AbuseIPDB » 197.255.196.187

197.255.196.187 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 15%: ?

15%

ISP	DHCP_Network
Usage Type	Fixed Line ISP
Hostname(s)	197-255-196-187.netpagedns.net
Domain Name	netpage.info
Country	Gambia
City	Banjul, Banjul

Report 197.255.196.187

Whois 197.255.196.187

IP Abuse Reports for 197.255.196.187:

This IP address has been reported a total of 30 times from 19 distinct sources. 197.255.196.187 was first reported on March 23rd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ecm4u	2024-11-03 00:00:23 (1 month ago)	mail auth brute force	Brute-Force
Anonymous	2024-11-02 10:31:55 (1 month ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
maximonline.co.za	2024-10-17 08:00:26 (1 month ago)	Brute Force SMTP AUTH Attack	Brute-Force
lavnet.net	2024-10-17 07:35:05 (1 month ago)	Oct 17 07:34:59 angela postfix/smtpd[950223]: lost connection after CONNECT from unknown[197.255.196 ... show moreOct 17 07:34:59 angela postfix/smtpd[950223]: lost connection after CONNECT from unknown[197.255.196.187] Oct 17 07:35:05 angela postfix/smtpd[950223]: warning: unknown[197.255.196.187]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Oct 17 07:35:05 angela postfix/smtpd[950223]: lost connection after AUTH from unknown[197.255.196.187] ... show less	Brute-Force Web App Attack
Anonymous	2024-07-09 10:55:38 (5 months ago)	postfix	Email Spam Web App Attack
Joe-Mark	2024-04-21 20:16:00 (7 months ago)	Found Mcafee IP Poor Reputation Blocklist . proto=tcp . spt=41692 . dpt=25 . NFTABLES . ... show moreFound Mcafee IP Poor Reputation Blocklist . proto=tcp . spt=41692 . dpt=25 . NFTABLES . (CCLI) show less	Email Spam
Joe-Mark	2024-04-03 09:39:27 (8 months ago)	Rejected on IP Reputation - Mcafee Exchange Plug-in (165)	Email Spam
Rip	2024-03-04 16:26:08 (9 months ago)	Mar 04 08:26:02 mayo postfix/submission/smtpd[418037]: lost connection after CONNECT from unknown[19 ... show moreMar 04 08:26:02 mayo postfix/submission/smtpd[418037]: lost connection after CONNECT from unknown[197.255.196.187] Mar 04 08:26:06 mayo postfix/submission/smtpd[418037]: lost connection after EHLO from unknown[197.255.196.187] ... show less	Email Spam Brute-Force
ConsulHosting	2024-02-21 09:27:06 (9 months ago)	197.255.196.187 # lfd: (smtpauth) Failed SMTP AUTH login from 197.255.196.187 (GM/Gambia/197-255-196 ... show more197.255.196.187 # lfd: (smtpauth) Failed SMTP AUTH login from 197.255.196.187 (GM/Gambia/197-255-196-187.netpagedns.net): 5 in the last 3600 secs - Wed Feb 21 09:27:06 2024 show less	Brute-Force
ConsulHosting	2024-02-21 09:27:06 (9 months ago)	197.255.196.187 # lfd: (smtpauth) Failed SMTP AUTH login from 197.255.196.187 (GM/Gambia/197-255-196 ... show more197.255.196.187 # lfd: (smtpauth) Failed SMTP AUTH login from 197.255.196.187 (GM/Gambia/197-255-196-187.netpagedns.net): 5 in the last 3600 secs - Wed Feb 21 09:27:06 2024 show less	Brute-Force
Anonymous	2024-02-21 00:53:44 (9 months ago)	postfix-sasl	Brute-Force Web App Attack
Anonymous	2024-02-20 23:19:03 (9 months ago)	197.255.196.187 (GM/Gambia/-/-/197-255-196-187.netpagedns.net/[AS37323 NETPAGE]), 3 distributed smtp ... show more197.255.196.187 (GM/Gambia/-/-/197-255-196-187.netpagedns.net/[AS37323 NETPAGE]), 3 distributed smtpauth attacks on account [[email protected]] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2024-02-21 00:06:29 plain authenticator failed for (localhost) [197.255.196.187]: 535 Incorrect authentication data ([email protected]) 2024-02-21 00:06:25 plain authenticator failed for c-73-50-155-68.hsd1.in.comcast.net (localhost) [73.50.155.68]: 535 Incorrect authentication data ([email protected]) 2024-02-21 00:19:01 plain authenticator failed for c-68-60-197-122.hsd1.mi.comcast.net (localhost) [68.60.197.122]: 535 Incorrect authentication data ([email protected]) IP Addresses Blocked: show less	Brute-Force
hostseries	2024-02-20 19:09:48 (9 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2023-11-21 12:40:58 (1 year ago)	Nov 21 04:40:55 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 ... show moreNov 21 04:40:55 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=facebook rhost=197.255.196.187 ... show less	Brute-Force SSH
unifr	2023-11-18 12:49:10 (1 year ago)	Unauthorized IMAP connection attempt	Brute-Force