JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 179.27.158.254

179.27.158.254 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	CLIENTE ANTEL URUGUAY
Usage Type	Fixed Line ISP
ASN	AS6057
Hostname(s)	254.224-27.158.27.179.in-addr.arpa 66ad0e6124c06.nty.uy
Domain Name	antel.net.uy
Country	🇺🇾 Uruguay
City	Montevideo, Montevideo Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 179.27.158.254

Whois 179.27.158.254

IP Abuse Reports for 179.27.158.254:

This IP address has been reported a total of 29 times from 21 distinct sources. 179.27.158.254 was first reported on April 15th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-04-21 18:52:16 (2 months ago)	[AUTORAVALT][[21/04/2026 - 15:52:15 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254] ... show more [AUTORAVALT][[21/04/2026 - 15:52:15 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254]-[RANGE:179.27.158.224/27] [254.158.27.179.in-addr.arpa is an alias for 254.224-27.158.27.179.in-addr.arpa. 66ad0e6124c06.nty.uy] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing em] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-04-21 16:45:28 (2 months ago)	[AUTORAVALT][[21/04/2026 - 13:45:27 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254] ... show more [AUTORAVALT][[21/04/2026 - 13:45:27 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254]-[RANGE:179.27.158.224/27] [254.158.27.179.in-addr.arpa is an alias for 254.224-27.158.27.179.in-addr.arpa. 66ad0e6124c06.nty.uy] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing em] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-04-20 06:23:19 (2 months ago)	[AUTORAVALT][[20/04/2026 - 03:23:18 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254] ... show more [AUTORAVALT][[20/04/2026 - 03:23:18 -03:00 UTC] Attack from [CLIENTE ANTEL URUGUAY] [179.27.158.254]-[RANGE:179.27.158.224/27] [254.158.27.179.in-addr.arpa is an alias for 254.224-27.158.27.179.in-addr.arpa. 66ad0e6124c06.nty.uy] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing em] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 FeG Deutschland	2026-04-19 15:22:06 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 dwmp	2026-04-18 15:05:18 (3 months ago)	Apr 18 16:24:51 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Apr 18 16:24:51 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<7lHy07xPbpCzG57+> Apr 18 16:45:21 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<uR5JHb1PlOizG57+> Apr 18 17:05:17 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<4uOQZL1PprWzG57+> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-04-18 14:46:08 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 dwmp	2026-04-18 02:16:34 (3 months ago)	Apr 18 03:34:59 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Apr 18 03:34:59 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<d+mvErJP3oKzG57+> Apr 18 03:55:44 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<1RPpXLJPXqKzG57+> Apr 18 04:16:33 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<GHRbp7JPhsyzG57+> ... show less	Brute-Force
🇧🇷 KingHost	2026-04-17 17:41:56 (3 months ago)		Brute-Force
🇩🇪 rd1742	2026-04-17 16:06:38 (3 months ago)	Apr 17 16:06:37 quad dovecot: auth-worker(3856452): sql([email protected],179.27.158.254,<G0I9IqpPZNOzG57 ... show more Apr 17 16:06:37 quad dovecot: auth-worker(3856452): sql([email protected],179.27.158.254,<G0I9IqpPZNOzG57+>): unknown user show less	Brute-Force Exploited Host
Anonymous	2026-04-17 15:50:31 (3 months ago)	automatically banned	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-04-17 14:18:10 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇸🇬 pusathosting.com	2026-04-17 14:15:15 (3 months ago)	imap1 failed login	Brute-Force
🇫🇷 dwmp	2026-04-17 13:19:40 (3 months ago)	Apr 17 14:39:58 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Apr 17 14:39:58 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=<pmgLP6dPmNCzG57+> Apr 17 14:59:51 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=</+0ihqdP6q2zG57+> Apr 17 15:19:39 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=179.27.158.254, lip=75.119.153.41, TLS, session=</sHwzKdPpuOzG57+> ... show less	Brute-Force
🇳🇱 BlueWire Hosting	2026-04-17 13:10:41 (3 months ago)	POP/IMAP brute force attempt	Brute-Force
🇳🇱 globcom	2026-04-17 13:08:38 (3 months ago)	Mail-Auth	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.77.172.159

🇳🇱 195.178.110.162

🇳🇱 195.178.110.159

🇨🇳 171.104.143.176

🇷🇴 92.118.39.78

🇺🇸 66.132.195.31

🇺🇸 43.166.244.192

🇳🇱 195.170.172.225

🇩🇪 194.88.98.92

🇳🇱 188.166.61.245

🇩🇪 188.40.28.4

🇺🇸 71.6.199.23

🇸🇬 4.194.217.15

🇳🇱 195.242.118.98

🇩🇪 194.88.98.87

🇩🇪 194.88.98.84

🇷🇴 92.118.39.71

🇺🇸 205.210.31.46

🇺🇸 205.210.31.45

🇩🇪 194.88.98.111