JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.239.5.238

145.239.5.238 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 0%: ?

ISP	OVH Dedicated Servers LON
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns3085776.ip-145-239-5.eu
Domain Name	ovh.net
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.239.5.238

Whois 145.239.5.238

IP Abuse Reports for 145.239.5.238:

This IP address has been reported a total of 62 times from 41 distinct sources. 145.239.5.238 was first reported on December 27th 2024, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (10 months ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇨🇿 lp	2025-07-31 19:51:32 (10 months ago)	Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-31T20:28:13+02:00 war ... show more Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-31T20:28:13+02:00 warning: ns3085776.ip-145-239-5.eu[145.239.5.238]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 TPI-Abuse	2025-07-29 01:33:37 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 145.239.5.238 (ns3085776.ip-145-239-5.eu): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 145.239.5.238 (ns3085776.ip-145-239-5.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 21:33:31.087334 2025] [security2:error] [pid 8105:tid 8105] [client 145.239.5.238:53617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|primacomm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIgk61ETyrziAzAaiHeDYAAAAAQ"], referer: https://primacomm.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-07-28 23:40:08 (10 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 jigas	2025-07-28 04:40:01 (10 months ago)	Rule : IMAP 07/28/25 07:39:04 IMAP-IN 3588 145.239.5.238 * OK IMAP4rev1 server ready at 07/28/25 ... show more Rule : IMAP 07/28/25 07:39:04 IMAP-IN 3588 145.239.5.238 * OK IMAP4rev1 server ready at 07/28/25 07:39:04 50 0 07/28/25 07:39:04 IMAP-IN 3588 145.239.5.238 CAPABILITY CAPABILITY * CAPABILITY IMAP4rev1 IMAP4 AUTH=LOGIN AUTH=CRAM-MD5 IDLE CHILDREN UIDPLUS CLIENTID 123 24 07/28/25 07:39:05 IMAP-IN 3588 145.239.5.238 AUTHENTICATE AUTHENTICATE CRAM-MD5 MBN00000002 NO AUTHENTICATE CRAM-MD5 Failed - Invalid username or password. 113 35 show less	Port Scan Spoofing
🇨🇿 unhfree.net	2025-07-27 20:01:20 (10 months ago)	Jul 27 22:01:20 canopus postfix/smtpd[1264157]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu ... show more Jul 27 22:01:20 canopus postfix/smtpd[1264157]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-239-5.eu> Jul 27 22:01:20 canopus postfix/smtpd[1264157]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-239-5.eu> Jul 27 22:01:20 canopus postfix/smtpd[1264157]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-23 ... show less	Brute-Force Exploited Host
🇹🇷 rtbh.com.tr	2025-07-25 20:07:53 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-25 00:07:52 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-24 20:07:52 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 unhfree.net	2025-07-18 12:19:34 (10 months ago)	Jul 18 14:19:33 canopus postfix/smtpd[421280]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[ ... show more Jul 18 14:19:33 canopus postfix/smtpd[421280]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-239-5.eu> Jul 18 14:19:33 canopus postfix/smtpd[421280]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-239-5.eu> Jul 18 14:19:34 canopus postfix/smtpd[421280]: NOQUEUE: reject: RCPT from ns3085776.ip-145-239-5.eu[145.239.5.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ns3085776.ip-145-239-5.e ... show less	Brute-Force Exploited Host
🇨🇿 lp	2025-07-18 09:20:52 (10 months ago)	Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-18T09:54:19+02:00 war ... show more Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-18T09:54:19+02:00 warning: ns3085776.ip-145-239-5.eu[145.239.5.238]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 nowyouknow	2025-07-17 05:04:22 (10 months ago)	(From [email protected]) Hi there, Are you interested in a virtual assistant to help wi ... show more (From [email protected]) Hi there, Are you interested in a virtual assistant to help with administrative work, prospecting, follow-up with leads, along with other responsibilities? If it's a no, go ahead and send me your best insult and we’ll both enjoy a good chuckle out of it, and I’ll leave you alone. show less	Phishing Web Spam
🇨🇿 lp	2025-07-17 01:51:00 (10 months ago)	Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-17T03:39:54+02:00 war ... show more Email account brute force: 1 attempts were recorded from 145.239.5.238 2025-07-17T03:39:54+02:00 warning: ns3085776.ip-145-239-5.eu[145.239.5.238]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 nowyouknow	2025-07-16 21:01:16 (10 months ago)	(From [email protected]) Hi there, This is Ava from VAs4HIRE. We provide Virtual Assistants ... show more (From [email protected]) Hi there, This is Ava from VAs4HIRE. We provide Virtual Assistants to help with: - Managing social media accounts - Cold calling - Administrative support - Customer service - Data entry - Prospecting - Calendar management - Email management - Market research - Content creation - And much more Respond YES to schedule a Phone Call. Thank you! To unsubscribe from these emails, please reply STOP. show less	Phishing Web Spam
Anonymous	2025-07-16 04:31:33 (10 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.200

🇱🇹 141.98.11.83

🇲🇾 76.13.182.161

🇺🇸 47.251.249.8

🇺🇸 35.243.197.1

🇲🇲 202.157.190.169

🇲🇽 187.249.66.186

🇺🇸 153.66.28.132

🇨🇳 150.255.36.111

🇮🇳 124.123.125.62

🇨🇳 101.71.38.3

🇬🇧 35.246.100.183

🇫🇮 35.228.199.26

🇧🇪 35.205.32.150

🇻🇳 14.228.230.246

🇻🇳 14.224.157.42

🇧🇪 194.187.251.91

🇳🇱 185.156.73.233

🇺🇸 167.172.152.94

🇮🇳 122.175.194.53