AbuseIPDB » 154.203.197.149

154.203.197.149 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 85%: ?

85%

ISP	KproHost
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214940
Domain Name	geofeed.space
Country	Netherlands
City	Kerkrade, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 154.203.197.149

Whois 154.203.197.149

IP Abuse Reports for 154.203.197.149:

This IP address has been reported a total of 80 times from 55 distinct sources. 154.203.197.149 was first reported on December 12th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
SilverZippo	2025-01-07 05:15:55 (2 weeks ago)	Web App Attack	Web App Attack
Anonymous	2025-01-07 03:21:33 (2 weeks ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
selahattinalan	2025-01-07 02:47:24 (2 weeks ago)	Jan 7 05:47:23 server postfix/smtpd[2106293]: warning: unknown[154.203.197.149]: SASL PLAIN authent ... show moreJan 7 05:47:23 server postfix/smtpd[2106293]: warning: unknown[154.203.197.149]: SASL PLAIN authentication failed: authentication failure show less	Brute-Force
Anonymous	2025-01-07 01:49:34 (2 weeks ago)	Fail2Ban - Postfix SMTP Reject - Auth Failure	Email Spam Brute-Force
Lacika555	2024-12-28 22:45:09 (3 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Fatih ÖZ	2024-12-28 21:52:01 (3 weeks ago)	Rule : SMTP 12/29/24 00:48:02 1944 154.203.197.149 *hidden-privacy* ESMTP MailEnable Se ... show moreRule : SMTP 12/29/24 00:48:02 1944 154.203.197.149 *hidden-privacy* ESMTP MailEnable Service, Version: 10.49-- ready at 12/29/24 00:48:02 88 0 12/29/24 00:48:02 1944 154.203.197.149 EHLO EHLO [154.203.197.149] *hidden-privacy* [154.203.197.149], this server offers 5 extensions 224 24 12/29/24 00:48:02 1944 154.203.197.149 AUTH AUTH LOGIN 334 VXNlcm5hbWU6 18 12 12/29/24 00:48:02 1944 154.203.197.149 AUTH {blank} 334 UGFzc3dvcmQ6 18 42 [email protected] 12/29/24 00:48:02 1944 154.203.197.149 AUTH {blank} 535 Invalid Username or Password 34 22 [email protected] show less	Email Spam Port Scan Spoofing
Dampen59	2024-12-28 20:59:33 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 154.203.197.149 (NL/The Netherlands/-): 5 in the last 3600 se ... show more(smtpauth) Failed SMTP AUTH login from 154.203.197.149 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-12-28 21:59:25 dovecot_plain authenticator failed for ([154.203.197.149]) [154.203.197.149]:50622: 535 Incorrect authentication data ([email protected]) 2024-12-28 21:59:29 dovecot_plain authenticator failed for ([154.203.197.149]) [154.203.197.149]:50657: 535 Incorrect authentication data ([email protected]) 2024-12-28 21:59:29 dovecot_plain authenticator failed for ([154.203.197.149]) [154.203.197.149]:50656: 535 Incorrect authentication data ([email protected]) 2024-12-28 21:59:29 dovecot_plain authenticator failed for ([154.203.197.149]) [154.203.197.149]:50711: 535 Incorrect authentication data ([email protected]) 2024-12-28 21:59:29 dovecot_plain authenticator failed for ([154.203.197.149]) [154.203.197.149]:50705: 535 Incorrect authentication data ([email protected]) show less	Port Scan
pusathosting.com	2024-12-28 00:22:27 (3 weeks ago)	imap2 failed login	Brute-Force
pusathosting.com	2024-12-26 00:40:47 (4 weeks ago)	imap2 failed login	Brute-Force
pusathosting.com	2024-12-25 00:27:07 (4 weeks ago)	imap2 failed login	Brute-Force
Swiptly	2024-12-24 11:32:07 (4 weeks ago)	Exim Login attempts ...	Email Spam Brute-Force
MAGIC	2024-12-24 06:06:51 (4 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-12-24 05:12:03 (4 weeks ago)	Rule : SMTP 12/24/24 05:08:24 3056 154.203.197.149 *hidden-privacy* ESMTP MailEnable Se ... show moreRule : SMTP 12/24/24 05:08:24 3056 154.203.197.149 *hidden-privacy* ESMTP MailEnable Service, Version: 10.48-10.48- ready at 12/24/24 05:08:24 97 0 12/24/24 05:08:24 3056 154.203.197.149 EHLO EHLO [154.203.197.149] *hidden-privacy* [154.203.197.149], this server offers 5 extensions 255 24 12/24/24 05:08:24 3056 154.203.197.149 AUTH {blank} 334 PDMyLjEwNjEwNTE2MDlAc3J2Mz4= 34 15 12/24/24 05:08:24 3056 154.203.197.149 AUTH {blank} 535 Invalid username or password CRAM-MD5 43 70 marco show less	Email Spam Port Scan Spoofing
mescribano	2024-12-24 05:10:01 (4 weeks ago)		Bad Web Bot Web App Attack
Anonymous	2024-12-24 04:20:27 (4 weeks ago)	(smtpauth) Failed SMTP AUTH login from 154.203.197.149 (US/United States/-)	Brute-Force