JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.172.95.143

109.172.95.143 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 69%: ?

69%

ISP	AEZA GROUP LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Hostname(s)	finka.ptr.network
Domain Name	aeza.ru
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.172.95.143

Whois 109.172.95.143

IP Abuse Reports for 109.172.95.143:

This IP address has been reported a total of 16 times from 14 distinct sources. 109.172.95.143 was first reported on June 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-07-19 17:26:40 (2 days ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
Anonymous	2026-07-19 00:58:30 (2 days ago)	Authentication failure	Brute-Force
🇿🇦 hostsec_za	2026-07-18 21:28:04 (3 days ago)	IMAP Auth Attack. 10 failed logins in 1 hour.	Brute-Force
🇩🇪 tvnl.eu	2026-07-18 20:58:50 (3 days ago)	Banned by fail2ban on <hostname> for jail dovecot. Attempts: 5	Brute-Force
Anonymous	2026-07-18 01:54:39 (3 days ago)	6x Dovecot auth failed (on 1 different adresses)	Brute-Force
🇷🇴 clauss	2026-07-18 00:44:45 (3 days ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇹🇷 baku.hosting	2026-07-17 00:30:47 (4 days ago)	CSF Auto Report: (imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/finka.ptr.network): 4 in ... show more CSF Auto Report: (imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/finka.ptr.network): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇫🇮 notelseit	2026-07-16 23:33:46 (5 days ago)	2026-07-17T01:33:02.385525+02:00 mail dovecot: imap-login: Disconnected: Connection closed: read(siz ... show more 2026-07-17T01:33:02.385525+02:00 mail dovecot: imap-login: Disconnected: Connection closed: read(size=669) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=109.172.95.143, lip=65.21.131.50, TLS: read(size=669) failed: Connection reset by peer, session=<aUdy3MJWUeFtrF+P> 2026-07-17T01:33:02.564148+02:00 mail dovecot: auth-worker(2961689): conn unix:auth-worker (pid=2916684,uid=110): auth-worker<81>: sql([email protected],109.172.95.143,<HgB13MJWXeFtrF+P>): Password mismatch 2026-07-17T01:33:04.087812+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=109.172.95.143, lip=65.21.131.50, TLS: Connection closed, session=<HgB13MJWXeFtrF+P> 2026-07-17T01:33:45.421799+02:00 mail dovecot: auth-worker(2961689): conn unix:auth-worker (pid=2916684,uid=110): auth-worker<87>: sql([email protected],109.172.95.143,<YPQC38JW1OxtrF+P>): Password mismatch 2026-07-17T01:33 ... show less	Brute-Force Email Spam
🇩🇪 tvnl.eu	2026-07-16 23:20:39 (5 days ago)	Banned by fail2ban on <hostname> for jail dovecot. Attempts: 5	Brute-Force
🇳🇱 Mangelot Hosting	2026-07-16 18:48:00 (5 days ago)	(imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/finka.ptr.network): 10 in the last 3600 se ... show more (imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/finka.ptr.network): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_IMAPD; Logs: Jul 16 20:12:42 dovecot[273867]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=109.172.95.143, lip=0.0.0.x, TLS: Connection closed, session=<9HS2Yr5WbNdtrF+P> Jul 16 20:12:47 dovecot[273867]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 6 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=109.172.95.143, lip=0.0.0.x, TLS: Connection closed, session=<ABjHYr5WrNdtrF+P> Jul 16 20:12:5 show less	Brute-Force
Anonymous	2026-07-16 16:32:50 (5 days ago)	(imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/Uusimaa/Helsinki/finka.ptr.network/[redact ... show more (imapd) Failed IMAP login from 109.172.95.143 (FI/Finland/Uusimaa/Helsinki/finka.ptr.network/[redacted]) show less	Brute-Force
🇿🇦 maximonline.co.za	2026-07-16 16:30:30 (5 days ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇦🇺 electronico	2026-07-16 15:48:29 (5 days ago)	2026-07-17T02:32:42.787798+11:00 mail1 dovecot: imap-login: Disconnected: Connection closed (auth fa ... show more 2026-07-17T02:32:42.787798+11:00 mail1 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=109.172.95.143, lip=51.161.209.102, TLS: Connection closed, session=<AYuOJrxW1eFtrF+P> 2026-07-17T02:48:24.291244+11:00 mail1 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=109.172.95.143, lip=51.161.209.102, TLS: Connection closed, session=<vhutXrxWc8ttrF+P> 2026-07-17T02:48:28.456109+11:00 mail1 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=109.172.95.143, lip=51.161.209.102, TLS: Connection closed, session=<7p+vXrxWgMttrF+P> ... show less	Brute-Force Email Spam
Anonymous	2026-06-11 20:20:11 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇫🇷 adlp.org	2026-06-11 17:10:39 (1 month ago)	Jun 11 17:10:33 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;109.172.95.143;;[email protected] ... show more Jun 11 17:10:33 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;109.172.95.143;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Jun 11 17:10:36 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;109.172.95.143;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Jun 11 17:10:39 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;109.172.95.143;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill ... show less	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.115

🇱🇹 212.24.106.129

🇷🇺 195.122.253.45

🇬🇧 193.32.209.254

192.168.200.171

🇬🇧 188.240.59.53

🇬🇪 188.169.20.122

🇺🇸 188.114.96.11

🇧🇷 187.95.45.252

🇨🇳 180.76.234.93

🇨🇳 123.234.3.106

🇺🇸 107.173.195.144

🇳🇱 104.250.194.142

🇫🇷 85.217.140.4

🇪🇸 80.102.218.207

🇺🇸 66.132.172.230

🇩🇪 46.225.23.118

🇷🇺 46.44.0.185

🇬🇧 31.14.254.88

🇬🇧 2620:171:6c:f003:9999::242