JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.26.192.204

Neutral Activity

Abuse Confidence Score

0% Low Risk

22 reports

20 reporters · latest 1 year ago

ISP: 1337 Services GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS210558
Hostname(s): 194.26.192.204.powered.by.rdp.sh
Domain Name: as210558.net
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

194.26.192.204 has been reported 22 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

22 from 20 distinct reporters

First reported

September 11th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-17 20:08:51 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-17 04:30:25 UTC · (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 jfz-abuse	2025-09-17 00:54:21 UTC · (1 year ago)	fail2ban: postfix-sasl ...	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-17 00:08:50 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇺 aglenday	2025-09-16 22:37:00 UTC · (1 year ago)	(smtpauth) Failed SMTP AUTH login from 194.26.192.204 (NL/The Netherlands/194.26.192.204.powered.by.rdp.sh): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-09-17T08:36:58.362786+10:00 mail postfix/submission/smtp ... show more (smtpauth) Failed SMTP AUTH login from 194.26.192.204 (NL/The Netherlands/194.26.192.204.powered.by.rdp.sh): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-09-17T08:36:58.362786+10:00 mail postfix/submission/smtpd[155855]: warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=ashley show less	Port Scan
🇷🇴 INTEQ	2025-09-16 22:14:06 UTC · (1 year ago)	Brute force attack from 194.26.192.204	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-16 20:08:50 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 final	2025-09-16 10:38:06 UTC · (1 year ago)	Sep 16 12:37:58 xxxxx postfix/submission/smtpd[643889]: warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=der_tolle_emil Sep 16 12:37:58 xxxxx postfix/submission/smtpd[643889]: lost connection after AUTH ... show more Sep 16 12:37:58 xxxxx postfix/submission/smtpd[643889]: warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=der_tolle_emil Sep 16 12:37:58 xxxxx postfix/submission/smtpd[643889]: lost connection after AUTH from unknown[194.26.192.204] Sep 16 12:37:58 xxxxx postfix/submission/smtpd[643889]: disconnect from unknown[194.26.192.204] ehlo=2 starttls=1 auth=0/1 commands=3/4 Sep 16 12:38:06 xxxxx postfix/submission/smtpd[643889]: warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, [email protected] show less	Phishing Email Spam Spoofing
🇦🇺 screwlooseit.com.au	2025-09-16 09:21:39 UTC · (1 year ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch NL/Netherlands/194.26.192.204.powered.by.rdp.sh	Web App Attack
🇩🇪 Bigbear3	2025-09-15 18:31:25 UTC · (1 year ago)	Report-by-bigbear3	Brute-Force SSH
🇹🇭 thaizone.com	2025-09-15 17:07:54 UTC · (1 year ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
Anonymous	2025-09-15 11:00:59 UTC · (1 year ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇺🇸 bigscoots.com	2025-09-15 09:36:09 UTC · (1 year ago)	(smtpauth) Failed SMTP AUTH login from 194.26.192.204 (NL/The Netherlands/194.26.192.204.powered.by.rdp.sh): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-09-15 05:35:10 dovecot_login authenticator failed ... show more (smtpauth) Failed SMTP AUTH login from 194.26.192.204 (NL/The Netherlands/194.26.192.204.powered.by.rdp.sh): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-09-15 05:35:10 dovecot_login authenticator failed for (LpejvRCotb) [194.26.192.204]:56769: 535 Incorrect authentication data (set_id=hello) 2025-09-15 05:35:17 dovecot_login authenticator failed for (Jzb1o8) [194.26.192.204]:56945: 535 Incorrect authentication data ([email protected]) 2025-09-15 05:35:41 dovecot_login authenticator failed for (Sb6vXt2) [194.26.192.204]:58635: 535 Incorrect authentication data (set_id=hello) 2025-09-15 05:35:44 dovecot_login authenticator failed for (tEXEIe) [194.26.192.204]:58798: 535 Incorrect authentication data ([email protected]) 2025-09-15 05:36:08 dovecot_login authenticator failed for (ucEW69iO) [194.26.192.204]:60270: 535 Incorrect authentication data (set_id=hello) show less	Brute-Force SSH
🇨🇿 lp	2025-09-15 09:23:59 UTC · (1 year ago)	Email account brute force: 4 attempts were recorded from 194.26.192.204 2025-09-15T09:55:02+02:00 warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-09-15T09:55:02+02:00 wa ... show more Email account brute force: 4 attempts were recorded from 194.26.192.204 2025-09-15T09:55:02+02:00 warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-09-15T09:55:02+02:00 warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-09-15T09:55:23+02:00 warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-09-15T09:55:24+02:00 warning: unknown[194.26.192.204]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇫🇷 UM3	2025-09-15 07:02:28 UTC · (1 year ago)	Exim Auth Failed	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 200.175.201.167

🇺🇸 98.122.215.23

🇬🇧 35.203.211.77

🇵🇱 172.64.198.121

🇺🇸 162.216.150.41

🇨🇳 119.123.75.66

🇷🇴 86.127.163.23

🇫🇷 85.204.70.96

🇨🇿 78.44.192.210

🇳🇱 77.239.124.145

🇺🇸 74.130.81.49

🇩🇪 69.5.169.36

🇺🇸 66.132.172.239

🇮🇳 49.47.218.34

🇸🇬 43.160.202.166

🇩🇪 194.5.49.88

🇪🇨 177.53.215.134

🇩🇪 151.243.11.41

🇺🇸 139.144.239.98

🇨🇴 138.84.41.250