JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 57.131.50.125

57.131.50.125 was found in our database!

This IP was reported 205 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH Srl
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-85e180a8.vps.ovh.net
Domain Name	ovh.net
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 57.131.50.125

Whois 57.131.50.125

IP Abuse Reports for 57.131.50.125:

This IP address has been reported a total of 205 times from 103 distinct sources. 57.131.50.125 was first reported on June 3rd 2026, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 pusathosting.com	2026-06-10 16:30:08 (19 minutes ago)	imap1 failed login	Brute-Force
🇬🇧 WebNiraj	2026-06-10 16:18:29 (30 minutes ago)	(imapd) Failed IMAP login from 57.131.50.125 (IT/Italy/vps-85e180a8.vps.ovh.net): 5 in the last 3600 ... show more (imapd) Failed IMAP login from 57.131.50.125 (IT/Italy/vps-85e180a8.vps.ovh.net): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇮🇹 ciccio diddo	2026-06-10 15:42:22 (1 hour ago)	POP3/IMAP Bruteforce port:Tcp/143,993	Brute-Force Email Spam
🇫🇷 LRob.fr	2026-06-10 15:30:03 (1 hour ago)	POP or IMAP failed login attempts detected by Fail2Ban in plesk-dovecot jail	Brute-Force
Anonymous	2026-06-10 15:27:42 (1 hour ago)	Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: ... show more Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: 2026-06-10T17:04:20.142691+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=192.168.16.3, TLS, session=<6pbMjudTpKQ5gzJ9> 2026-06-10T17:13:36.630062+02:00 correu dovecot: auth: ldap([email protected],57.131.50.125,<35sPsOdTeLg5gzJ9>): unknown user (SHA1 of given password: f8a818) 2026-06-10T17:13:38.171347+02:00 correu dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=192.168.16.3, TLS, session=<35sPsOdTeLg5gzJ9> 2026-06-10T17:27:39.526150+02:00 correu dove show less	Brute-Force
🇮🇹 Progetto1	2026-06-10 14:59:01 (1 hour ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
Anonymous	2026-06-10 11:45:31 (5 hours ago)	2026-06-10T13:16:28.233291+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-06-10T13:16:28.233291+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=172.104.246.203, TLS, session=<fqzBX+RTxoQ5gzJ9> 2026-06-10T13:45:31.240637+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=172.104.246.203, TLS, session=<JaGmx+RT2IE5gzJ9> ... show less	Brute-Force
Anonymous	2026-06-10 10:05:10 (6 hours ago)	POP or IMAP failed login attempts detected by Fail2Ban	Brute-Force
🇫🇷 dwmp	2026-06-10 09:04:31 (7 hours ago)	Jun 10 10:04:51 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 10 10:04:51 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=75.119.153.41, TLS, session=<daaVsuFTIs05gzJ9> Jun 10 10:34:34 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=75.119.153.41, TLS, session=<FgPkHOJT6uA5gzJ9> Jun 10 11:04:30 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=75.119.153.41, TLS, session=<KZPph+JTsKs5gzJ9> ... show less	Brute-Force
🇫🇷 arteagasoft	2026-06-10 08:54:11 (7 hours ago)	2026-06-10T01:54:36.429241-06:00 99084af566a4 dovecot: imap-login: Login aborted: Connection closed ... show more 2026-06-10T01:54:36.429241-06:00 99084af566a4 dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=192.168.30.250, TLS, session=<9zv4jeFTGpQ5gzJ9> 2026-06-10T02:24:19.462098-06:00 99084af566a4 dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=192.168.30.250, TLS, session=<MWc3+OFT2uk5gzJ9> 2026-06-10T02:54:10.408522-06:00 99084af566a4 dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=192.168.30.250, TLS, session=<8iP3YuJTYug5gzJ9> ... show less	Brute-Force
Anonymous	2026-06-10 08:46:53 (8 hours ago)	2026-06-10T09:47:23.318701+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-06-10T09:47:23.318701+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=172.104.246.203, TLS, session=</TUGdOFT9Lk5gzJ9> 2026-06-10T10:17:06.433404+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=172.104.246.203, TLS, session=<B69M3uFT8Is5gzJ9> 2026-06-10T10:46:53.319365+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=172.104.246.203, TLS, session=<Q4jJSOJT0qw5gzJ9> ... show less	Brute-Force
🇬🇧 killian7603	2026-06-10 08:04:59 (8 hours ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇫🇷 bgg	2026-06-10 07:56:13 (8 hours ago)	Jun 10 09:56:13 nanopirate dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): us ... show more Jun 10 09:56:13 nanopirate dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=57.131.50.125, lip=195.154.107.35, TLS, session=<3DO3k+FTAKQ5gzJ9> ... show less	Port Scan Brute-Force
🇿🇦 maximonline.co.za	2026-06-10 07:50:10 (8 hours ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇩🇪 itak	2026-06-10 07:45:34 (9 hours ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force

Showing 1 to 15 of 205 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.118.173.234

🇨🇱 200.54.96.2

🇵🇹 85.240.193.104

🇹🇼 198.235.24.99

🇦🇺 158.178.141.210

🇰🇷 118.32.10.71

🇸🇬 114.119.143.166

🇭🇰 103.146.159.173

🇳🇱 85.11.167.11

🇺🇸 74.94.234.151

🇫🇷 51.159.190.167

🇺🇸 35.172.209.167

🇺🇸 34.162.14.96

🇧🇷 187.107.88.97

🇧🇷 187.77.33.182

🇨🇳 180.184.98.12

🇺🇸 165.154.182.85

🇳🇱 45.142.193.10

🇨🇦 20.116.34.103

🇮🇳 223.29.206.182