AbuseIPDB » 109.2.157.18

109.2.157.18 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 1%: ?

ISP	Societe Francaise Du Radiotelephone - SFR SA
Usage Type	Fixed Line ISP
ASN	AS15557
Hostname(s)	18.157.2.109.rev.sfr.net
Domain Name	sfr.fr
Country	France
City	Charleville-Mezieres, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 109.2.157.18

Whois 109.2.157.18

IP Abuse Reports for 109.2.157.18:

This IP address has been reported a total of 169 times from 71 distinct sources. 109.2.157.18 was first reported on November 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
syokadmin	2024-11-08 18:56:16 (2 months ago)	109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net), 2 distributed smtpauth attacks on account [ifrac@ ... show more109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
shaunc	2024-11-08 18:47:36 (2 months ago)	Nov 8 12:47:33 mailman postfix/smtpd[7713]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL P ... show moreNov 8 12:47:33 mailman postfix/smtpd[7713]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: authentication failure show less	Brute-Force
ingentar	2024-11-08 17:45:16 (2 months ago)	2024-11-07T19:33:35.239860mail.ingentar.com postfix/smtpd[1405]: warning: 18.157.2.109.rev.sfr.net[1 ... show more2024-11-07T19:33:35.239860mail.ingentar.com postfix/smtpd[1405]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: 2024-11-07T20:22:56.444025mail.ingentar.com postfix/smtpd[3536]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: 2024-11-08T10:48:09.083040mail.ingentar.com postfix/smtpd[9469]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: 2024-11-08T12:45:12.035266mail.ingentar.com postfix/smtpd[17374]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: ... show less	Email Spam Brute-Force
Anonymous	2024-11-08 15:14:25 (2 months ago)	Ports: 25,2525,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
mashamal	2024-11-08 15:03:19 (2 months ago)	Fail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TOO MANY ERRORS ... show moreFail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TOO MANY ERRORS\},\{ADDRESS REJECTED\} ... show less	Hacking
triplecode	2024-11-08 14:22:41 (2 months ago)	Reported from hMailServer	Hacking
Ragnarocek	2024-11-08 14:00:07 (2 months ago)	Automatic report from EV firewall log.	Port Scan Hacking Brute-Force
Ragnarocek	2024-11-08 13:34:51 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2024-11-08 11:26:57 (2 months ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
✨	2024-11-08 11:22:02 (2 months ago)	Rule : SMTP IP in black list	Email Spam Port Scan Spoofing
vbios.com	2024-11-08 03:26:23 (2 months ago)	2024-11-07T23:45:21.444078 MS postfix/smtpd[4112416]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18 ... show more2024-11-07T23:45:21.444078 MS postfix/smtpd[4112416]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: 2024-11-08T02:54:30.435324 MS postfix/smtpd[4150517]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: 2024-11-08T05:26:22.017303 MS postfix/smtpd[4177624]: warning: 18.157.2.109.rev.sfr.net[109.2.157.18]: SASL PLAIN authentication failed: show less	Email Spam Brute-Force
syokadmin	2024-11-08 02:09:26 (2 months ago)	(PERMBLOCK) 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net) has had more than 2 temp blocks in the ... show more(PERMBLOCK) 109.2.157.18 (FR/France/18.157.2.109.rev.sfr.net) has had more than 2 temp blocks in the last 86400 secs show less	Brute-Force
Anonymous	2024-11-07 23:37:03 (2 months ago)	Rule : SMTP IP in black list	Email Spam Port Scan Spoofing
dn-systems.net	2024-11-07 22:02:13 (2 months ago)	2024-11-07 12:26:49.450 [32187] cram authenticator failed for 18.157.2.109.rev.sfr.net (pronk) [109. ... show more2024-11-07 12:26:49.450 [32187] cram authenticator failed for 18.157.2.109.rev.sfr.net (pronk) [109.2.157.18]:50829 I=[193.108.181.150]:25 Ci=32187: 535 Incorrect authentication data ([email protected]) 2024-11-07 23:02:05.699 [7295] cram authenticator failed for 18.157.2.109.rev.sfr.net (saeogy) [109.2.157.18]:50841 I=[193.108.181.150]:25 Ci=7295: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
rtbh.com.tr	2024-11-07 20:53:33 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force