129.154.61.196

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
21 reports
9 reporters · latest 1 day ago
ISP
Oracle Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracle.com
Country
🇰🇷 Korea (the Republic of)
City
Chuncheon, Gangwon-do
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 14 🇧🇷 Brazil 2 🇨🇴 Colombia 1
Most common categories Brute-Force 20 Email Spam 2 Spoofing 1 SSH 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-14T00:08:41+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-13T02:24:25+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-12T14:10:08+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇲🇾 TPuser
Honeypot catch: used a leaked decoy OpenAI-style API key. Request: GET /v1/models. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. Automated credential theft / API key abuse.
Hacking Web App Attack
🇨🇿 janekCZ
Fail2Ban report from jail 'postfix': 2026-11-11T22:55:35.243784+01:00 mail postfix/smtps/smtpd[1688610]: warning: unknown[129.154.61.196]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ...
Brute-Force SSH
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-11T17:26:05+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇹🇭 thaizone.com
Password guessing attack (SM11) #1
Email Spam Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇬🇧 killian7603
Logon Policy Violation
Email Spam Spoofing Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-05T04:43:46+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-05T02:25:24+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇧🇷 KingHost
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-04T11:54:13+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-04T08:43:09+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 129.154.61.196 2026-11-04T05:06:38+0100 warning: unknown[129.154.61.196]: SASL authentication failed
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 189.113.249.175
🇺🇸 134.209.213.240
🇻🇳 125.212.231.55
🇹🇳 102.156.241.83
🇷🇴 92.118.39.49
🇫🇷 84.247.128.57
🇺🇸 83.142.52.107
🇬🇧 5.226.140.126
🇰🇷 220.122.115.9
🇩🇪 217.181.93.225
🇧🇷 205.210.31.254
🇸🇰 188.121.168.214
🇦🇷 179.37.51.76
🇺🇸 173.252.69.115
🇫🇮 157.22.47.228
🇨🇭 104.251.180.156
🇺🇸 77.95.172.130
🇨🇳 61.159.85.53
🇮🇱 34.165.34.164
🇩🇪 217.181.94.184
feedback