This IP address has been reported a total of
4
times from
3 distinct
sources.
67.254.178.28 was first reported on
October 1st 2026 , and the most recent report was
1 day ago Netherlands
with 2
reports;
Germany
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Brute-Force
2
times;
Web App Attack
1
time;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-10 12:52:40
(1 day ago)
67.254.178.28 (US/United States/syn-067-254-178-028.res.spectrum.com), 10 distributed imapd attacks ...
show more
67.254.178.28 (US/United States/syn-067-254-178-028.res.spectrum.com), 10 distributed imapd attacks on account [redacted]
show less
Brute-Force
🇩🇪
iNetWorker
2026-10-07 07:25:51
(4 days ago)
pop/imap
Brute-Force
🇳🇱
Mangelot Hosting
2026-10-03 19:54:39
(1 week ago)
67.254.178.28 (US/United States/syn-067-254-178-028.res.spectrum.com), 10 distributed imapd attacks ...
show more
67.254.178.28 (US/United States/syn-067-254-178-028.res.spectrum.com), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 3 21:53:18 dovecot[200888]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 9 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=74.126.187.223, lip=0.0.0.x, TLS, session=<dtVs//RcjJpKfrvf>
Oct 3 21:54:13 dovecot[200888]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 9 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=73.106.67.202, lip=0.0.0.x, TLS, session=<trubAvVcIq9JakPK>
Oct 3 21:47:50 dovecot[200888]: imap-login: Login aborted: Logged
show less
DDoS Attack
🇳🇱
Mangelot Hosting
2026-10-01 06:34:07
(1 week ago)
(dovecot_invalid_user) srv101 Dovecot login on non-existent account 67.254.178.28 (US/United States/ ...
show more
(dovecot_invalid_user) srv101 Dovecot login on non-existent account 67.254.178.28 (US/United States/syn-067-254-178-028.res.spectrum.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 1 08:34:03 dovecot[876376]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 27 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=67.254.178.28, lip=0.0.0.x, TLS: Connection closed, session=<CG9qmMFc+oZD/rIc>
show less
Web App Attack
Showing 1 to
4
of 4 reports
