JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.72.159.0

148.72.159.0 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 52%: ?

52%

ISP	velia.net
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30083
Hostname(s)	moon.truehostdns.com
Domain Name	velia.net
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.72.159.0

Whois 148.72.159.0

IP Abuse Reports for 148.72.159.0:

This IP address has been reported a total of 32 times from 25 distinct sources. 148.72.159.0 was first reported on June 18th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ecs.ge	2026-06-26 09:23:26 (3 weeks ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇩🇪 gadix	2026-06-18 17:32:13 (1 month ago)	2026-06-18 11:40:18,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 202 ... show more 2026-06-18 11:40:18,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 2026-06-18 15:52:42,044 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 2026-06-18 19:32:12,493 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 148.72.159.0 ... show less	Brute-Force
🇩🇪 strxmpp	2026-06-18 16:33:39 (1 month ago)	148.72.159.0 - - [18/Jun/2026:18:33:38 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1. ... show more 148.72.159.0 - - [18/Jun/2026:18:33:38 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 4755 "-" "SecurityAudit/1.0" ... show less	Bad Web Bot
Anonymous	2026-06-18 16:21:10 (1 month ago)	RUPLDE WEBEXPLOIT 148.72.159.0 (moon.truehostdns.com)	Web App Attack
🇩🇪 Vegascosmetics	2026-06-18 15:44:33 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇳🇱 Godert Jan van Manen	2026-06-18 15:42:09 (1 month ago)	Jun 18 17:40:05 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<mcJ//YhUWt2US ... show more Jun 18 17:40:05 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<mcJ//YhUWt2USJ8A>): unknown user Jun 18 17:40:07 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<mcJ//YhUWt2USJ8A> Jun 18 17:41:03 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<sif0AIlUcu2USJ8A>): unknown user Jun 18 17:41:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<sif0AIlUcu2USJ8A> Jun 18 17:42:08 odin dovecot: auth-worker(3431): sql([email protected],148.72.159.0,<ivHUBIlUBtWUSJ8A>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 14:52:34 (1 month ago)	2026-06-18T17:52:34.499934+03:00 radionet dovecot: auth: passwd-file([email protected],148.72.159.0,<2A+ ... show more 2026-06-18T17:52:34.499934+03:00 radionet dovecot: auth: passwd-file([email protected],148.72.159.0,<2A+QU4hUnNiUSJ8A>): unknown user show less	Brute-Force
Anonymous	2026-06-18 13:38:03 (1 month ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 7 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 12:44:44 (1 month ago)	Jun 18 14:35:03 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YYHJZ4ZUbrKUSJ8A ... show more Jun 18 14:35:03 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YYHJZ4ZUbrKUSJ8A>): unknown user Jun 18 14:35:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<YYHJZ4ZUbrKUSJ8A> Jun 18 14:37:46 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<ElB/cYZUjLmUSJ8A>): unknown user Jun 18 14:37:48 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<ElB/cYZUjLmUSJ8A> Jun 18 14:44:43 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<TKNaioZU5reUSJ8A>): unknown user show less	Brute-Force
🇫🇷 Batz	2026-06-18 12:38:41 (1 month ago)	[148.72.159.0] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇳🇱 Godert Jan van Manen	2026-06-18 12:01:16 (1 month ago)	Jun 18 13:56:27 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YBC+3YVU6pm ... show more Jun 18 13:56:27 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<YBC+3YVU6pmUSJ8A>): unknown user Jun 18 13:56:29 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<YBC+3YVU6pmUSJ8A> Jun 18 13:59:09 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<byhh54VU8O2USJ8A>): unknown user Jun 18 13:59:11 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=148.72.159.0, lip=178.162.131.122, session=<byhh54VU8O2USJ8A> Jun 18 14:01:16 odin dovecot: auth-worker(20585): sql([email protected],148.72.159.0,<exXy7oVU8taUSJ8A>): unknown user show less	Brute-Force
🇩🇪 onlyops.app	2026-06-18 12:00:25 (1 month ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇮🇹 abuseiphack	2026-06-18 11:42:32 (1 month ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:34:10 (1 month ago)	Too many failed attempts / attacks from 148.72.159.0	Brute-Force Port Scan Email Spam
🇩🇪 ecs.ge	2026-06-18 11:24:47 (1 month ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 110.227.213.163

🇨🇳 222.246.240.162

🇩🇪 213.202.231.12

🇨🇭 208.69.78.36

🇨🇳 182.40.195.233

🇸🇪 176.10.197.168

🇩🇪 167.94.146.33

🇺🇸 154.58.229.20

🇦🇺 118.211.165.46

🇵🇰 101.50.83.146

🇫🇷 91.196.152.246

🇮🇹 79.0.5.138

🇷🇺 31.173.7.121

🇺🇸 20.55.92.25

🇮🇳 203.192.227.103

🇩🇪 194.238.79.8

🇳🇱 192.42.116.68

🇲🇽 187.217.36.136

🇦🇫 149.54.40.182

🇱🇹 141.98.10.99