This IP address has been reported a total of
62
times from
16 distinct
sources.
179.51.140.253 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-21T00:02:57.021233+00:00 mail postfix/smtpd[80199]: NOQUEUE: reject: RCPT from mail.transvia ...
show more2026-06-21T00:02:57.021233+00:00 mail postfix/smtpd[80199]: NOQUEUE: reject: RCPT from mail.transvialep.gob.ec[179.51.140.253]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail.transvialep.gob.ec>
...
show less
Compromised Ecuadorian government mail server (transvialep.gob.ec).
Credential kcastillo used to s ...
show moreCompromised Ecuadorian government mail server (transvialep.gob.ec).
Credential kcastillo used to send 419 advance-fee fraud via Roundcube
1.6.6 webmail. X-Spamd-Result headers leak ~100 co-recipients per batch.
Two sends within 12 hours Jun 14 2026. Collection address:
[email protected].
show less