JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.28.252.37

139.28.252.37 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 31%: ?

31%

ISP	Starnet LTD
Usage Type	Fixed Line ISP
ASN	AS47485
Domain Name	starnet.lv
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.28.252.37

Whois 139.28.252.37

IP Abuse Reports for 139.28.252.37:

This IP address has been reported a total of 49 times from 38 distinct sources. 139.28.252.37 was first reported on January 3rd 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-03 08:37:06 (1 day ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 Vegascosmetics	2026-06-29 14:17:44 (4 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 06:37:08 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-23 20:26:12 (1 week ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
Anonymous	2026-05-22 02:51:37 (1 month ago)	2026-05-22T04:51:36.970647+02:00 soli-gate cyrus/imaps[2214295]: badlogin: [139.28.252.37] PLAIN (c. ... show more 2026-05-22T04:51:36.970647+02:00 soli-gate cyrus/imaps[2214295]: badlogin: [139.28.252.37] PLAIN ([email protected]) [SASL(-13): authentication failure: Password verification failed] ... show less	Brute-Force
🇩🇪 IP Analyzer	2024-05-08 08:01:09 (2 years ago)	Unauthorized connection attempt from IP address 139.28.252.37 on Port 445(SMB)	Port Scan
Anonymous	2023-06-28 00:47:36 (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 marlorodrigues	2023-02-22 06:42:39 (3 years ago)	Port Scan	Port Scan
🇷🇸 Smel	2023-02-09 12:39:29 (3 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇮🇸 ISPLtd	2023-02-01 15:51:00 (3 years ago)	Feb 1 11:50:56 SRC=139.28.252.37 PROTO=TCP SPT=58704 DPT=5555 SYN Feb 1 11:50:57 SRC=139.28.252.37 ... show more Feb 1 11:50:56 SRC=139.28.252.37 PROTO=TCP SPT=58704 DPT=5555 SYN Feb 1 11:50:57 SRC=139.28.252.37 PROTO=TCP SPT=58704 DPT=5555 SYN Feb 1 11:50:59 SRC=139.28.252.37 PROTO=TCP SPT=58704 DPT=5555 ... show less	Port Scan
🇺🇸 ISPLtd	2023-02-01 13:42:14 (3 years ago)	Feb 1 06:42:11 SRC=139.28.252.37 PROTO=TCP SPT=51997 DPT=5555 SYN Feb 1 06:42:12 SRC=139.28.252.37 ... show more Feb 1 06:42:11 SRC=139.28.252.37 PROTO=TCP SPT=51997 DPT=5555 SYN Feb 1 06:42:12 SRC=139.28.252.37 PROTO=TCP SPT=51997 DPT=5555 SYN Feb 1 06:42:14 SRC=139.28.252.37 PROTO=TCP SPT=51997 DPT=5555 ... show less	Port Scan
🇨🇿 lp	2023-01-28 17:21:04 (3 years ago)	Port scanning: 139.28.252.37 was recorded 87 times by 29 hosts attempting to connect to 1 unique por ... show more Port scanning: 139.28.252.37 was recorded 87 times by 29 hosts attempting to connect to 1 unique port (5555/tcp) show less	Port Scan
🇺🇸 EricTheRedFL	2023-01-18 19:46:10 (3 years ago)	Jan 18 14:46:06 egress kernel: \[105515.065770\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17: ... show more Jan 18 14:46:06 egress kernel: \[105515.065770\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=139.28.252.37 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=36 ID=46476 DF PROTO=TCP SPT=50102 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 18 14:46:07 egress kernel: \[105516.063053\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=139.28.252.37 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=36 ID=46477 DF PROTO=TCP SPT=50102 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 18 14:46:09 egress kernel: \[105518.079981\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=139.28.252.37 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=36 ID=46478 DF PROTO=TCP SPT=50102 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2023-01-17 23:16:57 (3 years ago)	tcp/5555 (24 or more attempts)	Port Scan
🇬🇧 Steptoe	2023-01-11 13:59:02 (3 years ago)	Auto-Blocked - SASL Authentication Failed	Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.92.251.198

🇩🇪 213.209.159.175

🇧🇷 200.219.200.16

🇬🇧 193.163.125.167

🇺🇸 178.95.110.54

🇺🇸 172.234.218.87

🇺🇸 136.66.255.16

🇰🇷 121.165.8.169

🇵🇰 116.206.167.239

🇺🇸 104.22.105.8

🇮🇷 91.92.215.12

🇵🇭 49.151.228.210

🇮🇳 49.36.233.161

🇺🇸 43.135.135.17

🇬🇧 35.203.211.91

🇸🇬 34.143.130.229

🇩🇪 213.209.159.225

🇨🇳 118.145.225.50

🇵🇱 46.175.45.250

🇺🇦 46.98.192.254