JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.239.240.2

5.239.240.2 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 60%: ?

60%

ISP	Telecommunication Company of Semnan
Usage Type	Fixed Line ISP
ASN	AS58224
Domain Name	tcsem.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.239.240.2

Whois 5.239.240.2

IP Abuse Reports for 5.239.240.2:

This IP address has been reported a total of 82 times from 48 distinct sources. 5.239.240.2 was first reported on January 14th 2022, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-08-18 12:56:07 (50 minutes ago)	Mail: - login with unknown user - bruteforce	Brute-Force
Anonymous	2026-08-18 08:52:38 (4 hours ago)	IMAP password guessing	Brute-Force
🇮🇹 CoreTech srl	2026-08-17 23:42:34 (14 hours ago)	"SMTP Login failed": count(IP)=20.0MAIL4-new 01:37:42.485 [185.234.9.185] SMTP Login failed: Invalid ... show more "SMTP Login failed": count(IP)=20.0MAIL4-new 01:37:42.485 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.MAIL4-new 01:37:42.485 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]mail3-dc1 01:37:42.608 [185.149.191.92] SMTP Login failed: Incorrect password for user [[email protected]]is-60632bc2 01:38:50.678 [5.239.240.2] SMTP Login failed: Domain [biniviaggi.it] not foundis-60632bc2 01:38:50.678 [5.239.240.2] SMTP Login failed: That domain was not found. Double check your email address.is-63909a28 01:38:50.109 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 01:38:50.109 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]is-60632bc2 01:38:56.641 [190.75.248.87] SMTP Login failed: User [1800481760327] not foundis-60632bc2 01:38:56.641 [190.75.248.87] SMTP Login failed: Invalid username (1800481760327@servizi show less	Brute-Force
🇩🇪 phil2k	2026-08-17 20:30:08 (17 hours ago)	fail2ban:<MTA>:2026-08-17T22:30:05.401333+02:00 <SRV> <MTA>/submission/smtpd[464497]: warning: unkno ... show more fail2ban:<MTA>:2026-08-17T22:30:05.401333+02:00 <SRV> <MTA>/submission/smtpd[464497]: warning: unknown[5.239.240.2]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=catalin 2026-08-17T22:30:05.736060+02:00 <SRV> <MTA>/submission/smtpd[464497]: lost connection after AUTH from unknown[5.239.240.2] show less	Email Spam Brute-Force
🇮🇹 CoreTech srl	2026-08-17 19:17:33 (18 hours ago)	"SMTP Login failed": count(IP)=22.0is-6411d9d7 21:12:46.923 [171.5.189.100] SMTP Login failed: That ... show more "SMTP Login failed": count(IP)=22.0is-6411d9d7 21:12:46.923 [171.5.189.100] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 21:12:46.923 [171.5.189.100] SMTP Login failed: Domain [rodo.it] not foundSmartermail 21:12:48.189 [72.215.37.188] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 21:12:48.189 [72.215.37.188] SMTP Login failed: Domain [fontanacontarini.it] not foundis-60632bc2 21:13:02.865 [106.13.137.17] SMTP Login failed: That domain was not found. Double check your email address.is-60632bc2 21:13:02.865 [106.13.137.17] SMTP Login failed: Domain [postaveloce.it] not foundis-60632bc2 21:13:13.475 [5.239.240.2] SMTP Login failed: Invalid username ([email protected]) and password combination.is-60632bc2 21:13:13.475 [5.239.240.2] SMTP Login failed: User [ceset] not foundis-6411d9d7 21:13:38.148 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination. show less	Brute-Force
🇨🇿 lp	2026-08-17 18:20:37 (19 hours ago)	Email account brute force: 1 attempts were recorded from 5.239.240.2 2026-08-17T20:02:55+02:00 warni ... show more Email account brute force: 1 attempts were recorded from 5.239.240.2 2026-08-17T20:02:55+02:00 warning: unknown[5.239.240.2]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇿 lp	2026-08-17 12:20:17 (1 day ago)	Email account brute force: 1 attempts were recorded from 5.239.240.2 2026-08-17T13:16:50+02:00 warni ... show more Email account brute force: 1 attempts were recorded from 5.239.240.2 2026-08-17T13:16:50+02:00 warning: unknown[5.239.240.2]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-17 05:22:08 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇸🇮 basing	2026-08-17 04:13:30 (1 day ago)	2026-08-17 05:13:30 z4 SASL PLAIN auth failed: rhost=5.239.240.2...	Brute-Force
🇮🇹 VHosting	2026-08-16 21:45:03 (1 day ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇭🇺 Lacika555	2026-08-16 18:11:52 (1 day ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇵🇱 Kolobrzeg	2026-08-05 14:37:08 (1 week ago)	MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-08-05 14:37 UTC. Part of ... show more MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-08-05 14:37 UTC. Part of a distributed credential-stuffing campaign: 54 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS58224 Iran Telecommunication Company PJS. show less	Brute-Force Port Scan
🇦🇹 AustrianSimon	2026-06-26 07:40:15 (1 month ago)	26 Jun 2026 07:40:15UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 26 Jun 2026 07:40:15UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 5.239.240.2 show less	Brute-Force
🇺🇸 mnsf	2026-06-21 19:05:45 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇬🇧 Apache	2025-09-01 19:20:40 (11 months ago)	(mod_security) mod_security (id:217200) triggered by 5.239.240.2 (IR/Iran/-): 5 in the last 300 secs	Brute-Force Web App Attack

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 167.71.133.68

🇺🇸 136.66.46.116

🇺🇸 136.66.36.145

🇧🇷 20.226.36.136

🇱🇹 213.176.26.123

🇺🇸 172.222.32.210

🇺🇸 136.144.42.153

🇰🇷 118.37.214.187

🇫🇷 93.92.20.242

🇺🇸 85.208.96.207

🇺🇸 74.125.213.41

🇸🇬 35.187.231.181

🇩🇪 4.182.160.69

🇺🇸 172.236.102.48

🇳🇱 167.71.72.95

🇵🇱 109.205.211.110

🇺🇸 67.172.163.38

🇻🇪 38.51.123.152

🇰🇷 221.156.126.1

🇳🇱 195.178.110.30