JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.126.222.244

Activity Trending Down

Abuse confidence score ?

53% Elevated

17 reports

16 reporters · latest 2 weeks ago

ISP	JENNY INTERNET (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS327750
Domain Name	jenny.co.za
Country	🇿🇦 South Africa
City	Kruisfontein, Eastern Cape

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 154.126.222.244

Export CSV

This IP address has been reported a total of 17 times from 16 distinct sources. 154.126.222.244 was first reported on September 27th 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Canada with 3 reports; Germany with 3 reports; Brazil with 2 reports. The most common categories in these recent reports were: Brute-Force 14 times; Hacking 5 times; Email Spam 4 times; Port Scan 2 times; Open Proxy 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 hostsec_za	2026-10-06 05:33:50 (2 weeks ago)	IMAP/POP3 Auth Attack. 25 failed logins in 24 hours.	Brute-Force
🇩🇪 itak	2026-10-06 03:04:29 (2 weeks ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force
🇩🇪 FeG Deutschland	2026-10-06 02:18:04 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
Anonymous	2026-10-06 01:13:07 (2 weeks ago)	2026-10-06T01:12:38.635523 odie.crmd.co.za auth[66370]: pam_unix(dovecot:auth): authentication failu ... show more 2026-10-06T01:12:38.635523 odie.crmd.co.za auth[66370]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 [email protected] 2026-10-06T01:12:48.179116 odie.crmd.co.za auth[66370]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 [email protected] 2026-10-06T01:12:56.966254 odie.crmd.co.za auth[66370]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 [email protected] ... show less	Brute-Force Email Spam Hacking
🇨🇦 Mediashaker	2026-10-05 20:28:43 (2 weeks ago)	(pop3d) Failed POP3 login from 154.126.222.244 (-)	Brute-Force
🇵🇾 SecOpsSL	2026-10-05 19:11:28 (2 weeks ago)	2026-10-05 16:11:27,251 WARN [ImapSSLServer-3165] [ip=192.168.0.25;oip=154.126.222.244;via=192.168. ... show more 2026-10-05 16:11:27,251 WARN [ImapSSLServer-3165] [ip=192.168.0.25;oip=154.126.222.244;via=192.168.0.25(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=54210;] security - cmd=Auth; [email protected]; protocol=imap; error=authentication failed for [[email protected]], invalid password; show less	Email Spam Brute-Force
🇳🇱 Mangelot Hosting	2026-10-05 05:43:01 (2 weeks ago)	(dovecot_invalid_user) srv102 Dovecot login on non-existent account 154.126.222.244 (ZA/South Africa ... show more (dovecot_invalid_user) srv102 Dovecot login on non-existent account 154.126.222.244 (ZA/South Africa/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 5 07:42:58 dovecot[1299904]: imap-login: Login aborted: Connection closed (auth failed, 2 attempts in 15 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=154.126.222.244, lip=0.0.0.x, TLS, session=<LiW6WRFdjZaaft70> show less	Web App Attack
🇩🇪 menelaos foskolos	2026-10-04 23:48:13 (2 weeks ago)	2026-10-05T02:47:53.515367+03:00 pegasus.easyware.gr auth[413512]: pam_unix(dovecot:auth): authentic ... show more 2026-10-05T02:47:53.515367+03:00 pegasus.easyware.gr auth[413512]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 2026-10-05T02:48:03.282147+03:00 pegasus.easyware.gr auth[413512]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 2026-10-05T02:48:12.091053+03:00 pegasus.easyware.gr auth[413512]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=154.126.222.244 ... show less	Brute-Force Email Spam
🇺🇸 OolutionTech	2026-10-04 18:18:20 (2 weeks ago)	Attempted to use server as an SMTP open relay	Hacking Open Proxy
🇦🇺 FireGuard Server	2026-10-04 01:55:10 (3 weeks ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=143	Port Scan Hacking
🇦🇹 AustrianSimon	2026-10-03 09:17:52 (3 weeks ago)	03 Oct 2026 09:17:52UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 03 Oct 2026 09:17:52UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 154.126.222.244 show less	Brute-Force
🇧🇷 dominioz	2026-10-02 08:03:03 (3 weeks ago)	154.126.222.244 [1D48] 05:02:52 Authentication [IMAP] - Result=0, [email protected] ... show more 154.126.222.244 [1D48] 05:02:52 Authentication [IMAP] - Result=0, [email protected], Method=0 154.126.222.244 [1D48] 05:02:57 Authentication [IMAP] - Result=0, [email protected], Method=0 154.126.222.244 [1D48] 05:03:01 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇷🇸 Smel	2026-09-27 16:41:20 (4 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇺🇸 TAY	2026-09-27 09:36:25 (4 weeks ago)	2026-09-27 17:36:04 auth-worker(78289): Info: sql(luisewu,154.126.222.244,<MteUrXNcs8+aft70>): unkno ... show more 2026-09-27 17:36:04 auth-worker(78289): Info: sql(luisewu,154.126.222.244,<MteUrXNcs8+aft70>): unknown user 2026-09-27 17:36:12 auth-worker(78289): Info: sql(luisewu,154.126.222.244,<MteUrXNcs8+aft70>): unknown user 2026-09-27 17:36:19 auth-worker(78289): Info: sql(luisewu,154.126.222.244,<MteUrXNcs8+aft70>): unknown user 2026-09-27 17:36:25 imap-login: Info: Disconnected (auth failed, 3 attempts in 22 secs): user=<luisewu>, method=PLAIN, rip=154.126.222.244, lip=162.220.160.187, TLS, session=<MteUrXNcs8+aft70> ... show less	Brute-Force
🇨🇦 Mediashaker	2026-09-27 07:42:01 (4 weeks ago)	(pop3d) Failed POP3 login from 154.126.222.244 (-)	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 192.175.111.246

🇳🇱 185.93.89.79

🇯🇵 172.235.210.84

🇨🇲 154.70.102.114

🇺🇸 142.0.87.180

🇺🇸 129.121.115.239

🇺🇸 212.134.173.11

🇳🇱 192.253.248.223

🇦🇷 190.246.49.62

🇺🇸 188.119.190.99

🇦🇷 181.26.119.228

🇧🇷 177.66.185.122

🇨🇳 117.50.51.198

🇺🇸 108.53.86.130

🇸🇬 103.187.147.214

🇹🇬 102.212.94.71

🇮🇹 93.41.2.193

🇷🇴 92.118.39.77

🇮🇹 87.3.78.15

🇸🇦 84.13.138.234