JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.189.71.245

195.189.71.245 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 44%: ?

44%

ISP	CTC ASTANA LTD
Usage Type	Fixed Line ISP
ASN	AS41007
Domain Name	ststelecom.kz
Country	🇰🇿 Kazakhstan
City	Astana, Astana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.189.71.245

Whois 195.189.71.245

IP Abuse Reports for 195.189.71.245:

This IP address has been reported a total of 19 times from 13 distinct sources. 195.189.71.245 was first reported on October 17th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 KevinNeale	2026-08-01 18:08:48 (3 hours ago)	Fail2Ban recidive block for repeated malicious authentication attempts.	Web App Attack
🇦🇺 jalim	2026-08-01 03:24:48 (18 hours ago)	Fail2Ban (067c5ae9265b): 1 attempts from 195.189.71.245 triggered rspamd-authbl jail. Ban time: 6048 ... show more Fail2Ban (067c5ae9265b): 1 attempts from 195.189.71.245 triggered rspamd-authbl jail. Ban time: 604800s. Attack patterns detected in mail server logs. show less	Brute-Force
🇦🇺 jalim	2026-08-01 02:49:47 (18 hours ago)	Fail2Ban (4a8385921309): 1 attempts from 195.189.71.245 triggered rspamd-authbl jail. Ban time: 6048 ... show more Fail2Ban (4a8385921309): 1 attempts from 195.189.71.245 triggered rspamd-authbl jail. Ban time: 604800s. Attack patterns detected in mail server logs. show less	Brute-Force
🇩🇪 NewGastroline	2026-07-31 03:02:04 (1 day ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇳🇱 soverin	2026-07-31 01:00:05 (1 day ago)	spam	Email Spam
🇷🇴 INTEQ	2026-07-29 07:39:38 (3 days ago)	SPAM from 195.189.71.245	Email Spam
Anonymous	2026-07-27 14:00:28 (5 days ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/846/form_key/6DSAACDMN1S4xF5s/ \| UA: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/2802-08-15 15:31:47.717049 Firefox/6.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-14 02:24:36 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 12:04:14 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 Origon	2026-06-11 16:51:04 (1 month ago)	NOQUEUE - IP: 195.189.71.245 - Jun 11 18:51:03 plesk postfix/smtpd[3804323]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 195.189.71.245 - Jun 11 18:51:03 plesk postfix/smtpd[3804323]: NOQUEUE: reject: RCPT from unknown[195.189.71.245]: 554 5.7.1 Service unavailable; Client host [195.189.71.245] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?195.189.71.245; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[195.189.71.245]> show less	Email Spam
🇳🇱 soverin	2026-06-11 04:22:05 (1 month ago)	spam	Email Spam
Anonymous	2026-05-30 11:40:55 (2 months ago)	2026-05-30T13:31:17.127714+02:00 postfix/postscreen[347459]: NOQUEUE: reject: RCPT from [195.189.71 ... show more 2026-05-30T13:31:17.127714+02:00 postfix/postscreen[347459]: NOQUEUE: reject: RCPT from [195.189.71.245]:62423: 550 5.7.1 Service unavailable; client [195.189.71.245] blocked using hostkarma.junkemailfilter.com; proto=ESMTP, helo=<[195.189.71.245]> 2026-05-30T13:34:56.604104+02:00 postfix/postscreen[347836]: NOQUEUE: reject: RCPT from [195.189.71.245]:49859: 550 5.7.1 Service unavailable; client [195.189.71.245] blocked using hostkarma.junkemailfilter.com; proto=ESMTP, helo=<[195.189.71.245]> 2026-05-30T13:40:54.218521+02:00 postfix/postscreen[347836]: NOQUEUE: reject: RCPT from [195.189.71.245]:59466: 550 5.7.1 Service unavailable; client [195.189.71.245] blocked using hostkarma.junkemailfilter.com; proto=ESMTP, helo=<[195.189.71.245]> show less	Email Spam
🇳🇱 soverin	2026-05-30 11:38:07 (2 months ago)	spam	Email Spam
🇨🇭 Origon	2026-05-21 07:51:04 (2 months ago)	NOQUEUE - IP: 195.189.71.245 - May 21 09:51:04 plesk postfix/smtpd[2313292]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 195.189.71.245 - May 21 09:51:04 plesk postfix/smtpd[2313292]: NOQUEUE: reject: RCPT from unknown[195.189.71.245]: 554 5.7.1 Service unavailable; Client host [195.189.71.245] blocked using dnsbl-1.uceprotect.net; IP 195.189.71.245 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=195.189.71.245; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[195.189.71.245]> show less	Email Spam
🇯🇵 ki3	2026-05-12 09:36:38 (2 months ago)	Fail2Ban: Postfix Attack 195.189.71.245 1778578597.0(JST)	Email Spam Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.84

🇺🇸 162.216.149.250

🇧🇼 102.134.171.74

🇧🇪 34.140.123.172

🇮🇳 34.100.248.63

🇺🇿 185.74.7.77

🇺🇸 92.204.138.44

🇳🇱 91.92.42.172

🇷🇴 80.94.92.55

🇩🇪 69.5.169.85

🇹🇭 45.194.70.248

🇧🇪 34.38.108.126

🇨🇦 24.207.66.154

🇨🇦 20.104.16.169

🇨🇳 8.148.148.192

🇨🇳 114.80.32.225

🇨🇳 111.26.63.89

🇨🇦 85.217.149.20

🇱🇹 79.133.230.131

🇩🇪 43.228.157.136