JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.182.148.37

201.182.148.37 was found in our database!

This IP was reported 253 times. Confidence of Abuse is 64%: ?

64%

ISP	ESMONSA S.A.
Usage Type	Fixed Line ISP
ASN	AS265815
Hostname(s)	37-148-182-201.esmonsa.com.ec
Domain Name	esmonsa.com.ec
Country	🇪🇨 Ecuador
City	Zaruma, El Oro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.182.148.37

Whois 201.182.148.37

IP Abuse Reports for 201.182.148.37:

This IP address has been reported a total of 253 times from 86 distinct sources. 201.182.148.37 was first reported on July 12th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ksol-hostmaster	2026-07-30 23:04:32 (1 day ago)	Jul 31 01:04:31 ksol dovecot[14431]: auth-worker(24297): conn unix:auth-worker (uid=143): auth-worke ... show more Jul 31 01:04:31 ksol dovecot[14431]: auth-worker(24297): conn unix:auth-worker (uid=143): auth-worker<4>: sql(anonymized@email,201.182.148.37,<0rUyGNxXN9XJtpQl>): Password mismatch (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-07-29 05:02:02 (3 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-07-27 06:12:04 (5 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-07-26 23:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 22:00:52 (5 days ago)	Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 21:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-26 20:00:09 (5 days ago)	Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 201.182.148.37. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 interbiznw.com	2026-07-26 16:29:08 (6 days ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2026-07-25 14:14:07 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-07-17 23:52:04 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇺 DZBOT	2026-07-16 16:43:34 (2 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇿🇦 hostsec_za	2026-07-16 14:05:08 (2 weeks ago)	IMAP Auth Attack. 21 failed logins in 6 hours.	Brute-Force
🇨🇦 Julio Covolato	2026-07-15 13:35:01 (2 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇦🇹 joe-abuse	2026-07-12 01:33:15 (2 weeks ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-10 02:30:53 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-10 02:30:53. Events: 21. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
Anonymous	2026-07-10 00:51:31 (3 weeks ago)	2026-07-10T02:51:30.729615+02:00 soli-gate cyrus/imaps[3381821]: badlogin: 37-148-182-201.esmonsa.co ... show more 2026-07-10T02:51:30.729615+02:00 soli-gate cyrus/imaps[3381821]: badlogin: 37-148-182-201.esmonsa.com.ec [201.182.148.37] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force

Showing 1 to 15 of 253 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.97.120

🇮🇱 149.106.159.40

🇱🇹 141.98.9.104

🇺🇸 73.199.161.144

🇰🇷 61.32.68.66

🇸🇳 41.82.143.218

🇬🇧 35.203.210.74

🇫🇮 147.185.133.120

🇫🇷 72.244.6.16

🇨🇳 36.212.31.122

🇯🇵 34.104.129.140

🇫🇷 92.222.108.98

🇹🇼 34.81.12.234

🇯🇵 8.216.2.25

🇨🇭 2a0c:4d00:2:8::2

🇺🇸 192.161.49.2

🇨🇳 183.62.171.59

🇷🇴 92.118.39.77

🇷🇴 92.118.39.49

🇳🇱 91.92.42.87