JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.180.123.249

157.180.123.249 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 29%: ?

29%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.249.123.180.157.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.180.123.249

Whois 157.180.123.249

IP Abuse Reports for 157.180.123.249:

This IP address has been reported a total of 28 times from 10 distinct sources. 157.180.123.249 was first reported on October 2nd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 Dimitrios Matzios	2026-06-15 17:07:00 (2 weeks ago)	A device at the “157.180.123.249” IP address has made a large number of invalid login attempts ... show more A device at the “157.180.123.249” IP address has made a large number of invalid login attempts against the account “[email protected]”. This brute force attempt has exceeded the maximum number of failed login attempts that the system allows. For security purposes, the system has temporarily blocked this IP address in order to prevent further attempts. Service: dovecot Local IP Address: 188.64.56.18 Local Port: 995 Remote IP Address: 157.180.123.249 Remote Port: 63191 Authentication Database: mail Username: [email protected] Number of authentication failures: 5 Maximum number allowed: 5 show less	Brute-Force
Anonymous	2026-06-15 15:39:02 (2 weeks ago)	...	Brute-Force
🇮🇩 sockominfo	2026-06-15 15:00:58 (2 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-15 14:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 5.2/10 (MEDIUM). Reported b ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 5.2/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 Mediashaker	2026-06-09 13:56:38 (3 weeks ago)	157.180.123.249 (FI/Finland/static.249.123.180.157.clients.your-server.de), 5 distributed imapd atta ... show more 157.180.123.249 (FI/Finland/static.249.123.180.157.clients.your-server.de), 5 distributed imapd attacks on account [redacted] show less	Brute-Force
🇧🇷 dominioz	2026-06-09 13:28:30 (3 weeks ago)	157.180.123.249 [1F00] 10:28:27 Authentication [POP3] - Result=0, [email protected] ... show more 157.180.123.249 [1F00] 10:28:27 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇸🇬 pusathosting.com	2026-06-08 15:25:07 (3 weeks ago)	imap1 failed login	Brute-Force
🇧🇷 dominioz	2026-06-08 15:24:36 (3 weeks ago)	157.180.123.249 [1F00] 12:24:33 Authentication [POP3] - Result=0, [email protected] ... show more 157.180.123.249 [1F00] 12:24:33 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇮🇩 sockominfo	2026-06-08 13:00:57 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-08 12:00:52 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-08 11:00:17 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 4.9/10 (MEDIUM). Reported b ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 4.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-05 15:00:42 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-05 14:00:39 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.1/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-05 13:00:39 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-05 12:00:46 (3 weeks ago)	Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 157.180.123.249. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 203.88.119.100

🇱🇰 124.43.6.160

🇬🇧 20.117.48.238

🇺🇸 205.210.31.104

🇺🇸 198.251.83.40

🇺🇸 187.77.6.41

🇷🇺 178.178.222.58

🇺🇸 172.237.136.85

🇫🇮 147.185.133.215

🇸🇬 103.189.234.57

🇻🇳 101.99.22.200

🇭🇰 218.190.8.165

🇵🇰 182.186.127.248

🇩🇪 91.92.33.248

🇳🇱 45.148.10.151

🇺🇸 44.193.248.119

🇺🇸 44.53.200.196

🇸🇦 154.205.134.214

🇮🇹 151.0.160.69

🇺🇸 147.185.132.64