JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.177.139.148

192.177.139.148 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.177.139.148

Whois 192.177.139.148

IP Abuse Reports for 192.177.139.148:

This IP address has been reported a total of 19 times from 17 distinct sources. 192.177.139.148 was first reported on February 26th 2023, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-08-10 16:31:39 (10 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇫🇮 danskefilm.dk	2025-08-10 03:15:01 (10 months ago)	IMAP password guessing	Brute-Force
🇬🇧 Silly Development	2025-08-10 00:59:08 (10 months ago)	Malicious activity detected from 18779 EGIHOSTING towards host sillydev.co.uk (GET HTTP/2) @ 2025-08 ... show more Malicious activity detected from 18779 EGIHOSTING towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:08Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 COMPLEX	2025-08-08 01:34:44 (10 months ago)	SSH brute force attack detected by fail2ban - attempted unauthorized access	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-08-07 09:34:42 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 unhfree.net	2025-08-06 22:23:18 (10 months ago)	Aug 7 00:23:16 canopus postfix/smtpd[2234335]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: ... show more Aug 7 00:23:16 canopus postfix/smtpd[2234335]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<workstation-2906> Aug 7 00:23:16 canopus postfix/smtpd[2234335]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<workstation-2906> Aug 7 00:23:17 canopus postfix/smtpd[2234335]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<workstation-2906> Aug 7 00:23:17 canopus postfix/smtpd[2234335]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 55 ... show less	Brute-Force Exploited Host
🇯🇵 Netgnome	2025-08-05 07:46:00 (10 months ago)	SMTP/25 Attempts send from non-existent domain(SNDRIP=ERDNS)	Brute-Force
🇲🇾 syokadmin	2025-08-03 20:18:22 (10 months ago)	192.177.139.148 (US/United States/-), 2 distributed smtpauth attacks on account [[email protected] ... show more 192.177.139.148 (US/United States/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (10 months ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇫🇷 ᴀʀᴛ	2025-07-31 14:00:26 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 18779 (EGIHOSTING) Protocol: HTTP/2 (GET method) UA: ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 18779 (EGIHOSTING) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇦🇺 aglenday	2025-07-31 13:30:12 (10 months ago)	(imapd) Failed IMAP login from 192.177.139.148 (US/United States/-): 1 in the last 3600 secs; Ports: ... show more (imapd) Failed IMAP login from 192.177.139.148 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-07-31T23:30:07.738964+10:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=192.177.139.148, lip=149.28.180.240, TLS: Connection closed, session=<NWKzozk7pI/AsYuU> show less	Port Scan
🇮🇹 VHosting	2025-07-31 09:35:50 (10 months ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇳🇱 EGP Abuse Dept	2025-07-30 05:38:58 (10 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇨🇿 unhfree.net	2025-07-29 04:09:47 (10 months ago)	Jul 29 06:09:46 canopus postfix/smtpd[1410649]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: ... show more Jul 29 06:09:46 canopus postfix/smtpd[1410649]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<192.177.139.148> Jul 29 06:09:46 canopus postfix/smtpd[1410649]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<192.177.139.148> Jul 29 06:09:46 canopus postfix/smtpd[1410649]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<192.177.139.148> Jul 29 06:09:46 canopus postfix/smtpd[1410649]: NOQUEUE: reject: RCPT from unknown[192.177.139.148]: ... show less	Brute-Force Exploited Host
🇩🇪 arch3rek	2025-07-29 03:54:46 (10 months ago)	2025-07-29T03:54:45.821893+00:00 Node3-AMPERE sshd[2811012]: Connection closed by authenticating use ... show more 2025-07-29T03:54:45.821893+00:00 Node3-AMPERE sshd[2811012]: Connection closed by authenticating user root 192.177.139.148 port 48120 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 118.193.39.103

🇩🇪 109.71.252.174

🇺🇸 34.174.249.44

🇧🇴 200.105.172.184

🇺🇸 158.94.187.16

🇧🇩 114.130.85.36

🇺🇸 107.150.105.153

🇸🇪 104.222.174.149

🇻🇳 27.71.230.31

🇺🇸 20.169.49.11

🇨🇱 200.54.189.99

🇳🇬 152.32.142.188

🇨🇳 121.227.31.13

🇳🇱 91.92.40.200

🇺🇸 73.12.178.54

🇩🇪 69.5.169.147

🇦🇹 46.124.203.77

🇺🇸 44.220.185.8

🇬🇧 37.10.113.213

🇯🇵 20.78.169.229