JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.172.118.49

144.172.118.49 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 69%: ?

69%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.172.118.49

Whois 144.172.118.49

IP Abuse Reports for 144.172.118.49:

This IP address has been reported a total of 210 times from 91 distinct sources. 144.172.118.49 was first reported on January 31st 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 tentwentyfour	2026-07-18 18:14:31 (11 hours ago)	Blocked for probing for SASL accounts (Email)	Brute-Force
🇩🇪 Hary74656	2026-07-18 18:14:05 (11 hours ago)	Jul 18 20:13:52 odin postfix/smtpd[91016]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5 ... show more Jul 18 20:13:52 odin postfix/smtpd[91016]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5.7.1 Service unavailable; Client host [144.172.118.49] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/144.172.118.49 / Listed by XBL, see https://check.spamhaus.org/query/ip/144.172.118.49; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> Jul 18 20:13:53 odin postfix/smtpd[90652]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5.7.1 Service unavailable; Client host [144.172.118.49] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/144.172.118.49 / Listed by XBL, see https://check.spamhaus.org/query/ip/144.172.118.49; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> Jul 18 20:13:53 odin postfix/smtpd[91016]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5.7.1 Service unavailable; Client host [144.172.118.49] blocked u ... show less	Email Spam
🇩🇪 ut-addicted.com	2026-07-18 18:14:04 (11 hours ago)	Jul 18 20:14:03 www postfix/smtpd\[14631\]: lost connection after CONNECT from unknown\[144.172.118. ... show more Jul 18 20:14:03 www postfix/smtpd\[14631\]: lost connection after CONNECT from unknown\[144.172.118.49\] show less	Brute-Force Hacking
🇩🇪 juutis	2026-07-18 18:09:18 (11 hours ago)	Jul 18 20:09:17 butler postfix/smtpd[3389690]: warning: unknown[144.172.118.49]: SASL login authenti ... show more Jul 18 20:09:17 butler postfix/smtpd[3389690]: warning: unknown[144.172.118.49]: SASL login authentication failed: authentication failure, sasl_username=noauth show less	Brute-Force
🇵🇱 kkw	2026-07-18 18:05:56 (11 hours ago)	2026-07-18T20:05:53.373589+02:00 valhalla postfix/smtpd[1258661]: NOQUEUE: reject: RCPT from unknown ... show more 2026-07-18T20:05:53.373589+02:00 valhalla postfix/smtpd[1258661]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 504 5.5.2 <vps-3f49becf>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> 2026-07-18T20:05:54.109238+02:00 valhalla postfix/smtpd[1258661]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 504 5.5.2 <vps-3f49becf>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> 2026-07-18T20:05:54.901652+02:00 valhalla postfix/smtpd[1258661]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 504 5.5.2 <vps-3f49becf>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> ... <tp_comment> show less	Brute-Force
Anonymous	2026-07-18 17:21:21 (12 hours ago)	2026-07-18T19:21:21.812181+02:00 soli-gate postfix/smtpd[3176123]: NOQUEUE: reject: RCPT from unknow ... show more 2026-07-18T19:21:21.812181+02:00 soli-gate postfix/smtpd[3176123]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5.7.25 Client host rejected: cannot find your hostname, [144.172.118.49]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> ... show less	Brute-Force
🇮🇹 CoreTech srl	2026-07-18 15:42:32 (13 hours ago)	is-65b7aeb8 17:37:51.207 [151.1.252.27] SMTP Login failed: Incorrect password for user [coretech-msa ... show more is-65b7aeb8 17:37:51.207 [151.1.252.27] SMTP Login failed: Incorrect password for user [[email protected]]is-65b7aeb8 17:37:51.207 [151.1.252.27] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 17:38:35.362 [102.208.152.178] SMTP Login failed: User [brian] not foundis-63909a28 17:38:35.362 [102.208.152.178] SMTP Login failed: Invalid username ([email protected]) and password combination.MAIL4-new 17:41:24.776 [144.172.118.49] SMTP Login failed: Invalid username ([email protected]) and password combination.MAIL4-new 17:41:24.776 [144.172.118.49] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 17:41:21.823 [144.172.118.49] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 17:41:21.823 [144.172.118.49] SMTP Login failed: Invalid username ([email protected]) and password combination.is-6411d9d7 17:41:23.600 [144.172.118.49] SMTP Login failed: Incorrect password for us show less	Brute-Force Open Proxy
🇺🇸 Dave Hansen	2026-07-18 12:30:45 (16 hours ago)	(smtpauth) Failed SMTP AUTH login from 144.172.118.49 (US/United States/-)	Brute-Force
🇦🇹 joe-abuse	2026-07-18 02:35:14 (1 day ago)	2026-07-18T04:35:13.860195+02:00 ucs1 dovecot: auth-worker(181150): conn unix:auth-worker (pid=1045, ... show more 2026-07-18T04:35:13.860195+02:00 ucs1 dovecot: auth-worker(181150): conn unix:auth-worker (pid=1045,uid=121): auth-worker<1>: pam([email protected],144.172.118.49): unknown user (given password: you) ... show less	Brute-Force
🇺🇸 bouvier.me	2026-07-17 18:38:33 (1 day ago)	2026-07-17T14:38:32.870653sitens3 postfix/submission/smtpd[802231]: warning: unknown[144.172.118.49] ... show more 2026-07-17T14:38:32.870653sitens3 postfix/submission/smtpd[802231]: warning: unknown[144.172.118.49]: SASL LOGIN authentication failed: authentication failure 2026-07-17T14:38:32.910681sitens3 postfix/submission/smtpd[802231]: lost connection after AUTH from unknown[144.172.118.49] 2026-07-17T14:38:32.910840sitens3 postfix/submission/smtpd[802231]: disconnect from unknown[144.172.118.49] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Web Spam Brute-Force Exploited Host
Anonymous	2026-07-17 18:20:02 (1 day ago)		Hacking
🇫🇷 dwmp	2026-07-17 11:44:44 (1 day ago)	Jul 17 13:44:43 plesk postfix/smtpd[1398849]: lost connection after CONNECT from unknown[144.172.118 ... show more Jul 17 13:44:43 plesk postfix/smtpd[1398849]: lost connection after CONNECT from unknown[144.172.118.49] Jul 17 13:44:43 plesk postfix/smtpd[1399241]: warning: unknown[144.172.118.49]: SASL login authentication failed: authentication failure Jul 17 13:44:43 plesk postfix/smtpd[1399241]: NOQUEUE: reject: RCPT from unknown[144.172.118.49]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vps-3f49becf> ... show less	Brute-Force SSH
🇺🇸 Snowdome	2023-10-14 07:00:06 (2 years ago)	144.172.118.49 [T1:398355.0] with UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ... show more 144.172.118.49 [T1:398355.0] with UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.0.0 Safari/537.36 targeting domain: snowplow.io, was challenged by WAF:IAH, DetectionCategory: Open Web Proxy, ResponseTime: 13ms show less	Web App Attack
🇩🇪 niceshops.com	2023-10-14 04:32:55 (2 years ago)	Web Attack multi (Oct 23 06:32:55 Matching rules: Detect possible SQL injection - Too many SQL keyw ... show more Web Attack multi (Oct 23 06:32:55 Matching rules: Detect possible SQL injection - Too many SQL keywords (more than 3 times),Detect possible SQL injection - E.g. Select * from ) show less	SQL Injection Brute-Force Bad Web Bot Web App Attack
🇨🇿 plzenskypruvodce.cz	2023-10-14 04:31:54 (2 years ago)	[Sat Oct 14 06:31:52.857639 2023] [access_compat:error] [pid 1068245:tid 140148842936064] [client 14 ... show more [Sat Oct 14 06:31:52.857639 2023] [access_compat:error] [pid 1068245:tid 140148842936064] [client 144.172.118.49:38992] AH01797: client denied by server configuration: /var/www/lubosluka.com/www/xmlrpc.php [Sat Oct 14 06:31:53.411940 2023] [access_compat:error] [pid 1068245:tid 140148817757952] [client 144.172.118.49:38992] AH01797: client denied by server configuration: /var/www/lubosluka.com/www/xmlrpc.php ... show less	Web App Attack

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.171

🇳🇱 176.65.132.93

🇯🇵 152.32.201.247

🇻🇳 103.60.242.169

🇺🇸 45.33.68.26

🇵🇰 124.29.247.10

🇺🇸 96.126.101.72

🇨🇦 85.217.149.28

🇺🇸 81.30.98.81

🇺🇸 65.49.1.41

🇺🇸 64.62.197.149

🇨🇳 61.170.224.229

🇫🇷 13.140.190.147

🇺🇿 213.230.74.64

🇳🇱 195.178.110.232

🇳🇱 164.92.221.103

🇳🇱 157.245.75.68

🇰🇪 154.79.248.168

🇻🇳 115.79.63.243

🇲🇱 102.130.232.25