JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 12.150.243.23

12.150.243.23 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 0%: ?

ISP	AT&T Enterprises, LLC
Usage Type	Mobile ISP
ASN	AS7018
Domain Name	att.com
Country	🇺🇸 United States of America
City	Alabaster, Alabama

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 12.150.243.23

Whois 12.150.243.23

IP Abuse Reports for 12.150.243.23:

This IP address has been reported a total of 111 times from 71 distinct sources. 12.150.243.23 was first reported on September 23rd 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bpolson	2025-10-04 03:41:29 (9 months ago)	SSH login attempts on port 22.	Brute-Force SSH
🇩🇪 NetShield-DE	2025-09-30 19:07:48 (9 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 3. First: 2025-09-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 3. First: 2025-09-30T21:07:01+0200. Last: 2025-09-30T21:07:01+0200. Samples: - 2025-09-30 00:31:00,330 fail2ban.actions [47044]: NOTICE [abuseipdb] Ban 12.150.243.23 - 2025-09-30 18:41:22,839 fail2ban.actions [353099]: NOTICE [abuseipdb] Restore Ban 12.150.243.23 - 2025-09-30 20:14:36,456 fail2ban.actions [412582]: NOTICE [abuseipdb] Restore Ban 12.150.243.23 show less	Web App Attack
🇩🇪 fynndows.de	2025-09-30 08:14:04 (9 months ago)	Sep 30 08:14:01 hs sshd[85718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Sep 30 08:14:01 hs sshd[85718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.150.243.23 Sep 30 08:14:03 hs sshd[85718]: Failed password for invalid user ftp from 12.150.243.23 port 41901 ssh2 ... show less	Brute-Force SSH
🇧🇷 websync	2025-09-30 08:04:36 (9 months ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇩🇪 basing	2025-09-30 07:03:08 (9 months ago)	2025-09-30 08:03:08 idz SASL PLAIN auth failed: rhost=12.150.243.23...	Brute-Force
Anonymous	2025-09-30 06:44:23 (9 months ago)	Sep 30 08:44:23 mx1 postfix/submission/smtpd[3059447]: warning: unknown[12.150.243.23]: SASL PLAIN a ... show more Sep 30 08:44:23 mx1 postfix/submission/smtpd[3059447]: warning: unknown[12.150.243.23]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=info@***.de show less	Brute-Force
🇨🇳 ThreatBook.io	2025-09-30 01:08:35 (9 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/12.150.243.23	SSH
🇨🇿 Honzas	2025-09-30 00:54:04 (9 months ago)	Automatic report:30.09.2025 0:54:04. Port:465	Email Spam
Anonymous	2025-09-30 00:49:02 (9 months ago)	Sep 30 02:49:02 ns postfix/submission/smtpd[1871339]: improper command pipelining after CONNECT from ... show more Sep 30 02:49:02 ns postfix/submission/smtpd[1871339]: improper command pipelining after CONNECT from unknown[12.150.243.23]: \026\003\001\005\250\001\000\005\244\003\003\276}Q\315WI\316[ml\033wQe\346\367\326K\366$\366\005\236\r%\201i\245Pb\311: \|\f\326\362yR\255\020A\277u\274\332:\272(\005gN\030rH\a\207w\033j\033\265\001oR\000\032\300+\300/\300,\3000\314\251\314\250\300\t\300\023\300\n\300\024\023\001 ... show less	Web Spam Email Spam Port Scan Brute-Force
🇭🇺 Lacika555	2025-09-29 23:29:20 (9 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇫🇷 solution.it	2025-09-29 23:25:19 (9 months ago)	Sep 30 01:25:12 vps789997 smtpd[1970954]: 3b204c8a6de5237d smtp connected address=12.150.243.23 host ... show more Sep 30 01:25:12 vps789997 smtpd[1970954]: 3b204c8a6de5237d smtp connected address=12.150.243.23 host=<unknown> Sep 30 01:25:18 vps789997 smtpd[1970954]: 3b204c8a6de5237d smtp failed-command command="AUTH PLAIN (...)" result="535 Authentication failed" show less	Brute-Force
🇫🇷 ingroscart.it	2025-09-29 22:16:05 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 12.150.243.23 (US/United States/-)	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-29 20:09:04 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 SvrAdmin	2025-09-29 20:01:57 (9 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 12.150.243.23 (US/United States/-): 5 in the last 3600 ... show more [101] (smtpauth) Failed SMTP AUTH login from 12.150.243.23 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-09-29 16:31:01 dovecot_plain authenticator failed for (unsfers) [12.150.243.23]:54938: 535 Incorrect authentication data ([email protected]) 2025-09-29 16:35:52 dovecot_plain authenticator failed for (demically) [12.150.243.23]:54159: 535 Incorrect authentication data ([email protected]) 2025-09-29 16:38:32 dovecot_plain authenticator failed for (fowdionsly) [12.150.243.23]:16601: 535 Incorrect authentication data ([email protected]) 2025-09-29 16:46:39 dovecot_plain authenticator failed for (enties) [12.150.243.23]:42023: 535 Incorrect authentication data ([email protected]) 2025-09-29 17:01:53 dovecot_plain authenticator failed for (dullon) [12.150.243.23]:38407: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2025-09-29 13:49:57 (9 months ago)	spamd: identified spam	Email Spam

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.124

🇺🇸 54.82.65.177

🇧🇩 27.147.200.143

🇨🇦 4.204.201.85

🇮🇳 206.1.21.1

🇨🇳 157.148.122.208

🇵🇰 153.117.38.138

🇨🇳 117.50.208.11

🇺🇦 94.131.199.181

🇫🇷 91.231.89.246

🇸🇪 83.233.149.204

🇱🇹 81.30.98.27

🇺🇸 45.194.67.29

🇸🇬 54.255.184.132

🇺🇸 52.146.21.18

🇳🇱 45.148.10.147

🇩🇪 4.184.121.217

🇱🇹 212.192.23.205

🇺🇸 185.191.171.9

🇸🇬 165.22.49.138