JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.72.196.74

154.72.196.74 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 0%: ?

ISP	NITA-U
Usage Type	Government
ASN	AS327724
Hostname(s)	mail.ifms.go.ug
Domain Name	nita.go.ug
Country	🇺🇬 Uganda
City	Kampala, Central Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.72.196.74

Whois 154.72.196.74

IP Abuse Reports for 154.72.196.74:

This IP address has been reported a total of 63 times from 32 distinct sources. 154.72.196.74 was first reported on June 3rd 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lia	2025-04-03 15:44:45 (1 year ago)	[UFW] 443 (TCP)	Port Scan Web App Attack
🇺🇸 DidIMakeYouMad	2024-12-09 16:34:00 (1 year ago)	Authentication-Results: spf=softfail (sender IP is 154.72.196.74) smtp.mailfrom=gmail.com; dkim=no ... show more Authentication-Results: spf=softfail (sender IP is 154.72.196.74) smtp.mailfrom=gmail.com; dkim=none (message not signed) header.d=none;dmarc=fail action=none header.from=gmail.com;compauth=fail reason=001 Reply-To: <[email protected]> From: United Nations <[email protected]> Subject: [SUSPECTED SPAM] Re: Waiting to hear from you. Message-ID: <[email protected]> To: Undisclosed recipients:; Return-Path: [email protected] Attention:Beneficiary We have just found out that our UN approved compensation payment has still not been paid to you.respond back with your name and address so that we can resolve this. Ms. Marion Barthelemy Director,Compensation payment office Email secured by IFMS show less	Phishing Email Spam Spoofing
Anonymous	2024-12-09 15:06:00 (1 year ago)	154.72.196.74	Email Spam
🇹🇭 thaizone.com	2024-09-02 07:32:20 (1 year ago)	High probability of spam	Email Spam
🇷🇸 Smel	2024-07-19 13:49:07 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇷🇸 Smel	2024-06-18 05:19:05 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇺🇸 lavnet.net	2024-06-13 13:44:53 (2 years ago)	Jun 13 13:34:41 angela postfix/smtpd[2398716]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196 ... show more Jun 13 13:34:41 angela postfix/smtpd[2398716]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 13:39:47 angela postfix/smtpd[2399449]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 13:44:53 angela postfix/smtpd[2399697]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> ... show less	Brute-Force Web App Attack
🇺🇸 lavnet.net	2024-06-13 12:26:19 (2 years ago)	Jun 13 12:16:05 angela postfix/smtpd[2393198]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196 ... show more Jun 13 12:16:05 angela postfix/smtpd[2393198]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 12:21:14 angela postfix/smtpd[2393581]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 12:26:19 angela postfix/smtpd[2393843]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> ... show less	Brute-Force Web App Attack
🇺🇸 lavnet.net	2024-06-13 11:06:49 (2 years ago)	Jun 13 10:56:39 angela postfix/smtpd[2386702]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196 ... show more Jun 13 10:56:39 angela postfix/smtpd[2386702]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 11:01:44 angela postfix/smtpd[2386702]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> Jun 13 11:06:49 angela postfix/smtpd[2386834]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> ... show less	Brute-Force Web App Attack
🇩🇪 hbrks	2024-06-13 11:03:51 (2 years ago)	Transcript of session follows. Out: 220 mail.p4u.xyz ESMTP Postfix In: EHLO ifms-exchprod3.ifms.go. ... show more Transcript of session follows. Out: 220 mail.p4u.xyz ESMTP Postfix In: EHLO ifms-exchprod3.ifms.go.ug Out: 250-mail.p4u.xyz Out: 250-PIPELINING Out: 250-SIZE 502400000 Out: 250-ETRN Out: 250-STARTTLS Out: 250-ENHANCEDSTATUSCODES Out: 250-8BITMIME Out: 250-DSN Out: 250 CHUNKING In: STARTTLS Out: 220 2.0.0 Ready to start TLS In: EHLO ifms-exchprod3.ifms.go.ug Out: 250-mail.p4u.xyz Out: 250-PIPELINING Out: 250-SIZE 502400000 Out: 250-ETRN Out: 250-AUTH PLAIN LOGIN Out: 250-AUTH=PLAIN LOGIN Out: 250-ENHANCEDSTATUSCODES Out: 250-8BITMIME Out: 250-DSN Out: 250 CHUNKING In: MAIL FROM:<[email protected]> SIZE=8489 AUTH=<> BODY=7BIT Out: 250 2.1.0 Ok In: RCPT TO:<[email protected]> Out: 550 5.7.1 <ifms-exchprod3.ifms.go.ug>: Helo command rejected: Host not found In: QUIT Out: 221 2.0.0 ByeFor other detai ... show less	Email Spam Hacking Brute-Force
🇨🇿 unhfree.net	2024-05-30 08:00:49 (2 years ago)	May 29 17:19:28 canopus postfix/smtpd[1460899]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.19 ... show more May 29 17:19:28 canopus postfix/smtpd[1460899]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> May 29 17:24:32 canopus postfix/smtpd[1462041]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> May 30 09:50:40 canopus postfix/smtpd[1683718]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ifms-exchprod3.ifms.go.ug> May 30 09:55:45 canopus postfix/smtpd[1684885]: NOQUEUE: reject: RCPT from mail.ifms.go.ug[154.72.196.74]: 450 4.1.8 < ... show less	Brute-Force Exploited Host
🇷🇸 Smel	2024-05-29 16:04:05 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇭🇺 Lacika555	2024-05-15 10:49:07 (2 years ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇺🇸 DidIMakeYouMad	2024-04-29 15:10:00 (2 years ago)	Return-Path: <[email protected]> Received: from ifms-exchprod3.ifms.go.ug (mail.ifms.go. ... show more Return-Path: <[email protected]> Received: from ifms-exchprod3.ifms.go.ug (mail.ifms.go.ug. [154.72.196.74]) Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 154.72.196.74 as permitted sender) client-ip=154.72.196.74; Reply-To: <[email protected]> From: "United Nations." <[email protected]> Subject: [SPAM] Waiting to hear from you. Message-ID: <[email protected]> To: Undisclosed recipients:; This email is to those that were unable to receive their inheritance and awarded funds, foreign contractors that may have not received their contract sums. The decision to compensate you and a few other persons listed in the same category with the sum of $4,600,000.00 was collectively agreed upon, thus preventing all common and established governmental factors from affecting your compensation fund payment. show less	Email Spam
Anonymous	2024-03-18 15:39:59 (2 years ago)	postfix	Email Spam Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.29

🇩🇪 193.124.20.252

🇳🇱 192.42.116.67

🇵🇰 59.103.100.111

🇺🇸 34.30.93.42

🇪🇸 212.89.15.129

🇫🇷 212.47.231.237

🇨🇴 185.240.215.110

🇻🇳 163.227.161.160

🇨🇻 156.232.63.189

🇹🇼 114.35.132.12

🇷🇺 109.197.199.155

🇺🇸 104.248.124.16

🇹🇼 101.13.5.30

🇮🇷 94.184.17.125

🇮🇳 27.123.113.30

🇭🇷 154.47.29.148

🇩🇪 151.243.11.160

🇻🇳 116.110.222.73

🇩🇪 104.248.130.34