JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.154.236.119

212.154.236.119 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 19%: ?

19%

ISP	Infocom Service, Ltd.
Usage Type	Fixed Line ISP
ASN	AS50482
Hostname(s)	po.energokst.kz
Domain Name	kost.kz
Country	🇰🇿 Kazakhstan
City	Almaty, Almaty

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.154.236.119

Whois 212.154.236.119

IP Abuse Reports for 212.154.236.119:

This IP address has been reported a total of 18 times from 14 distinct sources. 212.154.236.119 was first reported on October 10th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-29 23:33:00 (1 day ago)	NOQUEUE - IP: 212.154.236.119 - Jun 30 01:33:00 plesk postfix/smtpd[1543401]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 212.154.236.119 - Jun 30 01:33:00 plesk postfix/smtpd[1543401]: NOQUEUE: reject: RCPT from po.energokst.kz[212.154.236.119]: 554 5.7.1 Service unavailable; Client host [212.154.236.119] blocked using dnsbl-3.uceprotect.net; Your ISP KAZAKHTELECOM-AS, KZ/AS50482 is UCEPROTECT-Level3 listed because of a spamscore of 192.4. See: http://www.uceprotect.net/rblcheck.php?ipr=212.154.236.119; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<infocom.kz> show less	Email Spam
🇺🇸 xmission.com	2026-06-01 21:59:15 (4 weeks ago)	Sourced 1 spam messages over 3x XMissions threshold. Highest score: 26.9. Latest msgid suffix: ...00 ... show more Sourced 1 spam messages over 3x XMissions threshold. Highest score: 26.9. Latest msgid suffix: ...0035326534 show less	Email Spam
🇩🇪 H. Hampel	2026-05-18 09:01:53 (1 month ago)	Spam.	Email Spam
🇩🇪 CK_beats	2026-05-17 23:30:01 (1 month ago)	Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 3 hits, proto=tcp, ports=25	Port Scan Hacking
🇨🇭 Origon	2026-05-17 21:18:41 (1 month ago)	NOQUEUE - IP: 212.154.236.119 - May 17 23:18:40 plesk postfix/smtpd[613804]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 212.154.236.119 - May 17 23:18:40 plesk postfix/smtpd[613804]: NOQUEUE: reject: RCPT from po.energokst.kz[212.154.236.119]: 554 5.7.1 Service unavailable; Client host [212.154.236.119] blocked using dnsbl-1.uceprotect.net; IP 212.154.236.119 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=212.154.236.119; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<infocom.kz> show less	Email Spam
🇮🇳 Bharat Datacenter	2026-01-16 22:17:05 (5 months ago)	1: date=2026-01-17 time=03:46:03 eventtime=1768601763088423970 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-17 time=03:46:03 eventtime=1768601763088423970 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=212.154.236.119 srccountry="Kazakhstan" dstip=151.243.146.1 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=17 service="DNS" count=394717 attack="udp_flood" srcport=53 dstport=53 attackid=285212772 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID285212772" msg="anomaly: udp_flood, 20001 > threshold 20000, repeats 394718 times since last log, pps 16665 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇳🇱 ATV	2025-07-14 03:07:29 (11 months ago)	SPF check failed: The IP address '212.154.236.119' is not in permitted set for sender	Email Spam Spoofing
🇳🇱 ATV	2025-06-19 03:04:55 (1 year ago)	Message rejected as spam with score: 10.00	Email Spam
🇹🇭 thaizone.com	2025-06-09 22:55:09 (1 year ago)	SPAM	Email Spam
🇺🇸 Rob Wink	2025-05-09 15:14:50 (1 year ago)	May 9 10:14:50 mail postfix/smtpd[1636093]: NOQUEUE: reject: RCPT from po.energokst.kz[212.154.236. ... show more May 9 10:14:50 mail postfix/smtpd[1636093]: NOQUEUE: reject: RCPT from po.energokst.kz[212.154.236.119]: 554 5.7.1 <[email protected]>: Sender address rejected: IMPORTANT MESSAGE!! DUE TO RAMPANT ABUSE OF GMAIL AND GOOGLE EMAIL SYSTEMS WE HAVE BEEN FORCED TO BLOCK THEIR NETWORK.; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<infocom.kz> ... show less	Hacking Brute-Force
🇳🇱 wlt-blocker	2024-11-28 20:45:03 (1 year ago)	Spam with a high level and/or caught by honeypot detected	Email Spam
🇬🇧 Hobby Bob	2024-11-10 22:21:08 (1 year ago)	Nov 10 22:21:08 mail policyd-spf[198502]: 550 5.7.23 Message rejected due to: SPF fail - not authori ... show more Nov 10 22:21:08 mail policyd-spf[198502]: 550 5.7.23 Message rejected due to: SPF fail - not authorized. Please see http://www.openspf.net/Why?s=mfrom;[email protected];ip=212.154.236.119;r= show less	Spoofing Brute-Force
Anonymous	2024-09-13 22:26:43 (1 year ago)	postfix	Email Spam Web App Attack
Anonymous	2024-07-27 03:24:40 (1 year ago)	postfix	Email Spam Web App Attack
Anonymous	2024-04-27 10:21:43 (2 years ago)	postfix	Email Spam Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.237.123

🇵🇱 176.53.159.198

🇰🇿 92.47.46.174

🇯🇵 43.153.189.212

🇷🇴 2.57.121.25

🇮🇳 2404:6800:4000:1003::128

🇵🇱 212.127.90.201

🇻🇳 113.164.66.10

🇺🇸 72.48.182.84

🇮🇳 2404:6800:4000:100c::12b

🇰🇷 211.254.212.59

🇺🇸 205.210.31.54

🇭🇰 199.45.154.180

🇹🇼 198.235.24.55

🇵🇱 178.183.125.51

🇺🇸 98.22.199.55

🇷🇺 78.138.168.46

🇩🇪 45.135.194.113

🇺🇸 40.77.167.79

🇺🇸 20.65.195.46