JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 79.134.15.129

79.134.15.129 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 93%: ?

93%

ISP	Joint Stock Company TransTeleCom
Usage Type	Fixed Line ISP
ASN	AS8427
Domain Name	transtelecom.net
Country	🇷🇺 Russian Federation
City	Magnitogorsk, Chelyabinsk

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 79.134.15.129

Whois 79.134.15.129

IP Abuse Reports for 79.134.15.129:

This IP address has been reported a total of 38 times from 26 distinct sources. 79.134.15.129 was first reported on September 17th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 FireGuard Server	2026-10-21 21:50:21 (11 hours ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=2525	Port Scan Hacking
🇷🇴 clauss	2026-10-21 21:05:30 (11 hours ago)	IP reached maximum auth failures for a one day block	Brute-Force
Anonymous	2026-10-21 16:38:10 (16 hours ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇮🇩 sockominfo	2026-10-20 23:00:53 (1 day ago)	Email: Login failures from Bad Reputation IP: 79.134.15.129. Threat Score: 6.2/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 79.134.15.129. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-20 22:00:09 (1 day ago)	Email: Login failures from Bad Reputation IP: 79.134.15.129. Threat Score: 5.5/10 (MEDIUM). Reported ... show more Email: Login failures from Bad Reputation IP: 79.134.15.129. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 Batz	2026-10-19 09:03:31 (2 days ago)	Multiple Unauthorized Login Attempt	Brute-Force Hacking Port Scan
🇩🇪 ITcloud	2026-10-18 18:45:19 (3 days ago)	Automated credential attack against a legacy web authentication flow: 7412 matching requests observe ... show more Automated credential attack against a legacy web authentication flow: 7412 matching requests observed between 2026-10-17T14:47:22+00:00 and 2026-10-18T18:45:19+00:00 UTC. show less	Brute-Force Web App Attack
🇩🇪 ITcloud	2026-10-17 13:26:21 (4 days ago)	Credential brute-force against a web authentication endpoint: 356 failed login attempts observed bet ... show more Credential brute-force against a web authentication endpoint: 356 failed login attempts observed between 2026-10-13T21:09:10+00:00 and 2026-10-17T13:26:21+00:00 UTC. show less	Brute-Force Web App Attack
🇫🇮 notelseit	2026-10-15 00:02:17 (1 week ago)	2026-10-15T02:02:09.633408+02:00 mail postfix/smtpd[2539463]: lost connection after STARTTLS from v- ... show more 2026-10-15T02:02:09.633408+02:00 mail postfix/smtpd[2539463]: lost connection after STARTTLS from v-103723-unlim.vpn.mgn.ru[79.134.15.129] 2026-10-15T02:02:10.547125+02:00 mail postfix/smtpd[2539463]: NOQUEUE: reject: RCPT from v-103723-unlim.vpn.mgn.ru[79.134.15.129]: 504 5.5.2 <localhost>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> 2026-10-15T02:02:14.449900+02:00 mail postfix/smtpd[2538928]: lost connection after STARTTLS from v-103723-unlim.vpn.mgn.ru[79.134.15.129] ... show less	Brute-Force Email Spam
🇧🇷 ICS Labs	2026-10-14 15:17:53 (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-14 UTC.	Hacking
🇮🇩 xveil	2026-10-12 23:29:27 (1 week ago)	2026-10-13T06:29:25.487518 mail-honeypot postfix/submission/smtpd[6431]: warning: v-103723-unlim.vpn ... show more 2026-10-13T06:29:25.487518 mail-honeypot postfix/submission/smtpd[6431]: warning: v-103723-unlim.vpn.mgn.ru[79.134.15.129]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 UM3	2026-10-11 12:38:44 (1 week ago)	Exim Auth Failed	Brute-Force
🇨🇿 lp	2026-10-10 14:01:07 (1 week ago)	Email account brute force: 1 attempts were recorded from 79.134.15.129 2026-10-10T15:47:34+0200 warn ... show more Email account brute force: 1 attempts were recorded from 79.134.15.129 2026-10-10T15:47:34+0200 warning: unknown[79.134.15.129]: SASL authentication failed show less	Brute-Force
🇷🇸 Smel	2026-10-05 08:04:54 (2 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇵🇾 SecOpsSL	2026-10-04 17:43:38 (2 weeks ago)	Oct 4 14:41:13 mail postfix/smtps/smtpd[40573]: warning: v-103723-unlim.vpn.mgn.ru[79.134.15.129]: ... show more Oct 4 14:41:13 mail postfix/smtps/smtpd[40573]: warning: v-103723-unlim.vpn.mgn.ru[79.134.15.129]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.131.190.233

🇳🇱 31.42.188.122

🇧🇩 103.112.54.86

🇳🇱 91.108.9.84

🇭🇺 31.46.118.198

🇨🇳 14.29.208.128

🇬🇪 212.58.120.38

🇹🇼 198.235.24.19

🇸🇬 178.128.115.78

🇺🇸 172.67.149.37

🇺🇸 159.203.83.250

🇨🇳 116.198.225.204

🇮🇶 65.20.165.211

🇳🇱 45.156.87.65

🇭🇰 43.128.3.201

🇮🇪 18.202.239.136

🇺🇸 15.204.122.122

🇲🇿 197.219.35.153

🇵🇱 194.180.49.127

🇨🇳 180.153.236.136