JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.208.140.206

54.208.140.206 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 2%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	smtp54208140206.enduserdrm.info
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.208.140.206

Whois 54.208.140.206

IP Abuse Reports for 54.208.140.206:

This IP address has been reported a total of 19 times from 9 distinct sources. 54.208.140.206 was first reported on September 24th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 gandalf	2026-09-11 06:56:14 (5 days ago)	2026-09-11 08:56:06 wonderland sendmail[4104225]: 68B6u1OL4104225: smtp54208140206.enduserdrm.info [ ... show more 2026-09-11 08:56:06 wonderland sendmail[4104225]: 68B6u1OL4104225: smtp54208140206.enduserdrm.info [54.208.140.206] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA show less	Brute-Force Email Spam
🇨🇭 Origon	2026-07-15 09:17:09 (2 months ago)	NOQUEUE - IP: 54.208.140.206 - Jul 15 11:17:09 plesk postfix/smtpd[730287]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 54.208.140.206 - Jul 15 11:17:09 plesk postfix/smtpd[730287]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 554 5.7.1 Service unavailable; Client host [54.208.140.206] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: http://www.spamrats.com/bl?54.208.140.206; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Email Spam
🇨🇭 Origon	2026-05-06 06:29:37 (4 months ago)	NOQUEUE - IP: 54.208.140.206 - May 6 08:29:37 plesk postfix/smtpd[1943490]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 54.208.140.206 - May 6 08:29:37 plesk postfix/smtpd[1943490]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 554 5.7.1 Service unavailable; Client host [54.208.140.206] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: https://www.spamrats.com/bl?54.208.140.206; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Email Spam
🇨🇭 Origon	2026-04-27 16:47:12 (4 months ago)	NOQUEUE - IP: 54.208.140.206 - Apr 27 18:47:12 plesk postfix/smtpd[2961042]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 54.208.140.206 - Apr 27 18:47:12 plesk postfix/smtpd[2961042]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 554 5.7.1 Service unavailable; Client host [54.208.140.206] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: http://www.spamrats.com/bl?54.208.140.206; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Email Spam
🇪🇸 didevi	2026-04-01 02:17:07 (5 months ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇨🇭 Origon	2026-03-17 11:16:58 (5 months ago)	NOQUEUE - IP: 54.208.140.206 - Mar 17 12:16:56 plesk postfix/smtpd[3870233]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 54.208.140.206 - Mar 17 12:16:56 plesk postfix/smtpd[3870233]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 554 5.7.1 Service unavailable; Client host [54.208.140.206] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: https://www.spamrats.com/bl?54.208.140.206; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Email Spam
🇺🇦 llighthunter	2026-02-04 12:46:01 (7 months ago)	Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduser ... show more Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduserdrm.info[54.208.140.206] Jan 29 19:26:47 mail postfix/smtpd[6763]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Hacking SSH
🇺🇦 llighthunter	2026-01-30 21:09:10 (7 months ago)	Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduser ... show more Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduserdrm.info[54.208.140.206] Jan 29 19:26:47 mail postfix/smtpd[6763]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Hacking SSH
🇺🇦 llighthunter	2026-01-29 17:26:50 (7 months ago)	Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduser ... show more Jan 29 19:26:45 mail postfix/smtpd[6763]: lost connection after CONNECT from smtp54208140206.enduserdrm.info[54.208.140.206] Jan 29 19:26:47 mail postfix/smtpd[6763]: NOQUEUE: reject: RCPT from smtp54208140206.enduserdrm.info[54.208.140.206]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp54208140206.enduserdrm.info> show less	Hacking SSH
🇩🇪 itak	2026-01-23 04:46:34 (7 months ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
🇪🇸 didevi	2026-01-01 03:54:20 (8 months ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇪🇸 didevi	2025-06-04 02:52:15 (1 year ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇨🇦 ISPLtd	2025-05-01 01:03:00 (1 year ago)	MX probe ehlo enduserdrm.info FROM:<[email protected]>	Email Spam Port Scan
🇩🇪 WhiteShark	2024-12-23 12:58:45 (1 year ago)	enduserdrm.info blocked due to abusive behavior	Brute-Force
🇷🇸 Smel	2024-11-25 08:04:53 (1 year ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.10.42.66

🇨🇳 220.181.108.90

🇺🇸 216.180.246.65

🇺🇸 216.126.239.185

🇩🇪 167.94.146.34

🇺🇸 159.223.97.218

🇨🇳 144.123.78.123

🇱🇰 122.255.14.70

🇸🇬 85.203.21.49

🇸🇪 81.230.146.243

🇫🇮 65.21.136.254

🇨🇳 42.193.181.128

🇬🇧 35.203.211.52

🇯🇵 35.187.194.245

🇲🇺 197.225.146.23

🇨🇳 116.179.32.166

🇸🇬 47.128.62.213

🇺🇦 46.98.62.93

🇧🇪 34.52.176.137

🇮🇹 31.190.186.213