JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.72.159.0

148.72.159.0 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	velia.net
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30083
Hostname(s)	moon.truehostdns.com
Domain Name	velia.net
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.72.159.0

Whois 148.72.159.0

IP Abuse Reports for 148.72.159.0:

This IP address has been reported a total of 31 times from 25 distinct sources. 148.72.159.0 was first reported on June 18th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 gadix	2026-06-18 17:32:13 (7 hours ago)	2026-06-18 11:40:18,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 202 ... show more 2026-06-18 11:40:18,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 2026-06-18 15:52:42,044 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 2026-06-18 19:32:12,493 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 ... show less	Brute-Force
🇩🇪 strxmpp	2026-06-18 16:33:39 (8 hours ago)	148.72.159.0 - - [18/Jun/2026:18:33:38 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1. ... show more 148.72.159.0 - - [18/Jun/2026:18:33:38 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 4755 "-" "SecurityAudit/1.0" ... show less	Bad Web Bot
Anonymous	2026-06-18 16:21:10 (8 hours ago)	RUPLDE WEBEXPLOIT 148.72.159.0 (moon.truehostdns.com)	Web App Attack
🇩🇪 Vegascosmetics	2026-06-18 15:44:33 (9 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇳🇱 Godert Jan van Manen	2026-06-18 15:42:09 (9 hours ago)	Jun 18 17:40:05 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<mcJ//YhUWt2US ... show more Jun 18 17:40:05 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<mcJ//YhUWt2USJ8A>): unknown user Jun 18 17:40:07 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<mcJ//YhUWt2USJ8A> Jun 18 17:41:03 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<sif0AIlUcu2USJ8A>): unknown user Jun 18 17:41:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<sif0AIlUcu2USJ8A> Jun 18 17:42:08 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<ivHUBIlUBtWUSJ8A>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 14:52:34 (10 hours ago)	2026-06-18T17:52:34.499934+03:00 radionet dovecot: auth: passwd-file([email protected],148.72.159.0,<2A+ ... show more 2026-06-18T17:52:34.499934+03:00 radionet dovecot: auth: passwd-file([email protected],148.72.159.0,<2A+QU4hUnNiUSJ8A>): unknown user show less	Brute-Force
Anonymous	2026-06-18 13:38:03 (11 hours ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 7 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 12:44:44 (12 hours ago)	Jun 18 14:35:03 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YYHJZ4ZUbrKUSJ8A ... show more Jun 18 14:35:03 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YYHJZ4ZUbrKUSJ8A>): unknown user Jun 18 14:35:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<YYHJZ4ZUbrKUSJ8A> Jun 18 14:37:46 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<ElB/cYZUjLmUSJ8A>): unknown user Jun 18 14:37:48 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<ElB/cYZUjLmUSJ8A> Jun 18 14:44:43 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<TKNaioZU5reUSJ8A>): unknown user show less	Brute-Force
🇫🇷 Batz	2026-06-18 12:38:41 (12 hours ago)	[148.72.159.0] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇳🇱 Godert Jan van Manen	2026-06-18 12:01:16 (13 hours ago)	Jun 18 13:56:27 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YBC+3YVU6pm ... show more Jun 18 13:56:27 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YBC+3YVU6pmUSJ8A>): unknown user Jun 18 13:56:29 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<YBC+3YVU6pmUSJ8A> Jun 18 13:59:09 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<byhh54VU8O2USJ8A>): unknown user Jun 18 13:59:11 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<byhh54VU8O2USJ8A> Jun 18 14:01:16 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<exXy7oVU8taUSJ8A>): unknown user show less	Brute-Force
🇩🇪 onlyops.app	2026-06-18 12:00:25 (13 hours ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇮🇹 abuseiphack	2026-06-18 11:42:32 (13 hours ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:34:10 (13 hours ago)	Too many failed attempts / attacks from 148.72.159.0	Brute-Force Port Scan Email Spam
🇩🇪 ecs.ge	2026-06-18 11:24:47 (13 hours ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇦🇹 AustrianSimon	2026-06-18 11:21:32 (13 hours ago)	18 Jun 2026 11:21:32UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 18 Jun 2026 11:21:32UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 148.72.159.0 show less	Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.239

🇧🇷 189.51.32.69

🇸🇬 167.172.93.203

🇱🇹 45.227.254.170

🇺🇸 2607:f8b0:4004:1001::122

🇨🇳 220.197.85.19

🇧🇷 189.51.35.162

🇮🇹 185.213.20.215

🇵🇾 181.85.209.238

🇧🇷 177.221.142.222

🇭🇰 163.53.18.118

🇯🇵 152.32.145.156

🇺🇸 140.174.189.77

🇨🇳 124.67.120.106

🇹🇼 114.34.106.146

🇺🇸 97.246.168.192

🇺🇸 91.230.168.122

🇳🇱 81.19.216.114

🇺🇸 66.132.195.34

🇧🇷 45.160.230.30