JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.180.1.198

2.180.1.198 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	Iran Information Technology Company PJSC
Usage Type	Fixed Line ISP
ASN	AS58224
Domain Name	dci.co.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.180.1.198

Whois 2.180.1.198

IP Abuse Reports for 2.180.1.198:

This IP address has been reported a total of 80 times from 56 distinct sources. 2.180.1.198 was first reported on February 19th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 chris_yooo	2026-08-26 07:43:56 (4 hours ago)	Aug 26 09:43:55 isp postfix/smtps/smtpd[632579]: warning: unknown[2.180.1.198]: SASL LOGIN authentic ... show more Aug 26 09:43:55 isp postfix/smtps/smtpd[632579]: warning: unknown[2.180.1.198]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Aug 26 09:43:56 isp postfix/smtps/smtpd[632579]: lost connection after AUTH from unknown[2.180.1.198] Aug 26 09:43:56 isp postfix/smtps/smtpd[632579]: disconnect from unknown[2.180.1.198] ehlo=1 auth=0/1 commands=1/2 ... show less	Spoofing Brute-Force
🇩🇪 kreativstrecke	2026-08-26 05:16:27 (6 hours ago)	2026-08-26T07:16:26.161263+02:00 srv03 postfix/submission/smtpd[1927775]: lost connection after AUTH ... show more 2026-08-26T07:16:26.161263+02:00 srv03 postfix/submission/smtpd[1927775]: lost connection after AUTH from unknown[2.180.1.198] 2026-08-26T07:16:26.161556+02:00 srv03 postfix/submission/smtpd[1927775]: disconnect from unknown[2.180.1.198] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇫🇷 ingroscart.it	2026-08-26 05:07:38 (6 hours ago)	(smtpauth) Failed SMTP AUTH login from 2.180.1.198 (IR/Iran/-/-/-/[redacted])	Brute-Force
🇩🇪 FeG Deutschland	2026-08-26 01:08:06 (10 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 lister171254	2026-08-25 19:17:30 (16 hours ago)	2026-08-25T21:17:29.438923+02:00 thelists postfix/submission/smtpd[1044626]: warning: unknown[2.180. ... show more 2026-08-25T21:17:29.438923+02:00 thelists postfix/submission/smtpd[1044626]: warning: unknown[2.180.1.198]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Hacking
🇵🇱 pshost.pl	2026-08-25 15:33:11 (20 hours ago)	2026-08-25T15:33:11.408Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-08-25T15:33:11.408Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 2.180.1.198. show less	Port Scan Brute-Force SSH
🇨🇭 ale	2026-08-25 11:38:34 (1 day ago)	SMTP bruteforce auth scanning - failed login with invalid user	Brute-Force
🇨🇿 janekCZ	2026-08-25 07:25:53 (1 day ago)	Fail2Ban report from jail 'postfix': 2026-08-25T09:25:53.254800+02:00 mail postfix/smtps/smtpd[39842 ... show more Fail2Ban report from jail 'postfix': 2026-08-25T09:25:53.254800+02:00 mail postfix/smtps/smtpd[3984294]: warning: unknown[2.180.1.198]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-08-25 07:20:22 (1 day ago)	Threat.live: Brute Force	Brute-Force
🇳🇿 andkiwi	2026-08-25 06:51:27 (1 day ago)	Unauthorised attempted login to SUBMISSION server	Brute-Force
🇩🇪 kreativstrecke	2026-08-25 05:44:25 (1 day ago)	2026-08-25T07:44:24.067228+02:00 srv03 postfix/smtps/smtpd[1049099]: warning: unknown[2.180.1.198]: ... show more 2026-08-25T07:44:24.067228+02:00 srv03 postfix/smtps/smtpd[1049099]: warning: unknown[2.180.1.198]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-08-25T07:44:24.548621+02:00 srv03 postfix/smtps/smtpd[1049099]: lost connection after AUTH from unknown[2.180.1.198] 2026-08-25T07:44:24.549034+02:00 srv03 postfix/smtps/smtpd[1049099]: disconnect from unknown[2.180.1.198] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
Anonymous	2026-08-25 04:30:16 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-08-25 00:09:53 (1 day ago)	2 Login Attempts	Port Scan Brute-Force
🇭🇺 Lacika555	2026-08-24 21:22:26 (1 day ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇫🇮 notelseit	2026-08-24 18:57:03 (1 day ago)	2026-08-24T20:56:22.489130+02:00 mail postfix/smtps/smtpd[1668197]: warning: unknown[2.180.1.198]: S ... show more 2026-08-24T20:56:22.489130+02:00 mail postfix/smtps/smtpd[1668197]: warning: unknown[2.180.1.198]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-08-24T20:56:24.417052+02:00 mail postfix/smtps/smtpd[1668197]: disconnect from unknown[2.180.1.198] ehlo=1 auth=0/1 commands=1/2 2026-08-24T20:57:02.669319+02:00 mail postfix/smtps/smtpd[1668196]: lost connection after CONNECT from unknown[2.180.1.198] ... show less	Brute-Force Email Spam

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.0.62.173

🇵🇭 119.92.70.82

🇺🇦 93.171.214.243

🇪🇬 41.46.85.145

🇷🇺 37.79.140.198

🇺🇸 34.139.77.106

🇺🇸 34.139.13.182

🇺🇸 34.26.219.125

🇸🇬 2600:3c15::2000:60ff:fecf:1c0b

🇹🇷 212.174.120.226

🇺🇾 186.52.242.126

🇯🇵 172.105.196.91

🇳🇱 91.92.40.44

🇮🇶 37.77.55.71

🇨🇭 20.199.188.171

🇧🇷 205.210.31.170

🇦🇷 200.63.168.90

🇳🇱 195.178.110.218

🇲🇽 187.254.108.81

🇲🇽 187.190.215.19