AbuseIPDB » 91.126.196.67

91.126.196.67 was found in our database!

This IP was reported 477 times. Confidence of Abuse is 100%: ?

100%

ISP	Adamo Telecom Iberia S.A.
Usage Type	Fixed Line ISP
Hostname(s)	cli-5b7ec443.ast.adamo.es
Domain Name	adamo.es
Country	Spain
City	Soses, Catalunya

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 91.126.196.67

Whois 91.126.196.67

IP Abuse Reports for 91.126.196.67:

This IP address has been reported a total of 477 times from 107 distinct sources. 91.126.196.67 was first reported on May 2nd 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
unhfree.net	2024-10-06 21:37:56 (10 hours ago)	Oct 6 18:11:02 canopus postfix/smtpd[3616445]: improper command pipelining after CONNECT from cli-5 ... show moreOct 6 18:11:02 canopus postfix/smtpd[3616445]: improper command pipelining after CONNECT from cli-5b7ec443.ast.adamo.es[91.126.196.67]: \026\003\001\0016\001\000\0012\003\003\367\037^\253ImZ\230w\241\227<j\236\330k\3576\032\005-\260\207\311\265\212\024\025qV\234\257\000\000\264\3000\300,\300(\300$\300\024\300\n\000\245\000\243\000\241\000\237\000k\000j\000i\000h\0009\0008\0007\0006\000\210\000\207\000\206\000\205\300\031\3002\300.\300*\300& Oct 6 23:37:55 canopus postfix/smtpd[3647417]: D92AEDC0202: reject: RCPT from cli-5b7ec443.ast.adamo.es[91.126.196.67]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<wknryz> Oct 6 23:37:55 canopus postfix/smtpd[3647417]: D92AEDC0202: reject: RCPT from cli-5b7ec443.ast.adamo.es[91.126.196.67]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from ... show less	Brute-Force Exploited Host
syokadmin	2024-10-06 18:45:23 (13 hours ago)	(PERMBLOCK) 91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es) has had more than 2 temp blocks in th ... show more(PERMBLOCK) 91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es) has had more than 2 temp blocks in the last 86400 secs show less	Brute-Force
syokadmin	2024-10-06 13:59:09 (18 hours ago)	91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es), 2 distributed smtpauth attacks on account [obama ... show more91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es), 2 distributed smtpauth attacks on account [obamabistrocafe] in the last 3600 secs show less	Brute-Force
Widmo	2024-10-06 11:55:51 (20 hours ago)	2024-10-06T09:48:40.019068+02:00 poczta postfix/submission/smtpd[698397]: warning: cli-5b7ec443.ast. ... show more2024-10-06T09:48:40.019068+02:00 poczta postfix/submission/smtpd[698397]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67]: SASL LOGIN authentication failed 2024-10-06T13:55:51.247139+02:00 poczta postfix/submission/smtpd[742887]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67]: SASL LOGIN authentication failed show less	Brute-Force
Anonymous	2024-10-06 04:30:11 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Joe-Mark	2024-10-06 03:12:43 (1 day ago)	Found list.rtbh.com.tr . proto=tcp . spt=47654 . dpt=25 . NFTABLES . (LXXXV)	Email Spam
MSchienle	2024-10-06 02:14:03 (1 day ago)	Oct 05 21:10:11 customvisuals postfix/smtpd[49621]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67 ... show moreOct 05 21:10:11 customvisuals postfix/smtpd[49621]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Email Spam
syokadmin	2024-10-06 00:57:04 (1 day ago)	91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es), 2 distributed smtpauth attacks on account [i@sya ... show more91.126.196.67 (ES/Spain/cli-5b7ec443.ast.adamo.es), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
MPL	2024-10-05 18:09:25 (1 day ago)	tcp/110 (14 or more attempts)	Port Scan
Burayot	2024-10-05 07:20:36 (2 days ago)	LF_DISTATTACK: 91.126.196.67 (cli-5b7ec443.ast.adamo.es), 6 distributed imapd attacks on account [re ... show moreLF_DISTATTACK: 91.126.196.67 (cli-5b7ec443.ast.adamo.es), 6 distributed imapd attacks on account [redacted] in the last 3600 secs show less	DDoS Attack
juutis	2024-10-05 06:38:51 (2 days ago)	Oct 5 08:38:51 butler postfix/smtpd[1043945]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67]: SA ... show moreOct 5 08:38:51 butler postfix/smtpd[1043945]: warning: cli-5b7ec443.ast.adamo.es[91.126.196.67]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2024-10-05 02:18:00 (2 days ago)	2024-10-04 22:20:09,721 INFO [qtp192881625-1897:smtp://mail.likenet.com.br:7073/service/admin/soap/ ... show more2024-10-04 22:20:09,721 INFO [qtp192881625-1897:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=91.126.196.67;oport=35204;oproto=smtp;soapId=299b938b;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2024-10-04 23:17:44,958 INFO [qtp192881625-2056:smtp://mail.likenet.com.br:7073/service/admin/soap/] [[email protected];oip=91.126.196.67;oport=41314;oproto=smtp;soapId=299b93ef;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2024-10-04 23:17:44,958 INFO [qtp192881625-2056:smtp://mail.likenet.com.br:7073/service/admin/soap/] [[email protected];oip=91.126.196.67;oport=41314;oproto=smtp;soapId=299b93ef;] SoapEngine - handler exception: authentication failed for [[email protected]], invalid password ... show less	Web App Attack
marioselgreco	2024-10-05 01:03:10 (2 days ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
Anonymous	2024-10-05 00:41:10 (2 days ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Joe-Mark	2024-10-04 22:20:39 (2 days ago)	Found list.rtbh.com.tr . proto=tcp . spt=42938 . dpt=25 . NFTABLES . (D)	Email Spam