JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.57.137.250

189.57.137.250 was found in our database!

This IP was reported 358 times. Confidence of Abuse is 100%: ?

100%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS10429
Hostname(s)	189-57-137-250.customer.tdatabrasil.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.57.137.250

Whois 189.57.137.250

IP Abuse Reports for 189.57.137.250:

This IP address has been reported a total of 358 times from 146 distinct sources. 189.57.137.250 was first reported on August 20th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-24 23:21:39 (1 week ago)	2026-05-25T01:21:37.837240+02:00 host postfix/smtpd[251792]: warning: unknown[189.57.137.250]: SASL ... show more 2026-05-25T01:21:37.837240+02:00 host postfix/smtpd[251792]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-05-25T01:21:38.714630+02:00 host postfix/smtpd[251792]: lost connection after AUTH from unknown[189.57.137.250] ... show less	Brute-Force
🇩🇪 mnpx	2026-05-24 22:57:18 (1 week ago)	SMTP brute forcing (4× over 8h:32m); first seen here 2026-05-19T10:05Z	Brute-Force
🇩🇪 mnpx	2026-05-24 22:57:18 (1 week ago)	SMTP brute forcing (3× over 4h:20m); first seen here 2026-05-19T10:05Z	Brute-Force
🇩🇪 mnpx	2026-05-24 22:57:18 (1 week ago)	SMTP brute forcing (2× over 0h:14m); first seen here 2026-05-19T10:05Z	Brute-Force
Anonymous	2026-05-24 22:01:32 (1 week ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇩🇪 kreativstrecke	2026-05-24 21:41:58 (1 week ago)	2026-05-24T22:41:56.213450+01:00 srv03 postfix/smtps/smtpd[941802]: warning: unknown[189.57.137.250] ... show more 2026-05-24T22:41:56.213450+01:00 srv03 postfix/smtps/smtpd[941802]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-24T22:41:57.303060+01:00 srv03 postfix/smtps/smtpd[941802]: lost connection after AUTH from unknown[189.57.137.250] 2026-05-24T22:41:57.303506+01:00 srv03 postfix/smtps/smtpd[941802]: disconnect from unknown[189.57.137.250] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇭🇺 dd3589	2026-05-24 20:59:02 (1 week ago)	2026-05-24T22:58:19+02:00 <masked> exim[675656]: fixed_login authenticator failed for (78.187.9.111. ... show more 2026-05-24T22:58:19+02:00 <masked> exim[675656]: fixed_login authenticator failed for (78.187.9.111.dynamic.ttnet.com.tr) [189.57.137.250]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
🇩🇪 LRob.fr	2026-05-24 18:15:10 (1 week ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
🇨🇭 ale	2026-05-24 17:52:22 (1 week ago)	SMTP bruteforce auth scanning - failed login with invalid user	Brute-Force
🇮🇩 aaKenshin	2026-05-24 16:52:59 (1 week ago)	Suspicious activity detected from IP 189.57.137.250 based on mailserver logs. Sample logs: 2026-05-2 ... show more Suspicious activity detected from IP 189.57.137.250 based on mailserver logs. Sample logs: 2026-05-25 00:21:57,991 INFO [qtp2102534528-41044] [ip=172.16.0.182;oip=189.57.137.250;oport=53557;oproto=smtp;port=37376;soapId=754bc21f;] soap - AuthRequest elapsed=0 2026-05-25 00:24:57,839 INFO [qtp2102534528-41134] [] misc - Access from IP 189.57.137.250 suspended, for repeated failed login. 2026-05-25 00:52:49,456 INFO [qtp2102534528-41195] [ip=172.16.0.182;oip=189.57.137.250;oport=56078;oproto=smtp;port=41946;soapId=754bc2b8;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-05-25 00:52:49,456 INFO [qtp2102534528-41195] [ip=172.16.0.182;oip=189.57.137.250;oport=56078;oproto=smtp;port=41946;soapId=754bc2b8;] SoapEngine - handler exception: authentication failed for [], account not found 2026-05-25 00:52:49,456 INFO [qtp2102534528-41195] [ip=172.16.0.182;oip=189.57.137.250;oport=56078;oproto=smtp;port=41946;soapId=754bc2b8 show less	Brute-Force
🇺🇸 Rip	2026-05-24 16:36:24 (1 week ago)	SASL authentication brute-force attack.	Brute-Force
🇩🇪 chris_yooo	2026-05-24 13:56:50 (1 week ago)	May 24 15:56:48 isp postfix/smtps/smtpd[960905]: warning: unknown[189.57.137.250]: SASL LOGIN authen ... show more May 24 15:56:48 isp postfix/smtps/smtpd[960905]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 24 15:56:49 isp postfix/smtps/smtpd[960905]: lost connection after AUTH from unknown[189.57.137.250] ... show less	Spoofing Brute-Force
Anonymous	2026-05-24 12:09:29 (1 week ago)	SMTP	Brute-Force
🇺🇦 MakselPr	2026-05-24 10:47:04 (1 week ago)	May 24 07:02:40 mail postfix/smtps/smtpd[2051689]: warning: unknown[189.57.137.250]: SASL LOGIN auth ... show more May 24 07:02:40 mail postfix/smtps/smtpd[2051689]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 24 13:47:03 mail postfix/smtps/smtpd[2069416]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇧🇬 sanitariu	2026-05-24 10:43:39 (1 week ago)	May 24 13:43:38 dri postfix/smtpd[3570166]: warning: unknown[189.57.137.250]: SASL LOGIN authenticat ... show more May 24 13:43:38 dri postfix/smtpd[3570166]: warning: unknown[189.57.137.250]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=nasko ... show less	Brute-Force

Showing 121 to 135 of 358 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.59.206.2

🇫🇷 188.209.129.151

🇵🇾 181.123.136.11

🇻🇳 180.93.3.33

🇩🇪 165.245.246.63

🇵🇪 161.132.38.234

🇭🇰 152.32.171.99

🇱🇹 141.98.9.227

🇳🇱 103.176.90.41

🇷🇴 92.118.39.236

🇺🇸 91.230.168.123

🇺🇸 66.132.195.124

🇮🇳 59.98.148.5

🇻🇳 42.116.14.91

🇨🇳 180.76.236.214

🇨🇳 180.76.231.110

🇨🇳 180.76.225.49

🇨🇳 180.76.183.253

🇨🇳 117.71.53.210

🇸🇪 81.170.248.221