JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.19.52.240

175.19.52.240 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Jilin province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	240.52.19.175.adsl-pool.jlccptt.net.cn
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.19.52.240

Whois 175.19.52.240

IP Abuse Reports for 175.19.52.240:

This IP address has been reported a total of 48 times from 41 distinct sources. 175.19.52.240 was first reported on September 10th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kreativstrecke	2026-09-11 13:55:51 (1 hour ago)	2026-09-11T15:55:48.088187+02:00 srv02 postfix/smtps/smtpd[2833317]: warning: unknown[175.19.52.240] ... show more 2026-09-11T15:55:48.088187+02:00 srv02 postfix/smtps/smtpd[2833317]: warning: unknown[175.19.52.240]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=rboenschr.boensch 2026-09-11T15:55:50.653655+02:00 srv02 postfix/smtps/smtpd[2833317]: lost connection after AUTH from unknown[175.19.52.240] 2026-09-11T15:55:50.653808+02:00 srv02 postfix/smtps/smtpd[2833317]: disconnect from unknown[175.19.52.240] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇩🇪 tall1oN	2026-09-11 13:53:33 (1 hour ago)	2026-09-11T01:00:59.761371+02:00 kenny dovecot: auth-worker(3342858): conn unix:auth-worker (pid=332 ... show more 2026-09-11T01:00:59.761371+02:00 kenny dovecot: auth-worker(3342858): conn unix:auth-worker (pid=3328985,uid=107): auth-worker<5>: sql([email protected],175.19.52.240): Password mismatch 2026-09-11T01:01:02.118324+02:00 kenny dovecot: auth-worker(3342858): conn unix:auth-worker (pid=3328985,uid=107): auth-worker<6>: pam([email protected],175.19.52.240): pam_authenticate() failed: Authentication failure (Password mismatch?) 2026-09-11T15:53:33.027106+02:00 kenny dovecot: auth-worker(3546652): conn unix:auth-worker (pid=3328985,uid=107): auth-worker<13>: sql([email protected],175.19.52.240): unknown user ... show less	Brute-Force Email Spam
🇩🇪 mnpx	2026-09-11 12:54:36 (2 hours ago)	SMTP brute forcing (3× over 5h:41m); first seen here 2026-09-11T07:13Z	Brute-Force
🇩🇪 kkeyser	2026-09-11 12:44:34 (2 hours ago)	warning: unknown[175.19.52.240]: SASL LOGIN authentication failed: authentication failure	Brute-Force
🇩🇪 kreativstrecke	2026-09-11 10:56:13 (4 hours ago)	2026-09-11T12:56:11.336233+02:00 srv03 postfix/smtps/smtpd[1097331]: warning: unknown[175.19.52.240] ... show more 2026-09-11T12:56:11.336233+02:00 srv03 postfix/smtps/smtpd[1097331]: warning: unknown[175.19.52.240]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-11T12:56:12.332656+02:00 srv03 postfix/smtps/smtpd[1097331]: lost connection after AUTH from unknown[175.19.52.240] ... show less	Brute-Force
🇿🇦 maximonline.co.za	2026-09-11 09:37:10 (5 hours ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇬🇧 gigatech	2026-09-11 08:40:04 (6 hours ago)	SMTP Login Attempt	Brute-Force
🇩🇪 DAUGDE	2026-09-11 08:32:29 (6 hours ago)	2026-09-11T10:32:27.353880+02:00 v2202104133598150667 9275893e7080[129169]: Sep 11 10:32:27 9275893e ... show more 2026-09-11T10:32:27.353880+02:00 v2202104133598150667 9275893e7080[129169]: Sep 11 10:32:27 9275893e7080 postfix/smtps/smtpd[1673]: warning: unknown[175.19.52.240]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-11T10:32:28.544901+02:00 v2202104133598150667 9275893e7080[129169]: Sep 11 10:32:28 9275893e7080 postfix/smtps/smtpd[1673]: lost connection after AUTH from unknown[175.19.52.240] ... show less	Email Spam Spoofing Brute-Force
🇦🇹 AustrianSimon	2026-09-11 08:01:44 (6 hours ago)	11 Sep 2026 08:01:44UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 11 Sep 2026 08:01:44UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 175.19.52.240 show less	Brute-Force
🇮🇹 CoreTech srl	2026-09-11 07:27:33 (7 hours ago)	is-65b7aeb8 09:23:12.159 [5.89.229.42] SMTP Login failed: Username or password is incorrect.is-65b7a ... show more is-65b7aeb8 09:23:12.159 [5.89.229.42] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 09:23:12.159 [5.89.229.42] SMTP Login failed: Incorrect password for user [[email protected]]is-65b7aeb8 09:23:15.982 [185.149.189.102] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 09:23:15.982 [185.149.189.102] SMTP Login failed: User [siges.plesk] not foundis-6411d9d7 09:24:06.713 [175.19.52.240] SMTP Login failed: Domain [cclegal.it] not foundis-6411d9d7 09:24:06.713 [175.19.52.240] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 09:24:27.488 [167.150.160.3] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 09:24:27.488 [167.150.160.3] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 09:26:11.428 [2.228.150.60] SMTP Login failed: Username or password is incorrect.MAIL4-new 09:26:11.428 [2.228.150.60] SMTP Login failed: Incorrect password for user [[email protected]] show less	Brute-Force
🇬🇧 killian7603	2026-09-11 07:25:37 (7 hours ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇬🇧 Aetherweb Ark	2026-09-11 07:00:00 (7 hours ago)	175.19.52.240 (CN/China/240.52.19.175.adsl-pool.jlccptt.net.cn), N distributed smtpauth attacks on a ... show more 175.19.52.240 (CN/China/240.52.19.175.adsl-pool.jlccptt.net.cn), N distributed smtpauth attacks on account in the last X secs show less	Brute-Force
🇭🇺 Lacika555	2026-09-11 06:46:37 (8 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇺🇸 mnogoweb	2026-09-11 05:50:01 (9 hours ago)	(smtpauth) Failed SMTP AUTH login from 175.19.52.240 (CN/China/240.52.19.175.adsl-pool.jlccptt.net.c ... show more (smtpauth) Failed SMTP AUTH login from 175.19.52.240 (CN/China/240.52.19.175.adsl-pool.jlccptt.net.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-10 23:14:56 login authenticator failed for ([220.80.34.25]) [175.19.52.240]: 535 Incorrect authentication data (set_id=jacobhill) 2026-09-10 23:28:49 login authenticator failed for (5x166x12x35.dynamic.yar.ertelecom.ru) [175.19.52.240]: 535 Incorrect authentication data (set_id=ddavidlee) 2026-09-10 23:45:39 login authenticator failed for ([183.207.0.126]) [175.19.52.240]: 535 Incorrect authentication data (set_id=123) 2026-09-10 23:47:25 login authenticator failed for ([113.200.216.246]) [175.19.52.240]: 535 Incorrect authentication data ([email protected]) 2026-09-10 23:49:57 login authenticator failed for (217-211-208-125-no2550.tbcn.telia.com) [175.19.52.240]: 535 Incorrect authentication data (set_id=mikeyadams) show less	Port Scan
🇮🇹 Inartis	2026-09-11 05:40:15 (9 hours ago)	2026-09-11T07:40:13.774789mail1.inartis.it postfix/smtpd[1329626]: warning: unknown[175.19.52.240]: ... show more 2026-09-11T07:40:13.774789mail1.inartis.it postfix/smtpd[1329626]: warning: unknown[175.19.52.240]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.33.182.183

🇷🇴 193.32.162.103

🇪🇨 186.47.21.59

🇨🇴 179.32.213.29

🇭🇰 154.204.253.9

🇬🇧 81.19.219.194

🇹🇿 41.93.28.11

🇨🇱 200.54.189.99

🇰🇪 197.248.8.33

🇧🇩 103.142.184.54

🇮🇩 103.107.119.6

🇷🇺 91.185.47.28

🇰🇷 49.164.114.179

🇵🇰 182.191.86.234

🇮🇩 182.9.195.186

🇦🇺 118.208.201.131

🇧🇩 103.254.167.90

🇻🇳 103.176.20.115

🇨🇳 58.221.60.25

🇧🇷 45.163.153.145