AbuseIPDB » 194.180.48.9

194.180.48.9 was found in our database!

This IP was reported 296 times. Confidence of Abuse is 100%: ?

100%

ISP	Neterra-Serverion BV-Net
Usage Type	Data Center/Web Hosting/Transit
Domain Name	neterra.net
Country	United States of America
City	Staten Island, New York

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 194.180.48.9

Whois 194.180.48.9

IP Abuse Reports for 194.180.48.9:

This IP address has been reported a total of 296 times from 121 distinct sources. 194.180.48.9 was first reported on October 31st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
ventura-websolutions.de	2023-11-22 01:05:52 (2 weeks ago)	Oct 24 09:09:42 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authenticat ... show moreOct 24 09:09:42 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 09:10:36 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 09:11:20 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
ventura-websolutions.de	2023-11-01 01:03:37 (1 month ago)	Oct 24 09:09:42 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authenticat ... show moreOct 24 09:09:42 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 09:10:36 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 09:11:20 server postfix/smtpd[338743]: warning: unknown[194.180.48.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
Anonymous	2023-10-31 12:04:58 (1 month ago)		Email Spam
Anonymous	2023-10-30 10:56:14 (1 month ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
stom	2023-10-30 08:20:52 (1 month ago)	2023-10-30T08:20:51.117951ls1.tom2.co.uk postfix/smtpd[6264]: NOQUEUE: reject: RCPT from unknown[194 ... show more2023-10-30T08:20:51.117951ls1.tom2.co.uk postfix/smtpd[6264]: NOQUEUE: reject: RCPT from unknown[194.180.48.9]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<r2M2J0NSyK> ... show less	Email Spam Brute-Force
Elite_NOC	2023-10-30 01:10:23 (1 month ago)	MAIL: User Login Brute Force Attempt	Email Spam Hacking
Gateway_NOC	2023-10-29 22:42:53 (1 month ago)	dovecot brute force sasl attack	Brute-Force
samba.org	2023-10-29 14:11:47 (1 month ago)	spam (f2b h2)	Brute-Force
FABIO EGAS	2023-10-29 13:28:41 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 194.180.48.9 (NL/Netherlands/-)	Brute-Force
Anonymous	2023-10-29 12:20:25 (1 month ago)	<comment>	Email Spam
SvrAdmin	2023-10-28 22:00:08 (1 month ago)	Sat, 28 Oct 2023 21:44:15 GMT ⚠ Excessive Number of Failed Login Attempts from 194.180.48.9 ... show moreSat, 28 Oct 2023 21:44:15 GMT ⚠ Excessive Number of Failed Login Attempts from 194.180.48.9 (United States:US) show less	Hacking Brute-Force
SvrAdmin	2023-10-28 21:44:23 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 194.180.48.9 (NL/Netherlands/-): 5 in the last 3600 sec ... show more[101] (smtpauth) Failed SMTP AUTH login from 194.180.48.9 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-10-28 18:41:02 dovecot_login authenticator failed for (BH9L1u) [194.180.48.9]:52539: 535 Incorrect authentication data (set_id=postopigatto) 2023-10-28 18:41:50 dovecot_login authenticator failed for (1yB2b42P8M) [194.180.48.9]:64298: 535 Incorrect authentication data (set_id=jarbas) 2023-10-28 18:42:34 dovecot_login authenticator failed for (14cknLKw) [194.180.48.9]:61744: 535 Incorrect authentication data (set_id=postopigatto) 2023-10-28 18:43:15 dovecot_login authenticator failed for (mnSG3oAk) [194.180.48.9]:60745: 535 Incorrect authentication data (set_id=jarbas) 2023-10-28 18:44:17 dovecot_login authenticator failed for (rMZWgCD) [194.180.48.9]:60440: 535 Incorrect authentication data (set_id=postopigatto) show less	Port Scan Hacking Brute-Force Exploited Host
TZNOC	2023-10-28 12:42:25 (1 month ago)	Mail credential brute-force attack (SM3) #4	Email Spam Brute-Force
rh24	2023-10-28 11:42:49 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 194.180.48.9 (NL/Netherlands/-)	Brute-Force
stom	2023-10-28 08:27:19 (1 month ago)	2023-10-28T08:27:18.059343ls1.tom2.co.uk postfix/smtpd[22196]: NOQUEUE: reject: RCPT from unknown[19 ... show more2023-10-28T08:27:18.059343ls1.tom2.co.uk postfix/smtpd[22196]: NOQUEUE: reject: RCPT from unknown[194.180.48.9]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<OIs2Rlu7> ... show less	Email Spam Brute-Force