AbuseIPDB » 66.128.39.24

Check an IP Address, Domain Name, or Subnet

e.g. 100.24.115.215, microsoft.com, or 5.188.10.0/24

66.128.39.24 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 91%: ?

91%

ISP	Itelsa
Usage Type	Fixed Line ISP
Hostname(s)	host-24-39-128-66.rev.itelsa.com.ar
Domain Name	xinet.com.ar
Country	Argentina
City	Villa del Rosario, Entre Rios

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 66.128.39.24

Whois 66.128.39.24

IP Abuse Reports for 66.128.39.24:

This IP address has been reported a total of 56 times from 33 distinct sources. 66.128.39.24 was first reported on November 7th 2021, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
georgengelmann	15 hours ago	SSH intrusion attempt from host-24-39-128-66.rev.itelsa.com.ar port 53584	Brute-Force SSH
Anonymous	18 hours ago	May 25 07:14:11 bgvacc sshd[3597063]: Invalid user admin from 66.128.39.24 port 57574 May 25 0 ... show moreMay 25 07:14:11 bgvacc sshd[3597063]: Invalid user admin from 66.128.39.24 port 57574 May 25 07:14:14 bgvacc sshd[3597063]: Failed password for invalid user admin from 66.128.39.24 port 57574 ssh2 ... show less	Port Scan Hacking Brute-Force SSH
dagasistemas-sl	24 May 2022	May 24 07:25:01 controldedominiosdg sshd[31458]: Invalid user user from 66.128.39.24 port 40293<br / ... show moreMay 24 07:25:01 controldedominiosdg sshd[31458]: Invalid user user from 66.128.39.24 port 40293 May 24 07:25:02 controldedominiosdg sshd[31458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.128.39.24 May 24 07:25:04 controldedominiosdg sshd[31458]: Failed password for invalid user user from 66.128.39.24 port 40293 ssh2 ... show less	Brute-Force SSH
Una Hofmans	23 May 2022	May 23 03:24:30 XXX sshd[7444]: Invalid user user from 66.128.39.24 port 41632	Hacking Brute-Force SSH
Lat31320	20 May 2022	ddbx2 - SSH brute force	Brute-Force SSH
Anonymous	18 May 2022		Brute-Force
Anonymous	17 May 2022	66.128.39.24 (AR/Argentina/Entre Rios/Chajari/host-24-39-128-66.rev.itelsa.com.ar), 3 distributed po ... show more66.128.39.24 (AR/Argentina/Entre Rios/Chajari/host-24-39-128-66.rev.itelsa.com.ar), 3 distributed pop3d attacks on account [redacted] show less	Brute-Force
Anonymous	17 May 2022	(imapd) Failed IMAP login from 66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar): 5 in ... show more(imapd) Failed IMAP login from 66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_IMAPD; Logs: May 17 13:14:06 ocean dovecot: imap-login: Disconnected: Connection closed (auth failed, 5 attempts in 59 secs): user=<[email protected]>, method=PLAIN, rip=66.128.39.24, lip=188.166.30.87, TLS: Connection closed, session=<iqjaxDrf/ItCgCcY> show less	Port Scan
Roderic	17 May 2022	66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar), 20 distributed imapd attacks on acc ... show more66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar), 20 distributed imapd attacks on account [redacted] show less	Brute-Force
Anonymous	17 May 2022	May 17 12:38:18 ns3130050 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 75 secs): us ... show moreMay 17 12:38:18 ns3130050 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 75 secs): user=<[email protected]>, method=PLAIN, rip=66.128.39.24, lip=5.135.81.8, TLS: Connection closed, session=<4lqluDLfP61CgCcY> May 17 13:11:24 ns3130050 dovecot: imap-login: Disconnected (auth failed, 3 attempts in 42 secs): user=<[email protected]>, method=PLAIN, rip=66.128.39.24, lip=5.135.81.8, TLS: Connection closed, session=<aREPMTPfv4ZCgCcY> ... show less	Brute-Force Web App Attack
Danse	12 May 2022	66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar), 20 distributed imapd attacks on acc ... show more66.128.39.24 (AR/Argentina/host-24-39-128-66.rev.itelsa.com.ar), 20 distributed imapd attacks on account [redacted] show less	Brute-Force
jasperedv.de	12 May 2022	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
ipcop.net	01 May 2022	Apr 13 02:56:54 mail.srvfarm.net dovecot: auth-worker(2078611): sql(office,66.128.39.24,<lU9Rp37cF7Z ... show moreApr 13 02:56:54 mail.srvfarm.net dovecot: auth-worker(2078611): sql(office,66.128.39.24,<lU9Rp37cF7ZCgCcY>): unknown user Apr 13 02:57:03 mail.srvfarm.net dovecot: auth-worker(2078611): sql(office,66.128.39.24,<lU9Rp37cF7ZCgCcY>): unknown user Apr 13 02:57:16 mail.srvfarm.net dovecot: auth-worker(2078611): sql(office,66.128.39.24,<lU9Rp37cF7ZCgCcY>): unknown user Apr 13 02:57:35 mail.srvfarm.net dovecot: auth-worker(2078611): sql(office,66.128.39.24,<lU9Rp37cF7ZCgCcY>): unknown user Apr 13 02:57:54 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 60 secs): user=<office>, method=PLAIN, rip=66.128.39.24, lip=185.118.197.126, TLS: Connection closed, session=<lU9Rp37cF7ZCgCcY> show less	Fraud VoIP Brute-Force
ad5gb.com	10 Apr 2022	66.128.39.24 - - [10/Apr/2022:08:19:19 -0500] "GET http://ad5gb.com/ HTTP/1.1" 301 303 000 0 0 0 439 ... show more66.128.39.24 - - [10/Apr/2022:08:19:19 -0500] "GET http://ad5gb.com/ HTTP/1.1" 301 303 000 0 0 0 439 327 0 0 0 DIRECT FIN FIN TCP_MISS ... show less	Brute-Force
reigo	10 Mar 2022	SSH invalid-user multiple login try	Brute-Force SSH