This IP address has been reported a total of
23
times from
21 distinct
sources.
74.126.64.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(postfix-unknown) Failed postfix unknown login with username [redacted] from 74.126.64.28 (US/United ...
show more(postfix-unknown) Failed postfix unknown login with username [redacted] from 74.126.64.28 (US/United States/minford-ded-cust-net-74-126-64-28.falcon1.net)
show less
74.126.64.28, 2 distributed smtpauth attacks on account [info] in the last 86400 secs; Ports: *; Dir ...
show more74.126.64.28, 2 distributed smtpauth attacks on account [info] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2026-06-16 16:09:36 dovecot_login authenticator failed for H=(syn-098-122-215-023.res.spectrum.com) [125.19.158.2]:53472: 535 Incorrect authentication data (set_id=info)
2026-06-16 14:44:19 dovecot_login authenticator failed for H=([125.21.218.193]) [74.126.64.28]:56568: 535 Incorrect authentication data (set_id=info)
IP Addresses Blocked:
125.19.158.2
show less
(smtpauth) Failed SMTP AUTH login from 74.126.64.28: 1 in the last 86400 secs; Ports: *; Direction: ...
show more(smtpauth) Failed SMTP AUTH login from 74.126.64.28: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-06-16 14:44:19 dovecot_login authenticator failed for H=([125.21.218.193]) [74.126.64.28]:56568: 535 Incorrect authentication data (set_id=info)
show less
IMAP/POP user enumeration | Evidence: Jun 16 05:45:34 [host] dovecot: auth-worker(3209153): sql(info ...
show moreIMAP/POP user enumeration | Evidence: Jun 16 05:45:34 [host] dovecot: auth-worker(3209153): sql(info,74.126.64.28): unknown user | ASN: INDEPENDENTSFIBERNETWORK | Country: US
show less
Port Scan
Web App Attack
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩