JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.249.23.28

173.249.23.28 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3217774.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.249.23.28

Whois 173.249.23.28

IP Abuse Reports for 173.249.23.28:

This IP address has been reported a total of 103 times from 79 distinct sources. 173.249.23.28 was first reported on August 16th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 12:43:59 (8 hours ago)	Portscan: TCP/993, TCP/587 (5x), TCP/465 (4x)	Port Scan
Anonymous	2026-06-10 04:34:59 (16 hours ago)	SMTP AUTH 173.249.23.28 (SMTP_LOGIN_ATTEMPT)	Brute-Force
🇩🇪 www.fransveldman.world	2026-06-10 04:09:55 (16 hours ago)	Jun 10 04:09:53 mail postfix/submission/smtpd[573337]: lost connection after CONNECT from vmi3217774 ... show more Jun 10 04:09:53 mail postfix/submission/smtpd[573337]: lost connection after CONNECT from vmi3217774.contaboserver.net[173.249.23.28] Jun 10 04:09:55 mail postfix/submission/smtpd[572306]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: ... show less	Brute-Force Email Spam
🇳🇱 Godert Jan van Manen	2026-06-10 04:04:03 (16 hours ago)	Jun 10 05:56:49 odin postfix/submission/smtpd[23165]: warning: vmi3217774.contaboserver.net[173.249. ... show more Jun 10 05:56:49 odin postfix/submission/smtpd[23165]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 05:56:55 odin postfix/smtps/smtpd[20301]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 06:04:03 odin postfix/submission/smtpd[23166]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: show less	Brute-Force
🇸🇬 lookersolution.com	2026-06-10 04:00:04 (16 hours ago)	Repeated failed SMTP authentication attempts detected on mail server.	Email Spam Hacking Brute-Force
🇬🇧 stom	2026-06-10 03:57:31 (17 hours ago)	2026-06-10T03:57:28.107238ls1.tom2.co.uk postfix/smtpd[9914]: warning: vmi3217774.contaboserver.net[ ... show more 2026-06-10T03:57:28.107238ls1.tom2.co.uk postfix/smtpd[9914]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇳🇱 Godert Jan van Manen	2026-06-10 03:26:39 (17 hours ago)	Jun 10 05:22:36 odin postfix/submission/smtpd[10308]: warning: vmi3217774.contaboserver.net[173.249. ... show more Jun 10 05:22:36 odin postfix/submission/smtpd[10308]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 05:22:42 odin postfix/smtps/smtpd[4454]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 05:26:39 odin postfix/submission/smtpd[12120]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: show less	Brute-Force
🇯🇵 gomasy	2026-06-10 03:24:11 (17 hours ago)	2026-06-10T12:24:11.026330+09:00 ssv02 auth[2006650]: pam_unix(dovecot:auth): authentication failure ... show more 2026-06-10T12:24:11.026330+09:00 ssv02 auth[2006650]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=********** rhost=173.249.23.28 ... show less	Brute-Force
🇩🇪 Thomas	2026-06-10 03:12:03 (17 hours ago)	Jun 10 04:20:21 v22016083778036931 postfix/submission/smtpd[3035943]: warning: vmi3217774.contaboser ... show more Jun 10 04:20:21 v22016083778036931 postfix/submission/smtpd[3035943]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 10 04:20:27 v22016083778036931 postfix/smtps/smtpd[3035945]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 10 05:12:03 v22016083778036931 postfix/submission/smtpd[3055559]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇩🇪 menelaos foskolos	2026-06-10 03:11:37 (17 hours ago)	2026-06-10T05:19:53.947679+03:00 pegasus.easyware.gr postfix/smtpd[1538499]: warning: vmi3217774.con ... show more 2026-06-10T05:19:53.947679+03:00 pegasus.easyware.gr postfix/smtpd[1538499]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-06-10T05:19:55.907601+03:00 pegasus.easyware.gr postfix/smtpd[1538506]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-06-10T06:11:36.686496+03:00 pegasus.easyware.gr postfix/smtpd[1652562]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force Email Spam
🇺🇸 NXTwoThou	2026-06-10 03:10:00 (17 hours ago)	SMTP EHLO test.local	Port Scan
🇳🇱 Godert Jan van Manen	2026-06-10 03:08:36 (17 hours ago)	Jun 10 05:05:16 odin postfix/submission/smtpd[30368]: warning: vmi3217774.contaboserver.net[173.249. ... show more Jun 10 05:05:16 odin postfix/submission/smtpd[30368]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 05:05:22 odin postfix/smtps/smtpd[18396]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: Jun 10 05:08:36 odin postfix/submission/smtpd[32089]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: show less	Brute-Force
🇩🇪 8legz.net	2026-06-10 03:07:37 (17 hours ago)	2026-06-10T03:15:57.411703+01:00 8legz postfix/submission/smtpd[1449940]: warning: vmi3217774.contab ... show more 2026-06-10T03:15:57.411703+01:00 8legz postfix/submission/smtpd[1449940]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-10T04:07:37.274746+01:00 8legz postfix/submission/smtpd[1450138]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇩🇪 gadix	2026-06-10 03:02:04 (17 hours ago)	Jun 10 04:10:31 srv06 postfix/smtpd[130340]: warning: vmi3217774.contaboserver.net[173.249.23.28]: S ... show more Jun 10 04:10:31 srv06 postfix/smtpd[130340]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure Jun 10 04:10:31 srv06 postfix/smtpd[130409]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure Jun 10 05:02:03 srv06 postfix/smtpd[139330]: warning: vmi3217774.contaboserver.net[173.249.23.28]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 LRob.fr	2026-06-10 03:00:04 (17 hours ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 203.162.100.15

🇨🇴 186.146.235.58

🇨🇳 183.199.243.89

🇨🇳 123.5.239.175

🇵🇭 112.198.133.117

🇭🇰 65.181.88.245

🇨🇳 42.101.43.119

🇺🇸 2001:468:500:104:9999::229

🇻🇪 201.249.193.193

🇹🇬 156.38.73.89

🇵🇱 87.251.64.155

🇺🇸 73.197.147.225

🇧🇷 45.165.238.2

🇫🇷 45.95.233.88

🇺🇸 2607:f8b0:4001:c76::12e

🇳🇱 195.178.110.30

🇺🇸 172.212.179.199

🇮🇳 103.180.212.135

🇮🇳 103.54.101.203

🇳🇱 93.123.109.114