159.196.140.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
56 reports
43 reporters · latest 7 hours ago
ISP
Aussie Broadband Ltd
Usage Type
Fixed Line ISP
ASN
AS4764
Domain Name
aussiebroadband.com.au
Country
🇦🇺 Australia
City
Perth, Western Australia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
56 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 13 🇮🇹 Italy 8 🇫🇷 France 4
Most common categories Brute-Force 51 Port Scan 6 Exploited Host 6 Email Spam 5 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 TFG-Server
Automated block: Email password guessing x4 in 24 h (mail ports only)
Brute-Force
🇺🇦 space.ua
MAIL_Brute-Force
Brute-Force
🇭🇺 Lacika555
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇺🇸 adnscom.com
IPS trigger: dovecot scanning/attack
Brute-Force Hacking
🇫🇷 Stara
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
Brute-Force DDoS Attack
🇩🇪 LRob
SMTP AUTH probe | 2026-11-08 06:39 UTC
Port Scan
Anonymous
Authentication failure
Brute-Force
🇨🇿 janekCZ
Fail2Ban report from jail 'postfix': 2026-11-08T06:30:59.211324+01:00 mail postfix/smtps/smtpd[1160133]: warning: unknown[159.196.140.149]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ...
Brute-Force SSH
🇸🇪 1337v411
2026-11-08 06:10:13 login_server authenticator failed for ([65.20.237.94]) [159.196.140.149]: 535 Incorrect authentication data (set_id=<REDACTED>)
Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇬🇧 Joe-Mark
Found Blocklist De . proto=tcp . spt=33962 . dpt=25 . NFTABLES .
Email Spam
🇩🇪 mnpx
SMTP brute forcing (2× over 5h:56m); first seen here 2026-10-31T03:45Z
Brute-Force
🇫🇷 basing
2026-10-31 10:40:21 pzb SASL PLAIN auth failed: rhost=159.196.140.149...
Brute-Force
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇩🇪 LRob
SMTP AUTH probe | 2026-10-31 09:13 UTC
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.182.228.222
🇺🇸 216.25.89.117
🇳🇱 159.223.221.194
🇮🇶 65.20.189.52
🇮🇳 64.227.135.174
🇨🇷 186.151.101.28
🇺🇦 178.74.227.117
🇺🇸 170.168.28.102
🇻🇳 123.20.135.140
🇷🇴 92.118.39.50
🇪🇬 41.128.181.196
🇫🇷 40.89.176.14
🇺🇸 34.86.4.52
🇿🇦 4.168.232.22
🇨🇿 185.156.121.64
🇳🇬 165.154.11.149
🇨🇳 115.190.243.73
🇺🇸 104.229.41.98
🇳🇱 64.205.72.158
🇺🇸 51.8.102.17
feedback