JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

107.148.158.140

Activity Trending Down

Abuse Confidence Score

88% Critical

20 reports

20 reporters · latest 1 week ago

ISP: Internet Utilities NA LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS19318
Domain Name: iana.org
Country: 🇺🇸 United States of America
City: Piscataway, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 20 distinct reporters

First reported

October 31st 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 4 🇳🇱 Netherlands 3

Most common categories Brute-Force 16 Email Spam 4 Hacking 2 DNS Compromise 1 Port Scan 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-31 02:41:06 UTC · (1 week ago)	[cb-04al] Mail server brute-force: 6 failed attempts detected by fail2ban jail exim-iptables.	Brute-Force
🇫🇷 maxxsense	2026-10-31 02:40:56 UTC · (1 week ago)	(smtpauth) Failed SMTP AUTH login from 107.148.158.140 (US/United States/-)	Brute-Force
🇫🇷 haxwell.de	2026-10-31 02:39:35 UTC · (1 week ago)	2026-10-31T04:39:34.799626+02:00 vegeta postfix/smtpd[834883]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 450 4.7.25 Client host rejected: cannot find your hostname, [107.148.158.140]; from=<[email protected]> to=<[email protected]> proto ... show more 2026-10-31T04:39:34.799626+02:00 vegeta postfix/smtpd[834883]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 450 4.7.25 Client host rejected: cannot find your hostname, [107.148.158.140]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ADMINIS-NUJN9GL> show less	Brute-Force
🇺🇸 catislove.kr	2026-10-31 02:30:14 UTC · (1 week ago)	Oct 31 11:29:50 box auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=noauth rhost=107.148.158.140 Oct 31 11:29:59 box auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=doveco ... show more Oct 31 11:29:50 box auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=noauth rhost=107.148.158.140 Oct 31 11:29:59 box auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=spam rhost=107.148.158.140 Oct 31 11:30:13 box auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=107.148.158.140 ... show less	Brute-Force
🇺🇸 NXTwoThou	2026-10-31 02:23:47 UTC · (1 week ago)	SMTP AUTH LOGIN ADMIN	Brute-Force
🇵🇱 dzpk	2026-10-31 02:18:10 UTC · (1 week ago)	Oct 31 03:18:07 mx postfix/smtpd[1089593]: lost connection after CONNECT from unknown[107.148.158.140] Oct 31 03:18:08 mx postfix/smtpd[1089593]: lost connection after RCPT from unknown[107.148.158.140] Oct 31 03:18:09 mx postfix/smtpd[1089593]: lost ... show more Oct 31 03:18:07 mx postfix/smtpd[1089593]: lost connection after CONNECT from unknown[107.148.158.140] Oct 31 03:18:08 mx postfix/smtpd[1089593]: lost connection after RCPT from unknown[107.148.158.140] Oct 31 03:18:09 mx postfix/smtpd[1089593]: lost connection after RCPT from unknown[107.148.158.140] Oct 31 03:18:09 mx postfix/smtpd[1089593]: lost connection after RCPT from unknown[107.148.158.140] Oct 31 03:18:10 mx postfix/smtpd[1089593]: lost connection after RCPT from unknown[107.148.158.140] show less	Brute-Force Email Spam
Anonymous	2026-10-31 02:05:20 UTC · (1 week ago)	2026-10-31T03:05:19.945099+01:00 teo-gate postfix/smtpd[1946767]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 554 5.7.25 Client host rejected: cannot find your hostname, [107.148.158.140]; from=<[email protected]> to=<k.e.-urban@arc ... show more 2026-10-31T03:05:19.945099+01:00 teo-gate postfix/smtpd[1946767]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 554 5.7.25 Client host rejected: cannot find your hostname, [107.148.158.140]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ADMINIS-NUJN9GL> ... show less	Brute-Force
🇷🇴 sTicKs23	2026-10-31 01:52:52 UTC · (1 week ago)	Rejected activity against our mail infrastructure (1 hits, first seen 2026-10-31 UTC). Log evidence: 2026-10-31 03:52:48.129 [709624] H=(ADMINIS-NUJN9GL) [107.148.158.140]:62255 I=[176.223.227.35]:25 Ci=709624 F=<n*@bizlawyer.ro> rejected RCPT <k ... show more Rejected activity against our mail infrastructure (1 hits, first seen 2026-10-31 UTC). Log evidence: 2026-10-31 03:52:48.129 [709624] H=(ADMINIS-NUJN9GL) [107.148.158.140]:62255 I=[176.223.227.35]:25 Ci=709624 F=<n*@bizlawyer.ro> rejected RCPT <k@arcor.de>: Sender verify failed 2026-10-31 03:52:48.210 [709623] H=(ADMINIS-NUJN9GL) [107.148.158.140]:62248 I=[176.223.227.38]:25 Ci=709623 F=<n@tolwit.ro> rejected RCPT <k@arcor.de>: Sender verify failed 2026-10-31 03:52:49.778 [709631] H=(ADMINIS-NUJN9GL) [107.148.158.140]:65333 I=[176.223.227.35]:25 Ci=709631 F=<s@bizlawyer.ro> rejected RCPT <k@arcor.de>: Sender verify failed 2026-10-31 03:52:49.890 [709632] H=(ADMINIS-NUJN9GL) [107.148.158.140]:65401 I=[176.223.227.38]:25 Ci=709632 F=<s@tolwit.ro> rejected RCPT <k*@arcor.de>: Sender verify failed show less	Hacking
🇪🇸 didevi	2026-10-31 01:51:25 UTC · (1 week ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇫🇷 IpdbBot	2026-10-31 01:50:52 UTC · (1 week ago)	Spam attack detected	Hacking
🇩🇪 netclix.gr	2026-10-31 01:39:35 UTC · (1 week ago)	(smtpauth) Failed SMTP AUTH login from 107.148.158.140 (US/United States/-)	Brute-Force
🇩🇪 itak	2026-10-31 01:37:50 UTC · (1 week ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP.	DDoS Attack Port Scan
🇩🇪 snhosting	2026-10-31 01:36:24 UTC · (1 week ago)	2026-10-31T03:35:22.587824+02:00 www4 postfix/smtpd[3252443]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 504 5.5.2 <ADMINIS-NUJN9GL>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> ... show more 2026-10-31T03:35:22.587824+02:00 www4 postfix/smtpd[3252443]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 504 5.5.2 <ADMINIS-NUJN9GL>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ADMINIS-NUJN9GL> 2026-10-31T03:35:32.248196+02:00 www4 postfix/smtpd[3252443]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 504 5.5.2 <ADMINIS-NUJN9GL>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ADMINIS-NUJN9GL> 2026-10-31T03:35:45.638784+02:00 www4 postfix/smtpd[3252443]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 504 5.5.2 <ADMINIS-NUJN9GL>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ADMINIS-NUJN9GL> 2026-10-31T03:35:59.227751+02:00 www4 postfix/smtpd[3252443]: NOQUEUE: reject: RCPT from unknown[107.148.158.140]: 504 5.5.2 <ADMINIS-NUJN9GL>: Helo ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇷🇺 Deynekin.com	2026-10-31 01:35:59 UTC · (1 week ago)	Automated fail2ban report from server 176.99.5.35. Attack type: SMTP AUTH brute-force (jails: exim-auth-fail). Observed: 2026-10-31T04:35:59+03:00. Detections: 1 ban event(s), 15 failed attempts. Ban duration: 1d. Patterns: SMTP AUTH with incorrect c ... show more Automated fail2ban report from server 176.99.5.35. Attack type: SMTP AUTH brute-force (jails: exim-auth-fail). Observed: 2026-10-31T04:35:59+03:00. Detections: 1 ban event(s), 15 failed attempts. Ban duration: 1d. Patterns: SMTP AUTH with incorrect credentials (535). No personal data included. -- Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB show less	Brute-Force
🇩🇪 moretrix	2026-10-31 01:35:24 UTC · (1 week ago)	2026-10-31T03:35:09.134775+02:00 ieyasu.moretrix.com postfix/postscreen[2032945]: HANGUP after 0 from [107.148.158.140]:54481 in tests before SMTP handshake 2026-10-31T03:35:09.295750+02:00 ieyasu.moretrix.com postfix/postscreen[2032945]: PREGREET 22 ... show more 2026-10-31T03:35:09.134775+02:00 ieyasu.moretrix.com postfix/postscreen[2032945]: HANGUP after 0 from [107.148.158.140]:54481 in tests before SMTP handshake 2026-10-31T03:35:09.295750+02:00 ieyasu.moretrix.com postfix/postscreen[2032945]: PREGREET 22 after 0.09 from [107.148.158.140]:50114: EHLO ADMINIS-NUJN9GL\r\n 2026-10-31T03:35:24.126286+02:00 ieyasu.moretrix.com postfix/postscreen[2032945]: HANGUP after 15 from [107.148.158.140]:50114 in tests after SMTP handshake ... show less	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 179.60.83.167

🇻🇳 116.111.186.200

🇧🇬 91.196.225.242

🇧🇪 34.38.252.135

🇺🇸 20.83.44.118

🇺🇸 161.38.201.9

🇪🇨 138.185.137.230

🇮🇩 103.190.46.134

🇩🇪 94.183.174.99

🇺🇸 85.239.233.91

🇹🇷 85.108.192.110

🇸🇬 64.235.41.97

🇸🇬 47.79.200.123

🇺🇸 205.210.31.50

🇺🇸 184.101.129.160

🇺🇸 162.216.149.17

🇨🇳 114.246.203.85

🇺🇸 45.132.115.152

🇳🇱 213.209.159.236

🇬🇧 185.247.137.201