JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.37.168.154

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

21 reporters · latest 8 months ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Porto Alegre, Rio Grande do Sul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

201.37.168.154 has been reported 24 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 21 distinct reporters

First reported

February 18th 2026

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ITSNF	2026-02-28 02:43:06 UTC · (8 months ago)	FFM Feb 28 03:31:46 websrv01 postfix/smtps/smtpd[3562399]: warning: unknown[201.37.168.154]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Feb 28 03:31:52 websrv01 postfix/smtps/smtpd[3562399]: warning: u ... show more FFM Feb 28 03:31:46 websrv01 postfix/smtps/smtpd[3562399]: warning: unknown[201.37.168.154]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Feb 28 03:31:52 websrv01 postfix/smtps/smtpd[3562399]: warning: unknown[201.37.168.154]: SASL LOGIN authentication failed: (reason unavailable), [email protected] show less	Email Spam Brute-Force
🇫🇷 Sysadmin Peter	2026-02-27 19:54:15 UTC · (8 months ago)	Feb 27 20:54:15 mail postfix/smtpd[833953]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure Feb 27 20:54:15 mail postfix/smtpd[833955]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication faile ... show more Feb 27 20:54:15 mail postfix/smtpd[833953]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure Feb 27 20:54:15 mail postfix/smtpd[833955]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure ... show less	Email Spam
🇩🇪 vcis.de	2026-02-26 17:35:48 UTC · (8 months ago)	SMTP brute force attack detected from [201.37.168.154]	Brute-Force
🇨🇭 Origon	2026-02-26 05:27:50 UTC · (8 months ago)	recidive - IP: 201.37.168.154 - 2026-02-19 02:17:07,348 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 04:12:44,937 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 18:19:25,863 fail2ba ... show more recidive - IP: 201.37.168.154 - 2026-02-19 02:17:07,348 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 04:12:44,937 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 18:19:25,863 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 show less	Web App Attack
🇭🇺 Lacika555	2026-02-26 00:01:31 UTC · (8 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 neverdown.eu	2026-02-25 20:27:55 UTC · (8 months ago)	(smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-02-25 22:27:43 dovecot_plain authenticator failed for H=(6LCBR6) [201.37.168 ... show more (smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-02-25 22:27:43 dovecot_plain authenticator failed for H=(6LCBR6) [201.37.168.154]:55950: 535 Incorrect authentication data ([email protected]) 2026-02-25 22:27:47 dovecot_plain authenticator failed for H=(R9YP57Z8UQI) [201.37.168.154]:55951: 535 Incorrect authentication data ([email protected]) 2026-02-25 22:27:47 dovecot_plain authenticator failed for H=(AM2GM97U1Z7) [201.37.168.154]:55953: 535 Incorrect authentication data ([email protected]) 2026-02-25 22:27:47 dovecot_plain authenticator failed for H=(B9MP3) [201.37.168.154]:55954: 535 Incorrect authentication data ([email protected]) 2026-02-25 22:27:47 dovecot_plain authenticator failed for H=(T8FWR3M6R) [201.37.168.154]:55958: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇩🇪 FeG Deutschland	2026-02-24 21:28:04 UTC · (8 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-23 18:04:38 UTC · (8 months ago)	Feb 23 19:04:36 dev postfix/smtpd[1820000]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Feb 23 19:04:36 dev postfix/smtpd[1820000]: warning: unknown[201.37.168.154] ... show more Feb 23 19:04:36 dev postfix/smtpd[1820000]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Feb 23 19:04:36 dev postfix/smtpd[1820000]: warning: unknown[201.37.168.154]: SASL PLAIN authentication failed: authentication failure, [email protected] Feb 23 19:04:37 dev postfix/smtpd[1820000]: warning: unknown[201.37.168.154]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
🇿🇦 maximonline.co.za	2026-02-22 21:20:37 UTC · (8 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇳🇱 maxxsense	2026-02-22 04:40:05 UTC · (8 months ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br)	Hacking
🇺🇸 bigscoots.com	2026-02-22 04:29:51 UTC · (8 months ago)	(smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-21 22:56:21 dovecot_plain authenticator failed for H=(58F1THHLM15) ... show more (smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-21 22:56:21 dovecot_plain authenticator failed for H=(58F1THHLM15) [201.37.168.154]:24069: 535 Incorrect authentication data ([email protected]) 2026-02-21 22:56:27 dovecot_login authenticator failed for H=(58F1THHLM15) [201.37.168.154]:24069: 535 Incorrect authentication data ([email protected]) 2026-02-21 23:06:52 dovecot_plain authenticator failed for H=(L7V1JJ7) [201.37.168.154]:60718: 535 Incorrect authentication data ([email protected]) 2026-02-21 23:06:58 dovecot_login authenticator failed for H=(L7V1JJ7) [201.37.168.154]:60718: 535 Incorrect authentication data ([email protected]) 2026-02-21 23:29:49 dovecot_plain authenticator failed for H=(56QUULLY) [201.37.168.154]:44331: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇫🇷 dwmp	2026-02-22 03:31:25 UTC · (8 months ago)	Feb 22 04:31:23 webcore postfix/smtpd[3410918]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure Feb 22 04:31:23 webcore postfix/smtpd[3410918]: warning: unknown[201.37.168.154]: SASL PLAIN authentication ... show more Feb 22 04:31:23 webcore postfix/smtpd[3410918]: warning: unknown[201.37.168.154]: SASL CRAM-MD5 authentication failed: authentication failure Feb 22 04:31:23 webcore postfix/smtpd[3410918]: warning: unknown[201.37.168.154]: SASL PLAIN authentication failed: authentication failure Feb 22 04:31:24 webcore postfix/smtpd[3410918]: warning: unknown[201.37.168.154]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 DocNetzwerk	2026-02-21 04:07:35 UTC · (8 months ago)	(smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br)	Brute-Force
🇨🇭 Origon	2026-02-19 17:19:26 UTC · (8 months ago)	recidive - IP: 201.37.168.154 - 2026-02-19 02:17:07,348 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 04:12:44,937 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 18:19:25,863 fail2ba ... show more recidive - IP: 201.37.168.154 - 2026-02-19 02:17:07,348 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 04:12:44,937 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 2026-02-19 18:19:25,863 fail2ban.actions [245081]: NOTICE [plesk-postfix] Ban 201.37.168.154 show less	Web App Attack
🇺🇸 bigscoots.com	2026-02-19 17:03:21 UTC · (8 months ago)	(smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-19 11:45:20 dovecot_plain authenticator failed for H=(ZZ7H17CIG) [ ... show more (smtpauth) Failed SMTP AUTH login from 201.37.168.154 (BR/Brazil/c925a89a.virtua.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-19 11:45:20 dovecot_plain authenticator failed for H=(ZZ7H17CIG) [201.37.168.154]:32803: 535 Incorrect authentication data ([email protected]) 2026-02-19 11:45:24 dovecot_plain authenticator failed for H=(I7QG1XB55L1Y) [201.37.168.154]:56656: 535 Incorrect authentication data ([email protected]) 2026-02-19 11:45:26 dovecot_login authenticator failed for H=(ZZ7H17CIG) [201.37.168.154]:32803: 535 Incorrect authentication data ([email protected]) 2026-02-19 11:45:34 dovecot_login authenticator failed for H=(I7QG1XB55L1Y) [201.37.168.154]:56656: 535 Incorrect authentication data 2026-02-19 12:03:18 dovecot_plain authenticator failed for H=(I7QG1XB55L1Y) [201.37.168.154]:44831: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 171.225.202.97

🇺🇸 104.28.202.178

🇷🇺 87.249.25.169

🇳🇱 45.148.10.152

🇵🇰 223.123.108.120

🇬🇧 213.166.84.37

🇧🇷 187.19.155.219

🇺🇸 172.178.16.179

🇩🇪 151.243.11.230

🇺🇸 147.185.132.9

🇨🇳 112.245.248.36

🇫🇷 86.193.69.56

🇺🇸 66.132.159.108

🇺🇸 54.162.140.26

🇷🇺 46.233.227.81

🇪🇬 41.239.87.175

🇸🇬 13.250.241.209

🇳🇴 2a05:dfc1:3ccc:532f::ba:c0d

🇺🇸 206.189.238.210

🇨🇴 186.28.94.33