This IP address has been reported a total of
13
times from
13 distinct
sources.
205.254.168.252 was first reported on
September 3rd 2025 , and the most recent report was
3 days ago Germany
with 4
reports;
Italy
with 2
reports;
Belgium
with 1
report.
The most common categories in these recent reports were:
Brute-Force
9
times;
Port Scan
2
times;
SSH
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-20 16:30:54
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇩🇪
digico_mt
2026-10-20 15:45:34
(3 days ago)
Oct 20 17:45:33 digico postfix/submission/smtpd[234582]: warning: unknown[205.254.168.252]: SASL PLA ...
show more
Oct 20 17:45:33 digico postfix/submission/smtpd[234582]: warning: unknown[205.254.168.252]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
Oct 20 17:45:33 digico postfix/submission/smtpd[234582]: lost connection after AUTH from unknown[205.254.168.252]
Oct 20 17:45:33 digico postfix/submission/smtpd[234582]: disconnect from unknown[205.254.168.252] ehlo=2 starttls=1 auth=0/1 commands=3/4
...
show less
Port Scan
🇩🇪
tentwentyfour
2026-10-20 15:36:35
(3 days ago)
Blocked for probing for SASL accounts (Email)
Brute-Force
2026-10-20 15:25:28
(3 days ago)
2026-10-20T17:25:27.832292+02:00 host postfix/smtpd[1050441]: warning: unknown[205.254.168.252]: SAS ...
show more
2026-10-20T17:25:27.832292+02:00 host postfix/smtpd[1050441]: warning: unknown[205.254.168.252]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-10-20T17:25:28.012632+02:00 host postfix/smtpd[1050441]: lost connection after AUTH from unknown[205.254.168.252]
2026-10-20T17:25:28.012742+02:00 host postfix/smtpd[1050441]: disconnect from unknown[205.254.168.252] ehlo=2 starttls=1 auth=0/1 commands=3/4
...
show less
Brute-Force
🇮🇹
Inartis
2026-10-20 14:35:09
(3 days ago)
Oct 20 16:35:08 mail1 postfix/smtpd[3240273]: warning: unknown[205.254.168.252]: SASL PLAIN authenti ...
show more
Oct 20 16:35:08 mail1 postfix/smtpd[3240273]: warning: unknown[205.254.168.252]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Port Scan
Brute-Force
🇮🇹
CoreTech srl
2026-10-20 13:07:32
(3 days ago)
"SMTP Login failed": count(IP)=10.0Smartermail 15:03:13.524 [205.254.168.252] SMTP Login failed: Inc ...
show more
"SMTP Login failed": count(IP)=10.0Smartermail 15:03:13.524 [205.254.168.252] SMTP Login failed: Incorrect password for user [[email protected] ]Smartermail 15:03:13.524 [205.254.168.252] SMTP Login failed: Username or password is incorrect.is-674f2577 15:03:11.942 [197.54.105.43] SMTP Login failed: Username or password is incorrect.is-674f2577 15:03:11.942 [197.54.105.43] SMTP Login failed: Incorrect password for user [[email protected] ]Smartermail 15:03:54.651 [88.248.168.139] SMTP Login failed: Incorrect password for user [[email protected] ]Smartermail 15:03:54.651 [88.248.168.139] SMTP Login failed: Username or password is incorrect.Smartermail 15:04:34.937 [101.128.110.28] SMTP Login failed: Username or password is incorrect.Smartermail 15:04:34.937 [101.128.110.28] SMTP Login failed: Incorrect password for user [[email protected] ]mail3-dc1 15:04:55.579 [103.167.254.6] SMTP Login failed: Incorrect password for user [[email protected] ]
show less
Brute-Force
🇧🇪
fpoulet
2026-10-20 12:48:50
(3 days ago)
Blocked by Fail2Ban (Postfix BruteForce)
Brute-Force
SSH
🇸🇰
DSSYSTEMS
2026-10-20 12:48:46
(3 days ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇩🇪
kreativstrecke
2026-10-20 12:38:17
(3 days ago)
2026-10-20T14:38:16.464865+02:00 srv03 postfix/submission/smtpd[3753727]: warning: unknown[205.254.1 ...
show more
2026-10-20T14:38:16.464865+02:00 srv03 postfix/submission/smtpd[3753727]: warning: unknown[205.254.168.252]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-10-20T14:38:16.642703+02:00 srv03 postfix/submission/smtpd[3753727]: lost connection after AUTH from unknown[205.254.168.252]
2026-10-20T14:38:16.643068+02:00 srv03 postfix/submission/smtpd[3753727]: disconnect from unknown[205.254.168.252] ehlo=2 starttls=1 auth=0/1 commands=3/4
...
show less
Brute-Force
🇫🇷
smtp.com.es
2026-10-20 10:45:27
(3 days ago)
Brute force attempt.
Brute-Force
Email Spam
🇮🇱
auth.ink
2026-07-18 18:16:09
(3 months ago)
Malicious activity detected
Port Scan
Brute-Force
Hacking
2026-04-19 15:23:54
(6 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-09-03 08:53:46
(1 year ago)
wordpress-trap
Web App Attack
Showing 1 to
13
of 13 reports
