.245.166.17]: SASL CRAM-MD5 authentication failed: PDIxNTM1NDUxODk2MTgwOTUuMTcwOTQ3NDQxOEBkZWRpNC5taWNsZWQubmV0Pg==, sasl_username=test 2024-03-03T15:00:22.294619+01:00 X postfix/smtps/smtpd[1469086]: lost connection after AUTH from unknown[103.245.166.17] 2024-03-03T15:00:22.294739+01:00 X postfix/smtps/smtpd[1469086]: disconnect from unknown[103.245.166.17] ehlo=1 auth=0/1 commands=1/2 show less	Brute-Force
Paul Smith	2024-03-03 10:25:45 (6 months ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
Burayot	2024-03-02 23:54:34 (6 months ago)	LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 103.245.166.17 (TH/Thailand/-): 2 in the last 36 ... show moreLF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 103.245.166.17 (TH/Thailand/-): 2 in the last 3600 secs show less	Brute-Force
MSZ	2024-03-02 21:07:50 (6 months ago)	Fail2Ban triggered by postfix[mode=aggressive] Sat Mar 2 22:07:50 CET 2024	Hacking Brute-Force Web App Attack
NOC ST	2024-03-02 21:01:08 (6 months ago)	Mar 2 18:01:06 zimbramta01 postfix/smtps/smtpd[13755]: warning: unknown[103.245.166.17]: SASL LOGIN ... show moreMar 2 18:01:06 zimbramta01 postfix/smtps/smtpd[13755]: warning: unknown[103.245.166.17]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force