This IP address has been reported a total of
19
times from
15 distinct
sources.
5.152.145.203 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Suspicious activity detected from IP 5.152.145.203 based on mailserver logs.
Sample logs:
2026-06-22 ...
show moreSuspicious activity detected from IP 5.152.145.203 based on mailserver logs.
Sample logs:
2026-06-22 05:33:03,546 INFO [ImapServer-4800] [ip=172.16.0.182;cid=5702;oip=5.152.145.203;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO)
2026-06-22 05:33:03,546 INFO [ImapServer-4800] [ip=172.16.0.182;oip=5.152.145.203;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=5702;] imap - AUTHENTICATE elapsed=0 (NIO)
2026-06-22 05:33:03,547 INFO [ImapServer-4800] [ip=172.16.0.182;oip=5.152.145.203;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=5702;] imap - authentication failed for [**] (LDAP error: - unable to ldap authenticate: invalid credentials)
2026-06-22 05:33:03,547 INFO [ImapServer-4800] [ip=172.16.0.182;oip=5.152.145.203;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=5702;] account - Error occurred during authentication: authentication failed for [**]. Reason: LDAP error: - unable to lda
show less
5.152.145.203 (IT/Italy/-), 2 distributed imapd attacks on account [[email protected]] in the last ...
show more5.152.145.203 (IT/Italy/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs
show less
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ...
show morePorts: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
SSH
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ