AbuseIPDB » 109.2.157.18

109.2.157.18 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 2%: ?

ISP	Societe Francaise Du Radiotelephone - SFR SA
Usage Type	Fixed Line ISP
ASN	AS15557
Hostname(s)	18.157.2.109.rev.sfr.net
Domain Name	sfr.fr
Country	France
City	Nantes, Pays de la Loire

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 109.2.157.18

Whois 109.2.157.18

IP Abuse Reports for 109.2.157.18:

This IP address has been reported a total of 169 times from 71 distinct sources. 109.2.157.18 was first reported on November 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
✨	2024-11-09 14:40:03 (2 months ago)	Rule : SMTP IP in black list	Email Spam Port Scan Spoofing
Anonymous	2024-11-09 14:24:07 (2 months ago)	postfix-sasl	Brute-Force Web App Attack
Anonymous	2024-11-09 14:16:42 (2 months ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
KZGM	2024-11-09 13:47:59 (2 months ago)	smtp - too many invalid logins. Banned by fail2ban.	Brute-Force
ISPLtd	2024-11-09 13:08:35 (2 months ago)	2024-11-09T09:08:34.339237-04:00 giulia postfix/smtpd[359205]: warning: 18.157.2.109.rev.sfr.net[109 ... show more2024-11-09T09:08:34.339237-04:00 giulia postfix/smtpd[359205]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
Anonymous	2024-11-09 11:59:26 (2 months ago)	Nov 09 12:59:31 ns postfix/submission/smtpd[3483517]: improper command pipelining after CONNECT from ... show moreNov 09 12:59:31 ns postfix/submission/smtpd[3483517]: improper command pipelining after CONNECT from 18.157.2.109.rev.sfr.net[109.2.157.18]: \026\003\001\000\344\001\000\000\340\003\003\230\264(]\2279\206\260\277\|\375\236\375u^-\252\324v\265\225\356Ap\377\251\263GA\305Q\265 \323\233\303I\275\344\202\337[b;J}L\250[v\027$kL\307 u\351\027V\035\006\264\264\346\000\034\300+\300/\300,\3000\314\251\314\250\300\t\300\023\300\n\300\024\300\022 ... show less	Web Spam Email Spam Port Scan Brute-Force
danskefilm.dk	2024-11-09 11:30:01 (2 months ago)	SMTP login brute-force attempt.	Brute-Force
Widmo	2024-11-09 09:34:48 (2 months ago)	2024-11-09T10:34:47.320708+01:00 poczta postfix/submission/smtpd[1500526]: warning: 18.157.2.109.rev ... show more2024-11-09T10:34:47.320708+01:00 poczta postfix/submission/smtpd[1500526]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Brute-Force
conexcol	2024-11-09 07:56:02 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net): 5 in the l ... show more(smtpauth) Failed SMTP AUTH login from 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2024-11-09 06:27:00 (2 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
Burayot	2024-11-09 06:17:19 (2 months ago)	LF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net ... show moreLF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2024-11-09 04:03:02 (2 months ago)	Rule : SMTP IP in black list	Email Spam Port Scan Spoofing
Widmo	2024-11-08 22:11:25 (2 months ago)	2024-11-08T16:23:02.311369+01:00 poczta postfix/submission/smtpd[1299058]: warning: 18.157.2.109.rev ... show more2024-11-08T16:23:02.311369+01:00 poczta postfix/submission/smtpd[1299058]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2024-11-08T23:11:25.074418+01:00 poczta postfix/submission/smtpd[1373654]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Brute-Force
David Gebler	2024-11-08 21:34:40 (2 months ago)	Nov 8 21:34:39 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show moreNov 8 21:34:39 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=109.2.157.18 show less	Email Spam Brute-Force
rtbh.com.tr	2024-11-08 20:53:28 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force