AbuseIPDB » 5.253.41.139

5.253.41.139 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 99%: ?

99%

ISP	LVNET Ltd
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vm2941986.stark-industries.solutions
Domain Name	lvnet.lv
Country	Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 5.253.41.139

Whois 5.253.41.139

IP Abuse Reports for 5.253.41.139:

This IP address has been reported a total of 65 times from 49 distinct sources. 5.253.41.139 was first reported on July 9th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-08-23 08:55:23 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-08-12 08:03:00 (3 weeks ago)	Fail2Ban after 10 attempts against plesk-postfix	Brute-Force
Paul Smith	2024-08-12 06:40:21 (3 weeks ago)	Email Auth Brute force attack 20/2 in last day	Brute-Force
slimhost.com.ua	2024-08-12 05:13:04 (3 weeks ago)	2024-08-12 07:11:02 auth_login authenticator failed for (YlKeki) [5.253.41.139]: 535 Incorrect authe ... show more2024-08-12 07:11:02 auth_login authenticator failed for (YlKeki) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:11:15 auth_login authenticator failed for (boBOn7GOQ) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:11:30 auth_login authenticator failed for (ewLtNBOfk) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:11:53 auth_login authenticator failed for (PVPQpIeKe) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:12:17 auth_login authenticator failed for (wS71TBH) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:12:39 auth_login authenticator failed for (HRMzg70nZ) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) 2024-08-12 07:13:03 auth_login authenticator failed for (L37uxYQynQ) [5.253.41.139]: 535 Incorrect authentication data (set_id=firm) ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-12 03:35:52 (3 weeks ago)	Failed SMTP AUTH login from 5.253.41.139 (JP/Japan/vm2412386.stark-industries.solutions): 5 in the l ... show moreFailed SMTP AUTH login from 5.253.41.139 (JP/Japan/vm2412386.stark-industries.solutions): 5 in the last 3600 secs show less	Hacking Brute-Force
Anonymous	2024-08-12 03:01:13 (3 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
TZNOC	2024-08-11 23:25:27 (3 weeks ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
Marbling6980	2024-08-11 23:12:12 (3 weeks ago)	Aug 12 07:12:11 as-sgp-gc-1 postfix/smtpd[8738]: NOQUEUE: reject: RCPT from unknown[5.253.41.139]: 5 ... show moreAug 12 07:12:11 as-sgp-gc-1 postfix/smtpd[8738]: NOQUEUE: reject: RCPT from unknown[5.253.41.139]: 504 5.5.2 <KJ3b3ezlcp>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<KJ3b3ezlcp> show less	Email Spam Brute-Force
openstrike.co.uk	2024-08-11 22:51:36 (3 weeks ago)	SMTP auth failures (56)	Brute-Force
Anonymous	2024-08-11 19:11:48 (3 weeks ago)	Portscan: TCP/2525 (2x), TCP/26 (2x), TCP/1025 (2x)	Port Scan
JCB	2024-08-11 19:06:00 (3 weeks ago)	spam	Email Spam Spoofing
stom	2024-08-11 18:11:01 (3 weeks ago)	2024-08-11T18:11:00.386762ls1.tom2.co.uk postfix/smtpd[1041]: NOQUEUE: reject: RCPT from unknown[5.2 ... show more2024-08-11T18:11:00.386762ls1.tom2.co.uk postfix/smtpd[1041]: NOQUEUE: reject: RCPT from unknown[5.253.41.139]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<QDcgxV> ... show less	Email Spam Brute-Force
Anonymous	2024-08-11 15:50:13 (3 weeks ago)	$f2bV_matches	Email Spam Brute-Force
ICT	2024-08-11 15:03:52 (3 weeks ago)	Aug 11 18:02:40 acad-icht postfix/smtpd[305377]: NOQUEUE: reject: RCPT from unknown[5.253.41.139]: 5 ... show moreAug 11 18:02:40 acad-icht postfix/smtpd[305377]: NOQUEUE: reject: RCPT from unknown[5.253.41.139]: 554 5.7.1 Service unavailable; Client host [5.253.41.139] blocked using bl.spamcop.net; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<T2Gu0O> Aug 11 18:02:50 acad-icht postfix/smtpd[305377]: warning: unknown[5.253.41.139]: SASL LOGIN authentication failed: authentication failure Aug 11 18:03:12 acad-icht postfix/smtpd[305377]: warning: unknown[5.253.41.139]: SASL LOGIN authentication failed: authentication failure Aug 11 18:03:32 acad-icht postfix/smtpd[305377]: warning: unknown[5.253.41.139]: SASL LOGIN authentication failed: authentication failure Aug 11 18:03:51 acad-icht postfix/smtpd[305377]: warning: unknown[5.253.41.139]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
xortex	2024-08-11 13:41:39 (3 weeks ago)	sent several mails to non existent mailboxes, brute force attack	Email Spam Brute-Force