This IP address has been reported a total of
29
times from
10 distinct
sources.
185.139.48.173 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Indonesia
with 3
reports;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Hacking
3
times;
Web App Attack
3
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
185.139.48.173 (IT/Italy/-), 10 distributed imapd attacks on account [REDACTED] in the last 3600 sec ...
show more185.139.48.173 (IT/Italy/-), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 22 02:36:17 dovecot[692]: imap-login: Login aborted: Logged out (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=43.230.197.120, lip=0.0.0.x, TLS, session=<iw0KDWNeHbUr5sV4>
Oct 22 02:36:22 dovecot[692]: imap-login: Login aborted: Logged out (auth failed, 1 attempts in 3 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=218.60.50.225, lip=0.0.0.x, TLS, session=<7SpIDWNexO3aPDLh>
Oct 22 02:43:11 dovecot[692]: imap-login: Login aborted: Logged out (auth
show less
Email: Login failures from Bad Reputation IP: 185.139.48.173. Threat Score: 5.7/10 (MEDIUM). Reporte ...
show moreEmail: Login failures from Bad Reputation IP: 185.139.48.173. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
12 Aug 2026 13:03:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more12 Aug 2026 13:03:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 185.139.48.173
show less
