AbuseIPDB » 194.85.249.196

194.85.249.196 was found in our database!

This IP was reported 292 times. Confidence of Abuse is 0%: ?

ISP	Reliable Communications s.r.o.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	relcom.com
Country	Netherlands (Kingdom of the)
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 194.85.249.196

Whois 194.85.249.196

IP Abuse Reports for 194.85.249.196:

This IP address has been reported a total of 292 times from 127 distinct sources. 194.85.249.196 was first reported on July 31st 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
LB Solutions	2023-05-02 19:00:44 (1 year ago)	May 2 16:00:40 mail postfix/submission/smtpd[1810889]: warning: unknown[194.85.249.196]: SASL LOGIN ... show moreMay 2 16:00:40 mail postfix/submission/smtpd[1810889]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: authentication failure May 2 16:00:43 mail postfix/submission/smtpd[1810889]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: authentication failure show less	Email Spam Brute-Force
10dencehispahard SL	2023-05-02 18:35:08 (1 year ago)	Unauthorized login attempts [{'postfix-spam', 'postfix-sasl', 'postfix-dos& ... show moreUnauthorized login attempts [{'postfix-spam', 'postfix-sasl', 'postfix-dos'}] show less	Brute-Force
s phillips	2023-05-02 16:28:09 (1 year ago)	Return-Path: <[email protected]> Received: from User (194.85.249.196) by mail.dzk.gov.ua (10.10 ... show moreReturn-Path: <[email protected]> Received: from User (194.85.249.196) by mail.dzk.gov.ua (10.10.1.30) with Microsoft SMTP Server id 15.2.1118.7; Tue, 2 May 2023 16:06:52 +0300 Reply-To: <[email protected]> show less	Phishing
websync	2023-05-02 15:30:11 (1 year ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
Anonymous	2023-05-02 14:00:18 (1 year ago)	DKIM-Signature: v=1; a=rsa-sha256; d=dzk.gov.ua; s=dzksel; c=relaxed/relaxed; t=1683026678; h=from:s ... show moreDKIM-Signature: v=1; a=rsa-sha256; d=dzk.gov.ua; s=dzksel; c=relaxed/relaxed; t=1683026678; h=from:subject:to:date:message-id; bh=LXZFqJLMcfZbIF60Xvw6WOY8KQImLzMXIi0cgZaTcD4=; b=PDobmOZmZXUQia6GrwQq1VpXobSKo0LKdHFllSqJtcNs6ANGUftLuF2qjESn7QeulC4Ap7mYhF9 vKXrYQUzQ2QenkCTNMNzxD5XWVhRaESBnHWYA/OrEyzt5XLk+MCy7PDAHuo87nyAG3FsocobFj2px rFi8jefcL1NicOPCvfotbtrhxsP+qfaY4ZG2wjSKMRJTrQGV1HLy/jkZNydVPGxBEHKSdfYBdyyZK 6hZZ34+6jqhR9haTumXS+HXGwbaiWvEzrv94Y3AB4W47RRNsJMBexmtdKsczRqkuTBvdA2Qrc2Emc wFq2CmJkv2PZvKelfwddYNWR2f0i1BvxUYEQ== Received: from User (194.85.249.196) by mail.dzk.gov.ua (10.10.1.30) with Microsoft SMTP Server id 15.2.1118.7; Tue, 2 May 2023 14:24:35 +0300 Reply-To: <[email protected]> From: Mr Kennedy Uzoka <[email protected]> Subject: GOOD NEWS REGARDING YOUR PAYMENT.REF.UBG460892 Date: Tue, 2 May 2023 13:24:21 -0700 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal show less	Phishing Email Spam
leolemos	2023-05-02 12:40:41 (1 year ago)	May 2 09:40:22 [redacted] postfix/smtpd[1281226]: warning: unknown[194.85.249.196]: SASL LOGIN auth ... show moreMay 2 09:40:22 [redacted] postfix/smtpd[1281226]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 2 09:40:29 [redacted] postfix/smtpd[1281226]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 2 09:40:40 [redacted] postfix/smtpd[1281226]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Spoofing Brute-Force
SvrAdmin	2023-05-02 11:46:52 (1 year ago)	[PbNew] (smtpauth) Failed SMTP AUTH login from 194.85.249.196 (DE/Germany/-): 5 in the last 3600 sec ... show more[PbNew] (smtpauth) Failed SMTP AUTH login from 194.85.249.196 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 2 08:46:12 cwp postfix/smtpd[17514]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 2 08:46:20 cwp postfix/smtpd[17514]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 2 08:46:32 cwp postfix/smtpd[17514]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 2 08:46:44 cwp postfix/smtpd[17514]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: Connection lost to authentication server May 2 08:46:48 cwp postfix/smtpd[17514]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
bigscoots.com	2023-05-02 06:09:13 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 194.85.249.196 (NL/Netherlands/-): 5 in the last 3600 secs; P ... show more(smtpauth) Failed SMTP AUTH login from 194.85.249.196 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2023-05-02 02:08:15 dovecot_login authenticator failed for (oP2Xe0h) [194.85.249.196]:54611: 535 Incorrect authentication data ([email protected]) 2023-05-02 02:08:22 dovecot_login authenticator failed for (i1GeKYz) [194.85.249.196]:50815: 535 Incorrect authentication data ([email protected]) 2023-05-02 02:08:33 dovecot_login authenticator failed for (xv1RrtdYNp) [194.85.249.196]:53510: 535 Incorrect authentication data ([email protected]) 2023-05-02 02:08:51 dovecot_login authenticator failed for (PEgqKOOu) [194.85.249.196]:56487: 535 Incorrect authentication data ([email protected]) 2023-05-02 02:09:09 dovecot_login authenticator failed for (4U9Q5Jxfn) [194.85.249.196]:51565: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
samba.org	2023-05-02 06:08:47 (1 year ago)	spam (f2b h2)	Brute-Force
Anonymous	2023-05-02 04:08:57 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 194.85.249.196 (DE/Germany/-)	Brute-Force
Quantico	2023-05-02 02:37:24 (1 year ago)	2023-05-01 10:40:51,722 fail2ban.actions [1030]: NOTICE [zimbra-webmail] Ban 194.85.249.196< ... show more2023-05-01 10:40:51,722 fail2ban.actions [1030]: NOTICE [zimbra-webmail] Ban 194.85.249.196 2023-05-01 22:24:44,706 fail2ban.actions [1030]: NOTICE [zimbra-webmail] Ban 194.85.249.196 2023-05-02 04:37:22,092 fail2ban.actions [1030]: NOTICE [zimbra-webmail] Ban 194.85.249.196 ... show less	Email Spam Brute-Force
foobar	2023-05-01 22:05:04 (1 year ago)	SMTP nagging	Email Spam Brute-Force
mitsurugi	2023-05-01 12:46:44 (1 year ago)	SMTP SASL-Auth	Brute-Force
Dentax	2023-05-01 10:48:42 (1 year ago)	May 1 12:41:55 du1-www1 postfix/smtpd\[16335\]: NOQUEUE: reject: RCPT from unknown\[194.85.249.196\ ... show moreMay 1 12:41:55 du1-www1 postfix/smtpd\[16335\]: NOQUEUE: reject: RCPT from unknown\[194.85.249.196\]: 554 5.7.1 \<[email protected]\>: Relay access denied\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<ZGp76r\>May 1 12:43:50 du1-www1 postfix/smtpd\[16333\]: NOQUEUE: reject: RCPT from unknown\[194.85.249.196\]: 554 5.7.1 \<[email protected]\>: Relay access denied\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<JyFia3IX\>May 1 12:48:41 du1-www1 postfix/smtpd\[16335\]: NOQUEUE: reject: RCPT from unknown\[194.85.249.196\]: 554 5.7.1 \<[email protected]\>: Relay access denied\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<OTSILP6f\> ... show less	Email Spam Brute-Force
Countryman	2023-05-01 10:18:10 (1 year ago)	2023-05-01T12:17:43.048001 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.8 ... show more2023-05-01T12:17:43.048001 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-01T12:17:49.446117 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-01T12:17:49.446117 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-01T12:17:59.332546 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-01T12:17:59.332546 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-01T12:18:09.682336 orbis.img.cas.cz postfix/submission/smtpd[157030]: warning: unknown[194.85.249.196]: SASL LOGIN authentication failed: Connection lost to authentication server ... show less	Brute-Force