JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.180.220.228

94.180.220.228 was found in our database!

This IP was reported 1,125 times. Confidence of Abuse is 39%: ?

39%

ISP	JSC ER-Telecom Holding Kazan branch
Usage Type	Fixed Line ISP
ASN	AS41668
Hostname(s)	dynamicip-94-180-220-228.pppoe.kzn.ertelecom.ru
Domain Name	ertelecom.ru
Country	🇷🇺 Russian Federation
City	Kazan, Tatarstan Republic

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.180.220.228

Whois 94.180.220.228

IP Abuse Reports for 94.180.220.228:

This IP address has been reported a total of 1,125 times from 249 distinct sources. 94.180.220.228 was first reported on January 21st 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-27 06:00:00 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-23 13:20:09 (1 month ago)	ICS Labs identified 94.180.220.228 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-04-27 23:53:37 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/94.180.220.228	SSH
🇩🇪 Paul Smith	2026-04-27 16:50:34 (1 month ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇨🇦 bmcg	2026-04-27 13:01:55 (1 month ago)	2026-04-22 21:38:02 server smtpd[29406]: warning: unknown[94.180.220.228]:60728: SASL CRAM-MD5 authe ... show more 2026-04-22 21:38:02 server smtpd[29406]: warning: unknown[94.180.220.228]:60728: SASL CRAM-MD5 authentication failed: (reason unavailable), sasl_username=adobe show less	Brute-Force
🇩🇪 FeG Deutschland	2026-04-27 09:12:15 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 Brian Minton	2026-04-27 08:24:19 (1 month ago)	2026-04-26 21:59:07 login_saslauthd_server authenticator failed for ([61.156.217.77]) [94.180.220.22 ... show more 2026-04-26 21:59:07 login_saslauthd_server authenticator failed for ([61.156.217.77]) [94.180.220.228]: 535 Incorrect authentication data (set_id=daemon) 2026-04-27 02:21:24 login_saslauthd_server authenticator failed for ([82.102.165.200]) [94.180.220.228]: 535 Incorrect authentication data (set_id=daemon) 2026-04-27 03:24:19 login_saslauthd_server authenticator failed for ([101.13.4.128]) [94.180.220.228]: 535 Incorrect authentication data (set_id=www-data) ... show less	Brute-Force
🇭🇺 dd3589	2026-04-27 07:25:03 (1 month ago)	2026-04-27T09:24:34+02:00 <masked> exim[1303148]: fixed_login authenticator failed for ([211.252.42. ... show more 2026-04-27T09:24:34+02:00 <masked> exim[1303148]: fixed_login authenticator failed for ([211.252.42.171]) [94.180.220.228]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
Anonymous	2026-04-27 07:07:06 (1 month ago)	IMAP password guessing	Brute-Force
🇵🇱 bmino.pl	2026-04-27 06:00:18 (1 month ago)	Autoban IP(2): 94.180.220.228 - Hostname: dynamicip-94-180-220-228.pppoe.kzn.ertelecom.ru - City: Ka ... show more Autoban IP(2): 94.180.220.228 - Hostname: dynamicip-94-180-220-228.pppoe.kzn.ertelecom.ru - City: Kazan - Region: Tatarstan Republic - Country: RU - Location: 55.7887,49.1221 - Organization: AS41668 JSC ER-Telecom Holding - failed attempts. show less	Brute-Force
Anonymous	2026-04-27 05:55:14 (1 month ago)	2026-04-27T03:45:04.165149+02:00 posta.profi-net.cz postfix/smtps/smtpd[1656273]: warning: unknown[9 ... show more 2026-04-27T03:45:04.165149+02:00 posta.profi-net.cz postfix/smtps/smtpd[1656273]: warning: unknown[94.180.220.228]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=rutex 2026-04-27T07:55:13.288534+02:00 posta.profi-net.cz postfix/smtps/smtpd[1880528]: warning: unknown[94.180.220.228]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Email Spam Brute-Force Exploited Host
Anonymous	2026-04-27 03:02:48 (1 month ago)	94.180.220.228 (RU/Russia/dynamicip-94-180-220-228.pppoe.kzn.ertelecom.ru), 5 distributed smtpauth a ... show more 94.180.220.228 (RU/Russia/dynamicip-94-180-220-228.pppoe.kzn.ertelecom.ru), 5 distributed smtpauth attacks on account *** in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK show less	Brute-Force
🇩🇪 vanlueckn	2026-04-27 00:43:58 (1 month ago)	2026-04-27T00:43:54.393908+00:00 ns1 sshd-session[81620]: pam_unix(sshd:auth): authentication failur ... show more 2026-04-27T00:43:54.393908+00:00 ns1 sshd-session[81620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.220.228 2026-04-27T00:43:56.628924+00:00 ns1 sshd-session[81620]: Failed password for invalid user blank from 94.180.220.228 port 50014 ssh2 2026-04-27T00:43:57.565618+00:00 ns1 sshd-session[81620]: Connection closed by invalid user blank 94.180.220.228 port 50014 [preauth] ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-04-26 22:40:23 (1 month ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:9999 • Num ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:9999 • Number of login attempts: 1 • Client: SSH-2.0-OpenSSH_7.4 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇩🇪 rd1742	2026-04-26 18:08:46 (1 month ago)	Apr 26 18:08:45 quad dovecot: auth-worker(2650448): sql(r.schiedlofsky,94.180.220.228): unknown user	Brute-Force Exploited Host

Showing 1 to 15 of 1125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 178.20.31.14

🇻🇳 125.212.217.143

🇨🇳 120.219.84.24

🇨🇳 106.75.144.128

🇦🇷 200.55.244.6

🇦🇷 181.192.2.9

🇰🇷 158.180.79.132

🇨🇳 122.243.75.46

🇰🇷 121.167.146.157

🇵🇰 103.244.172.59

🇫🇷 51.68.226.87

🇺🇸 43.162.123.246

🇺🇸 205.210.31.46

🇬🇧 195.96.139.182

🇩🇪 172.253.1.218

🇭🇰 154.221.28.214

🇮🇳 103.190.7.203

🇮🇩 103.166.10.244

🇭🇰 101.36.107.233

🇧🇬 91.148.190.150