JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.254.139.14

38.254.139.14 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 21%: ?

21%

ISP	Wyyerd Group
Usage Type	Fixed Line ISP
ASN	AS54936
Hostname(s)	38-254-139-14.phx.az.wyyerd.us
Domain Name	wyyerd.com
Country	🇺🇸 United States of America
City	Surprise, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.254.139.14

Whois 38.254.139.14

IP Abuse Reports for 38.254.139.14:

This IP address has been reported a total of 7 times from 6 distinct sources. 38.254.139.14 was first reported on April 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 notelseit	2026-09-01 11:23:36 (1 day ago)	2026-09-01T13:23:21.207653+02:00 mail dovecot: auth-worker(2592830): conn unix:auth-worker (pid=1643 ... show more 2026-09-01T13:23:21.207653+02:00 mail dovecot: auth-worker(2592830): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<63192>: sql([email protected],38.254.139.14,<QzpqJWparb4m/osO>): Password mismatch 2026-09-01T13:23:27.784036+02:00 mail dovecot: auth-worker(2592830): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<63197>: sql([email protected],38.254.139.14,<QzpqJWparb4m/osO>): Password mismatch 2026-09-01T13:23:33.327232+02:00 mail dovecot: auth-worker(2592830): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<63199>: sql([email protected],38.254.139.14,<QzpqJWparb4m/osO>): Password mismatch 2026-09-01T13:23:35.533337+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 14 secs): user=<[email protected]>, method=PLAIN, rip=38.254.139.14, lip=65.21.131.50, TLS: Connection closed, session=<QzpqJWparb4m/osO> 2026-09-01T13:23:36.386041+02:00 mail dovecot: auth-worker(2592830): conn unix:auth-worker (pid=1643206,uid=110) ... show less	Brute-Force Email Spam
🇪🇸 el-brujo	2026-08-26 13:01:11 (1 week ago)	HTTP DDoS Attack Layer 7	DDoS Attack
Anonymous	2026-07-07 17:24:43 (1 month ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=49&mode=grid&product_vc_mcu=104&product_vc_type=103&q=ex+90&stock=1 \| UA: Mozilla/5.0 (Android 3.0; Mobile; rv:16.0) Gecko/16.0 Firefox/16.0 \| (Magento Site) show less	Hacking Bad Web Bot
🇮🇹 VHosting	2026-07-06 21:49:34 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-04-22 11:48:28 (4 months ago)	Comtrend.VR-3033.Remote.Command.Injection	Exploited Host
Anonymous	2026-04-20 14:07:38 (4 months ago)	Comtrend.VR-3033.Remote.Command.Injection	Exploited Host
Anonymous	2026-04-19 08:49:25 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.23.41.237

🇿🇦 105.214.0.25

🇷🇺 95.108.213.236

🇰🇿 93.95.241.150

🇩🇪 87.188.158.112

🇺🇸 66.132.172.120

🇲🇽 187.184.158.92

🇨🇭 107.189.2.131

🇸🇪 92.33.193.213

🇮🇹 79.15.4.7

🇺🇸 73.118.45.139

🇺🇸 72.240.125.133

🇲🇦 41.143.219.154

🇺🇸 23.94.230.98

🇺🇸 158.94.187.179

🇺🇸 100.48.87.243

🇧🇷 45.205.1.243

🇺🇸 44.215.198.5

🇧🇷 205.210.31.238

🇦🇷 200.59.127.152