JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.194.5.5

39.194.5.5 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 38%: ?

38%

ISP	Gd. Wisma Mulia Lt.M-19
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Banjarmasin, South Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.194.5.5

Whois 39.194.5.5

IP Abuse Reports for 39.194.5.5:

This IP address has been reported a total of 14 times from 13 distinct sources. 39.194.5.5 was first reported on November 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tha_14	2026-08-30 13:32:17 (2 days ago)	Limit on login attempts is reached	Brute-Force
🇮🇹 CoreTech srl	2026-08-18 08:32:33 (2 weeks ago)	"SMTP Login failed": count(IP)=37.0is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Incor ... show more "SMTP Login failed": count(IP)=37.0is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Incorrect password for user [[email protected]]is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Invalid username ([email protected]) and password combination.is-65b7aeb8 10:29:33.896 [5.89.229.42] SMTP Login failed: Incorrect password for user [[email protected]]is-65b7aeb8 10:29:33.896 [5.89.229.42] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 10:29:34.118 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 10:29:34.118 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 10:29:58.041 [209.14.89.110] SMTP Login failed: Domain [serisap.it] not foundSmartermail 10:29:58.041 [209.14.89.110] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 10:30:11.305 [39.194.5.5] SMTP Log show less	Brute-Force
🇧🇬 sanitariu	2026-08-18 05:22:00 (2 weeks ago)	Aug 18 08:21:59 dri postfix/smtpd[971403]: warning: unknown[39.194.5.5]: SASL PLAIN authentication f ... show more Aug 18 08:21:59 dri postfix/smtpd[971403]: warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=nasko ... show less	Brute-Force
🇨🇿 lp	2026-08-17 09:20:45 (2 weeks ago)	Email account brute force: 1 attempts were recorded from 39.194.5.5 2026-08-17T10:05:27+02:00 warnin ... show more Email account brute force: 1 attempts were recorded from 39.194.5.5 2026-08-17T10:05:27+02:00 warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 digico_mt	2026-08-17 07:22:15 (2 weeks ago)	Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: warning: unknown[39.194.5.5]: SASL PLAIN a ... show more Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: lost connection after AUTH from unknown[39.194.5.5] Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: disconnect from unknown[39.194.5.5] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Port Scan
🇮🇹 VHosting	2026-08-15 09:35:03 (2 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 BlueWire Hosting	2026-08-04 21:00:06 (4 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 kosada.com	2026-07-23 04:57:22 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-15 18:44:20 (2 months ago)	[Tue Jun 16 01:44:17.341736 2026] [security2:error] [pid 118543:tid 139893176002240] [client 39.194. ... show more [Tue Jun 16 01:44:17.341736 2026] [security2:error] [pid 118543:tid 139893176002240] [client 39.194.5.5:18262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S911U Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajBIAQeON1JF_m10Xal6-QABDAI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[118563] [cpqxNs+/Q38] [ajBIAQeON1JF_m10Xal6-QABDAI] keep_alive=[1] [2026-06-16 01:44:17.341742] [R:ajBIAQeON1JF_m10Xal6-QABDAI] UA:'Mozi ... show less	Email Spam Hacking
🇫🇷 sthoyer.de	2026-05-06 04:02:33 (3 months ago)	May 6 06:02:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 6 06:02:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=39.194.5.5 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=17026 DF PROTO=TCP SPT=14826 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 wlt-blocker	2026-04-17 16:36:40 (4 months ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-04-08 12:56:43 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-11-30 17:12:21 (9 months ago)	[Mon Dec 01 00:06:02.370021 2025] [security2:error] [pid 856653:tid 139859472615104] [client 39.194. ... show more [Mon Dec 01 00:06:02.370021 2025] [security2:error] [pid 856653:tid 139859472615104] [client 39.194.5.5:20498] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/PPID/Jenis_Informasi/Peraturan_Komisi_Informasi_Nomor_1_Tahun_2010_Tentang_Standar_Layanan_Informasi_Publik.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/images/PPID/Jenis_Informasi/Peraturan_Komisi_Informasi_Nomor_1_Tahun_2010_Tentang_Standar_Layanan_Informasi_Publik.pdf Request Basename = viewe..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "O ... show less	Hacking Web App Attack
🇩🇪 marzzzello	2025-11-20 01:32:59 (9 months ago)	Ports: 25x 8285	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 45.119.30.221

🇺🇸 2604:a880:400:d1:0:4:e8ec:4001

🇺🇸 195.184.76.175

🇳🇱 193.47.62.69

🇳🇱 34.7.170.65

🇧🇬 213.91.182.247

🇨🇦 178.93.201.198

🇳🇱 174.138.12.72

🇺🇸 107.150.1.166

🇩🇪 51.195.40.26

🇺🇸 40.124.169.249

🇸🇬 8.219.253.90

🇦🇷 186.148.86.118

🇮🇳 103.189.89.196

🇻🇪 38.190.124.39

🇳🇱 213.177.179.162

🇳🇱 192.253.248.223

🇦🇷 131.255.240.10

🇭🇰 118.193.40.61

🇮🇱 46.210.147.110