JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.76.160.52

38.76.160.52 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Cogent Communications, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401701
Domain Name	cogentco.com
Country	🇭🇰 Hong Kong
City	Kwai Chung, Kwai Tsing District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.76.160.52

Whois 38.76.160.52

IP Abuse Reports for 38.76.160.52:

This IP address has been reported a total of 34 times from 31 distinct sources. 38.76.160.52 was first reported on July 25th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Richie	2026-07-25 15:38:21 (2 days ago)	2026-07-25T17:38:20.372155+02:00 host1 auth[3775099]: pam_unix(dovecot:auth): authentication failure ... show more 2026-07-25T17:38:20.372155+02:00 host1 auth[3775099]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 ... show less	Brute-Force Email Spam
Anonymous	2026-07-25 14:42:12 (2 days ago)	Authentication failure	Brute-Force
Anonymous	2026-07-25 14:11:42 (2 days ago)	automatically banned	Brute-Force Email Spam
🇫🇮 danskefilm.dk	2026-07-25 13:55:01 (2 days ago)	IMAP password guessing	Brute-Force
🇩🇪 Richie	2026-07-25 13:30:12 (2 days ago)	2026-07-25T15:30:07.337498+02:00 host1 auth[3735029]: pam_unix(dovecot:auth): authentication failure ... show more 2026-07-25T15:30:07.337498+02:00 host1 auth[3735029]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 2026-07-25T15:30:11.522538+02:00 host1 dovecot[4054918]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=45.90.5.147, session=<7jHRfG9XJK0mTKA0> 2026-07-25T15:30:11.522538+02:00 host1 dovecot[4054918]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=45.90.5.147, session=<7jHRfG9XJK0mTKA0> ... show less	Brute-Force Email Spam
🇧🇷 tiwanetbr	2026-07-25 12:53:53 (2 days ago)	Jul 25 08:24:19 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Jul 25 08:24:19 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=38.76.160.52, lip=201.46.65.33, session=<t4rwum1XyOYmTKA0> Jul 25 08:41:58 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=38.76.160.52, lip=201.46.65.33, session=<SacT+m1XqNomTKA0> Jul 25 08:59:34 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=38.76.160.52, lip=201.46.65.33, session=<sHH+OG5XPM0mTKA0> Jul 25 09:17:36 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=38.76.160.52, lip=201.46.65.33, session=<Kgp6eW5XmsImTKA0> Jul 25 09:35:40 mx2 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=38.76.160.52, lip=201.46.65.33, sessi ... show less	Brute-Force
Anonymous	2026-07-25 12:43:49 (2 days ago)	2026-07-25T13:32:15.423760+02:00 mail dovecot: auth: passwd-file(info@mydomain,38.76.160.52,<sGNM121 ... show more 2026-07-25T13:32:15.423760+02:00 mail dovecot: auth: passwd-file(info@mydomain,38.76.160.52,<sGNM121XDMkmTKA0>): unknown user (SHA1 of given password: 681eff) 2026-07-25T13:49:49.287668+02:00 mail dovecot: auth: passwd-file(test@mydomain,38.76.160.52,<eRMdFm5XlLsmTKA0>): unknown user (SHA1 of given password: 799d35) 2026-07-25T14:07:36.545616+02:00 mail dovecot: auth: passwd-file(admin@mydomain,38.76.160.52,<GR+6VW5Xpq8mTKA0>): Password mismatch (SHA1 of given password: 1912e4) 2026-07-25T14:25:42.231426+02:00 mail dovecot: auth: passwd-file(support@mydomain,38.76.160.52,<Q2Rwlm5XKqYmTKA0>): unknown user (SHA1 of given password: 7af2d1) 2026-07-25T14:43:48.627237+02:00 mail dovecot: auth: passwd-file(contact@mydomain,38.76.160.52,</Xkx125XopsmTKA0>): unknown user (SHA1 of given password: 89da11) ... show less	Email Spam Brute-Force
🇩🇪 outputblog.de	2026-07-25 12:42:53 (2 days ago)	dovecot	Brute-Force
🇩🇪 Richie	2026-07-25 12:35:39 (2 days ago)	2026-07-25T14:17:33.419450+02:00 host1 auth[3712465]: pam_unix(dovecot:auth): authentication failure ... show more 2026-07-25T14:17:33.419450+02:00 host1 auth[3712465]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 2026-07-25T14:17:37.418897+02:00 host1 dovecot[4054918]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=45.90.5.147, session=<JptNeW5XzNgmTKA0> 2026-07-25T14:17:37.418897+02:00 host1 dovecot[4054918]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=45.90.5.147, session=<JptNeW5XzNgmTKA0> 2026-07-25T14:35:38.261744+02:00 host1 auth[3717246]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 ... show less	Brute-Force Email Spam
🇦🇺 brocococonut	2026-07-25 12:33:32 (2 days ago)	Jul 25 21:22:14 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Jul 25 21:22:14 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=67.219.110.53, session=<S9hes21XerMmTKA0> Jul 25 21:39:53 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=67.219.110.53, session=<jyl/8m1XoqcmTKA0> Jul 25 21:57:27 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=67.219.110.53, session=<JjtIMW5X2pkmTKA0> Jul 25 22:15:26 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=67.219.110.53, session=<XFihcW5XDo8mTKA0> Jul 25 22:33:31 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected] ... show less	Brute-Force
🇵🇱 webadmin	2026-07-25 12:29:46 (2 days ago)		Brute-Force
🇺🇸 pixelmemory.us	2026-07-25 12:20:27 (2 days ago)	2026-07-25T04:27:04.841347-07:00 pixelmemory auth[1139354]: pam_unix(dovecot:auth): authentication f ... show more 2026-07-25T04:27:04.841347-07:00 pixelmemory auth[1139354]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 2026-07-25T04:44:44.864086-07:00 pixelmemory auth[1141023]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 2026-07-25T05:02:23.268618-07:00 pixelmemory auth[1142453]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 2026-07-25T05:20:26.264062-07:00 pixelmemory auth[1143795]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=38.76.160.52 ... show less	Brute-Force
🇫🇷 basing	2026-07-25 12:19:04 (2 days ago)	2026-07-25 13:19:04 idz SASL PLAIN auth failed: rhost=38.76.160.52...	Brute-Force
Anonymous	2026-07-25 12:16:18 (2 days ago)	Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: ... show more Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: 2026-07-25T13:40:43.828766+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=192.168.16.3, TLS, session=<tgV29W1XYK0mTKA0> 2026-07-25T13:58:14.982684+02:00 correu dovecot: auth: ldap([email protected],38.76.160.52,<NlhBNG5XqJ8mTKA0>): unknown user (SHA1 of given password: 5339f9) 2026-07-25T13:58:16.852296+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=38.76.160.52, lip=192.168.16.3, TLS, session=<NlhBNG5XqJ8mTKA0> 2026-07-25T14:16:15.447787+02:00 correu dovecot: auth: ldap( show less	Brute-Force
🇫🇷 Kimax	2026-07-25 12:07:26 (2 days ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c61::128

🇩🇪 213.209.159.225

🇧🇪 198.235.24.228

🇧🇷 179.48.124.129

🇳🇱 91.92.47.140

🇧🇬 78.128.114.46

🇺🇸 73.72.101.251

🇺🇸 64.62.156.64

🇨🇳 60.16.198.248

🇩🇪 46.101.141.244

🇬🇧 35.203.210.17

🇻🇳 14.191.143.5

🇩🇪 2001:4ca0:108:42:0:80:6:9

🇨🇳 221.195.59.244

🇨🇭 209.99.190.126

🇳🇱 195.178.110.227

🇧🇷 186.225.15.23

🇦🇷 181.228.67.146

🇺🇸 170.130.204.2

🇫🇮 147.185.133.16