This IP address has been reported a total of
10
times from
10 distinct
sources.
139.162.95.106 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Attack blocked by firewall: IMAP login brute-force. Blocked by firewall on 5 different hosting serve ...
show moreAttack blocked by firewall: IMAP login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 143, 993 (IMAP). Automated report.
show less
Oct 7 02:22:27 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs ...
show moreOct 7 02:22:27 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=139.162.95.106, lip=X.X.X.X session=
show less
Suspicious activity detected from IP 139.162.95.106 based on mailserver logs.
Sample logs:
2026-10-0 ...
show moreSuspicious activity detected from IP 139.162.95.106 based on mailserver logs.
Sample logs:
2026-10-06 20:46:35,413 INFO [ImapServer-28862] [ip=172.16.0.182;oip=139.162.95.106;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=31612;] imap - LOGIN elapsed=1 (NIO)
2026-10-06 20:46:39,029 INFO [ImapServer-28862] [ip=172.16.0.182;cid=31613;oip=139.162.95.106;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO)
2026-10-06 20:46:39,032 INFO [ImapServer-28862] [ip=172.16.0.182;oip=139.162.95.106;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=31613;] imap - authentication failed for [**] (LDAP error: - unable to ldap authenticate: invalid credentials)
2026-10-06 20:46:39,033 INFO [ImapServer-28862] [ip=172.16.0.182;oip=139.162.95.106;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=31613;] account - Error occurred during authentication: authentication failed for [**]. Reason: LDAP error: - unable
show less
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ