JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.72.74.130

188.72.74.130 was found in our database!

This IP was reported 2,948 times. Confidence of Abuse is 19%: ?

19%

ISP	ECOSYSTEM Ltd
Usage Type	Fixed Line ISP
ASN	AS198044
Domain Name	ekomobile.ru
Country	🇷🇺 Russian Federation
City	Khabarovsk, Khabarovsk

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.72.74.130

Whois 188.72.74.130

IP Abuse Reports for 188.72.74.130:

This IP address has been reported a total of 2,948 times from 309 distinct sources. 188.72.74.130 was first reported on April 30th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-22 13:19:47 (4 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇭 YF	2026-05-04 23:54:15 (1 month ago)	Pays blacklisté (RU)	Brute-Force Web App Attack
🇫🇷 jank	2026-05-02 18:50:40 (1 month ago)	pop3 login attempt	Brute-Force
🇩🇪 FeG Deutschland	2026-04-29 23:16:05 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇴 gtheo99	2026-04-26 14:55:27 (1 month ago)	(imapd) Failed IMAP login from 188.72.74.130 (RU/Russia/-): 3 in the last 900 secs	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-04-22 14:22:06 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-04-21 09:01:02 (1 month ago)	Zimbra: Login failures from malicious IP: 188.72.74.130. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 188.72.74.130. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-21 08:00:15 (1 month ago)	Zimbra: Login failures from malicious IP: 188.72.74.130. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 188.72.74.130. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 Paul Smith	2026-04-20 09:34:58 (2 months ago)	Email Auth Brute force attack 6/6 in last day	Brute-Force
🇩🇪 kreativstrecke	2026-04-20 06:04:21 (2 months ago)	2026-04-20T07:04:20.229002+01:00 srv03 postfix/smtps/smtpd[251799]: warning: unknown[188.72.74.130]: ... show more 2026-04-20T07:04:20.229002+01:00 srv03 postfix/smtps/smtpd[251799]: warning: unknown[188.72.74.130]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-20T07:04:20.837150+01:00 srv03 postfix/smtps/smtpd[251799]: lost connection after AUTH from unknown[188.72.74.130] ... show less	Brute-Force
Anonymous	2026-04-20 04:07:40 (2 months ago)	IMAP password guessing	Brute-Force
🇺🇸 chrisj	2026-04-20 03:00:23 (2 months ago)	2026-04-20T03:00:23.471191+00:00 aws postfix/smtps/smtpd[371995]: warning: unknown[188.72.74.130]: S ... show more 2026-04-20T03:00:23.471191+00:00 aws postfix/smtps/smtpd[371995]: warning: unknown[188.72.74.130]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-20T03:00:23.824036+00:00 aws postfix/smtps/smtpd[371995]: lost connection after AUTH from unknown[188.72.74.130] 2026-04-20T03:00:23.824172+00:00 aws postfix/smtps/smtpd[371995]: disconnect from unknown[188.72.74.130] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇨🇭 4server	2026-04-20 00:44:20 (2 months ago)	2026-04-2002:32:08dovecot_loginauthenticatorfailedforH=\([58.58.130.22]\)[182.95.103.110]:40914:535I ... show more 2026-04-2002:32:08dovecot_loginauthenticatorfailedforH=\([58.58.130.22]\)[182.95.103.110]:40914:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:44:13dovecot_loginauthenticatorfailedforH=\([174.64.199.85]\)[182.79.83.98]:49858:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:20:32dovecot_loginauthenticatorfailedforH=\([98.182.171.163]\)[103.120.116.162]:35340:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:23:41dovecot_loginauthenticatorfailedforH=\([183.171.53.200]\)[111.26.62.37]:41004:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:20:35dovecot_loginauthenticatorfailedforH=\([89.223.1.182]\)[218.94.115.164]:40250:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:31:15dovecot_loginauthenticatorfailedforH=\([192.200.205.244]\)[180.165.1.51]:54867:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:27:56dovecot_loginauthenticatorfailedforH=\([125.140.145.62]\)[192.34.128.202]:38800:535Incorrectauthenticationdata\(set_id=info\)2026-04-2002:43:00dovecot_logina show less	Hacking Web App Attack
🇩🇪 kreativstrecke	2026-04-20 00:02:15 (2 months ago)	2026-04-20T01:02:13.210158+01:00 srv03 postfix/submission/smtpd[171159]: warning: unknown[188.72.74. ... show more 2026-04-20T01:02:13.210158+01:00 srv03 postfix/submission/smtpd[171159]: warning: unknown[188.72.74.130]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-20T01:02:13.779674+01:00 srv03 postfix/submission/smtpd[171159]: lost connection after AUTH from unknown[188.72.74.130] 2026-04-20T01:02:13.779958+01:00 srv03 postfix/submission/smtpd[171159]: disconnect from unknown[188.72.74.130] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
Anonymous	2026-04-19 23:48:37 (2 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host

Showing 1 to 15 of 2948 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:8834:27d4:4430:c5e1:f0da:9b70

🇫🇮 147.185.133.36

🇺🇸 100.29.192.122

🇺🇸 44.50.7.126

🇺🇸 43.130.90.166

🇰🇷 220.124.208.27

🇨🇳 218.17.239.204

🇸🇬 185.200.116.68

🇺🇸 162.216.149.102

🇸🇬 103.20.122.54

🇰🇷 61.37.150.6

🇺🇸 44.243.223.37

🇺🇸 44.55.91.196

🇦🇷 186.148.224.219

🇺🇸 152.39.255.159

🇵🇱 94.26.68.42

🇷🇴 80.94.92.166

🇱🇺 46.151.182.201

🇳🇱 45.148.10.141

🇺🇸 44.41.10.206