AbuseIPDB » 189.58.139.57

189.58.139.57 was found in our database!

This IP was reported 389 times. Confidence of Abuse is 100%: ?

100%

ISP	Telefonica Brasil S.A
Usage Type	Mobile ISP
Hostname(s)	atm497-1-2-1.cta.gvt.net.br
Domain Name	telefonica.com.br
Country	Brazil
City	Curitiba, Parana

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 189.58.139.57

Whois 189.58.139.57

IP Abuse Reports for 189.58.139.57:

This IP address has been reported a total of 389 times from 161 distinct sources. 189.58.139.57 was first reported on June 26th 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
kreativstrecke	2024-09-11 10:45:58 (2 hours ago)	Sep 11 12:45:57 srv03 postfix/smtps/smtpd[3751583]: warning: unknown[189.58.139.57]: SASL LOGIN auth ... show moreSep 11 12:45:57 srv03 postfix/smtps/smtpd[3751583]: warning: unknown[189.58.139.57]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
TZNOC	2024-09-11 08:01:24 (4 hours ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
R.G.	2024-09-11 07:52:29 (5 hours ago)	189.58.139.57 (BR/Brazil/atm497-1-2-1.cta.gvt.net.br), 5 distributed smtpauth attacks on account [cl ... show more189.58.139.57 (BR/Brazil/atm497-1-2-1.cta.gvt.net.br), 5 distributed smtpauth attacks on account [cloacked] in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: show less	Brute-Force
kreativstrecke	2024-09-11 07:28:20 (5 hours ago)	Sep 11 09:28:19 srv03 postfix/smtps/smtpd[3583062]: lost connection after AUTH from unknown[189.58.1 ... show moreSep 11 09:28:19 srv03 postfix/smtps/smtpd[3583062]: lost connection after AUTH from unknown[189.58.139.57] Sep 11 09:28:19 srv03 postfix/smtps/smtpd[3583062]: disconnect from unknown[189.58.139.57] ehlo=1 auth=0/1 commands=1/2 Sep 11 09:28:19 srv03 postfix/smtps/smtpd[3583062]: lost connection after AUTH from unknown[189.58.139.57] ... show less	Brute-Force
INTEQ	2024-09-11 04:29:54 (8 hours ago)	Brute force attack from 189.58.139.57	Brute-Force
Paul Smith	2024-09-11 02:11:56 (10 hours ago)	Email Auth Brute force attack 6/5 in last day	Brute-Force
Anonymous	2024-09-11 00:07:09 (12 hours ago)	7 Login Attempts	Port Scan Brute-Force
[email protected]	2024-09-10 23:15:02 (13 hours ago)	Total attacks: 4	Brute-Force
rtbh.com.tr	2024-09-10 20:54:47 (16 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-09-10 20:34:40 (16 hours ago)	2024-09-10 17:17:56,532 INFO [qtp192881625-1779:smtp://mail.likenet.com.br:7073/service/admin/soap/ ... show more2024-09-10 17:17:56,532 INFO [qtp192881625-1779:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=189.58.139.57;oport=49921;oproto=smtp;soapId=779f3b86;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2024-09-10 17:34:39,692 INFO [qtp192881625-1821:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=189.58.139.57;oport=57964;oproto=smtp;soapId=779f3b9f;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2024-09-10 17:34:39,692 INFO [qtp192881625-1821:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=189.58.139.57;oport=57964;oproto=smtp;soapId=779f3b9f;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found ... show less	Web App Attack
didevi	2024-09-10 19:36:39 (17 hours ago)	2024-09-10T21:36:38.986020+02:00 mail01 postfix/submission/smtpd[506381]: warning: unknown[189.58.13 ... show more2024-09-10T21:36:38.986020+02:00 mail01 postfix/submission/smtpd[506381]: warning: unknown[189.58.139.57]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
weblite	2024-09-10 18:16:04 (18 hours ago)	LONG_RUNNING SMTP_BRUTE_FORCE	Brute-Force
singertc	2024-09-10 15:45:39 (21 hours ago)	2024-09-10 16:27:45 cram_md5_server authenticator failed for (corporativo.static.gvt.net.br) [189.58 ... show more2024-09-10 16:27:45 cram_md5_server authenticator failed for (corporativo.static.gvt.net.br) [189.58.139.57]: 535 Incorrect authentication data ([email protected]) 2024-09-10 17:45:39 cram_md5_server authenticator failed for (corporativo.static.gvt.net.br) [189.58.139.57]: 535 Incorrect authentication data ([email protected]) ... show less	Email Spam Hacking
cticom.ms	2024-09-10 15:14:52 (21 hours ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
solution.it	2024-09-10 14:57:47 (22 hours ago)	Sep 10 16:57:46 vps789997 smtpd[4895]: dad519c109ae22fd smtp failed-command command="AUTH LOGIN (pas ... show moreSep 10 16:57:46 vps789997 smtpd[4895]: dad519c109ae22fd smtp failed-command command="AUTH LOGIN (password)" result="535 Authentication failed" show less	Brute-Force