JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.29.143.201

66.29.143.201 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 100%: ?

100%

ISP	Namecheap, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22612
Hostname(s)	server1.realgbedu.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.29.143.201

Whois 66.29.143.201

IP Abuse Reports for 66.29.143.201:

This IP address has been reported a total of 136 times from 98 distinct sources. 66.29.143.201 was first reported on June 7th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-10 22:51:13 (2 days ago)	SMTP auth failures (22)	Brute-Force
Anonymous	2026-06-10 22:03:08 (2 days ago)	mail hacking	Hacking
Anonymous	2026-06-10 16:30:32 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 eebh.hu	2026-06-10 15:34:44 (2 days ago)	Jun 10 16:56:25 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<su ... show more Jun 10 16:56:25 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=194.36.88.23, TLS, session=<FQl2cudTZKhCHY/J> Jun 10 17:19:50 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=194.36.88.23, TLS, session=<w+EyxudTnqZCHY/J> Jun 10 17:34:43 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=194.36.88.23, TLS, session=<kCR7++dTEpFCHY/J> ... show less	Brute-Force
🇫🇮 23p02732	2026-06-10 15:30:38 (2 days ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇷🇺 DZBOT	2026-06-10 14:50:11 (2 days ago)	DZBOT: [MTA] Brute-force users	Brute-Force
🇺🇸 TurboTechieSystems	2026-06-10 13:25:17 (2 days ago)	2026-06-10T06:20:40.341180-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed ... show more 2026-06-10T06:20:40.341180-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T06:51:28.163759-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T07:22:24.342190-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T07:53:36.138387-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T08:25:16.109748-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, show less	Brute-Force
Anonymous	2026-06-10 11:59:22 (2 days ago)	6x Dovecot auth failed (on 6 different adresses)	Brute-Force
🇺🇸 TurboTechieSystems	2026-06-10 10:17:48 (2 days ago)	2026-06-10T03:11:12.388677-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed ... show more 2026-06-10T03:11:12.388677-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T03:42:54.390256-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T04:14:33.172638-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T04:46:08.341689-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-06-10T05:17:47.536226-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, show less	Brute-Force
🇬🇧 Aetherweb Ark	2026-06-10 10:10:42 (2 days ago)	cphulk brute force one-day block	Brute-Force
🇩🇪 initsol	2026-06-10 10:03:48 (2 days ago)	Jun 10 10:59:34 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user= ... show more Jun 10 10:59:34 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=10.10.50.34, TLS, session=<GjVEduJTHNRCHY/J> Jun 10 11:31:12 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=10.10.50.34, TLS, session=<GzVl5+JT/utCHY/J> Jun 10 12:02:48 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=10.10.50.34, TLS, session=<hQxoWONTKLhCHY/J> ... show less	Brute-Force
🇫🇷 LRob.fr	2026-06-10 09:15:03 (2 days ago)	POP or IMAP failed login attempts detected by Fail2Ban in plesk-dovecot jail	Brute-Force
🇫🇷 dwmp	2026-06-10 09:08:40 (2 days ago)	Jun 10 10:05:17 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 10 10:05:17 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=75.119.153.41, TLS, session=<NOootOFTZL9CHY/J> Jun 10 10:37:00 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=75.119.153.41, TLS, session=<fj6WJeJT7OhCHY/J> Jun 10 11:08:40 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=66.29.143.201, lip=75.119.153.41, TLS, session=<eErJluJTFNVCHY/J> ... show less	Brute-Force
🇩🇪 onlyops.app	2026-06-10 09:00:05 (2 days ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇫🇷 Elysium Security	2026-06-10 08:38:18 (2 days ago)	Mass scanning for Web CVE	Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.183.103.121

🇵🇰 154.208.40.249

🇺🇸 64.62.197.13

🇺🇬 41.220.3.101

🇷🇴 2.57.121.25

🇺🇸 172.253.210.20

🇺🇸 147.185.132.65

🇨🇱 136.248.242.166

🇺🇸 136.144.19.48

🇻🇳 113.161.94.64

🇦🇪 92.97.236.69

🇫🇷 85.217.140.20

🇺🇸 64.62.156.202

🇨🇳 58.220.39.200

🇵🇭 8.220.137.182

🇲🇽 187.190.35.163

🇵🇾 181.127.208.125

🇩🇪 167.94.146.66

🇺🇸 147.185.132.237

🇨🇳 119.53.253.2