AbuseIPDB » 162.252.18.246

162.252.18.246 was found in our database!

This IP was reported 729 times. Confidence of Abuse is 100%: ?

100%

ISP	GeoLinks
Usage Type	Fixed Line ISP
ASN	AS54483
Domain Name	geolinks.com
Country	United States of America
City	San Dimas, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 162.252.18.246

Whois 162.252.18.246

IP Abuse Reports for 162.252.18.246:

This IP address has been reported a total of 729 times from 207 distinct sources. 162.252.18.246 was first reported on January 17th 2025, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
dwmp	2025-02-13 22:16:10 (6 minutes ago)	Feb 13 20:08:43 plesk postfix/smtpd[2527698]: warning: unknown[162.252.18.246]: SASL LOGIN authentic ... show moreFeb 13 20:08:43 plesk postfix/smtpd[2527698]: warning: unknown[162.252.18.246]: SASL LOGIN authentication failed: authentication failure Feb 13 20:08:44 plesk postfix/smtpd[2527698]: disconnect from unknown[162.252.18.246] ehlo=1 auth=0/1 commands=1/2 Feb 13 23:16:10 plesk postfix/smtpd[2536680]: warning: unknown[162.252.18.246]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force SSH
erichk4	2025-02-13 22:11:09 (11 minutes ago)	SMTP-Bruteforce-attack	Brute-Force
Anonymous	2025-02-13 21:50:21 (32 minutes ago)	2025-02-13 21:50:20 postfix/smtpd warning: unknown[162.252.18.246]: SASL LOGIN authentication failed ... show more2025-02-13 21:50:20 postfix/smtpd warning: unknown[162.252.18.246]: SASL LOGIN authentication failed: authentication failure, username=[xxx] show less	Hacking Brute-Force
rtbh.com.tr	2025-02-13 20:49:52 (1 hour ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
UMP-PL	2025-02-13 20:46:43 (1 hour ago)	Feb 13 21:46:42 rabbit postfix/submission/smtpd[3954923]: warning: unknown[162.252.18.246]: SASL PLA ... show moreFeb 13 21:46:42 rabbit postfix/submission/smtpd[3954923]: warning: unknown[162.252.18.246]: SASL PLAIN authentication failed: (reason unavai ... show less	Brute-Force
Swinnen	2025-02-13 20:33:39 (1 hour ago)	=Feb 13 21:23:46 mail postfix/smtpd\[9471\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authenti ... show more=Feb 13 21:23:46 mail postfix/smtpd\[9471\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 21:32:24 mail postfix/smtpd\[13732\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 21:33:38 mail postfix/smtpd\[13732\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
Anonymous	2025-02-13 20:07:47 (2 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
marshy.com.au	2025-02-13 20:04:41 (2 hours ago)	162.252.18.246 (US/United States/-), 5 distributed smtpauth attacks on account [contact] in the last ... show more162.252.18.246 (US/United States/-), 5 distributed smtpauth attacks on account [contact] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2025-02-14 06:50:12 dovecot_login authenticator failed for ([162.252.18.246]) [162.252.18.246]:42706: 535 Incorrect authentication data (set_id=contact) 2025-02-14 07:04:36 dovecot_login authenticator failed for (90.109.33.58.broad.xw.sh.dynamic.163data.com.cn) [58.33.109.90]:35001: 535 Incorrect authentication data (set_id=contact) 2025-02-14 06:58:02 dovecot_login authenticator failed for ([211.141.127.170]) [211.141.127.170]:53989: 535 Incorrect authentication data (set_id=contact) 2025-02-14 06:36:35 dovecot_login authenticator failed for ([128.106.196.150]) [128.106.196.150]:5085: 535 Incorrect authentication data (set_id=contact) 2025-02-14 06:58:38 dovecot_login authenticator failed for p72069-obmd01.osaka.ocn.ne.jp [180.7.119.68]:47204: 535 Incorrect authentication data (set_id=contact) IP Addresses Blocked: show less	Port Scan
Swinnen	2025-02-13 19:50:05 (2 hours ago)	=Feb 13 20:37:34 mail postfix/smtpd\[13628\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authent ... show more=Feb 13 20:37:34 mail postfix/smtpd\[13628\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 20:48:23 mail postfix/smtpd\[11585\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 20:50:05 mail postfix/smtpd\[11092\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
Swinnen	2025-02-13 18:51:59 (3 hours ago)	=Feb 13 19:36:53 mail postfix/smtpd\[10677\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authent ... show more=Feb 13 19:36:53 mail postfix/smtpd\[10677\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 19:49:10 mail postfix/smtpd\[11092\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 13 19:51:59 mail postfix/smtpd\[10925\]: warning: unknown\[162.252.18.246\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
KZP	2025-02-13 18:00:10 (4 hours ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
singertc	2025-02-13 17:48:51 (4 hours ago)	2025-02-13 18:48:50 H=([162.252.18.246]) [162.252.18.246] F=<[email protected]> rejecte ... show more2025-02-13 18:48:50 H=([162.252.18.246]) [162.252.18.246] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2025-02-13 18:48:50 H=([162.252.18.246]) [162.252.18.246] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted ... show less	Email Spam Hacking
Infocom	2025-02-13 16:41:00 (5 hours ago)	MAIL_Brute-Force	Brute-Force
INTEQ	2025-02-13 16:31:58 (5 hours ago)	Brute force attack from 162.252.18.246	Brute-Force
Paul Smith	2025-02-13 15:58:54 (6 hours ago)	Email Auth Brute force attack 2/2 in last day	Brute-Force