JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.194.5.5

39.194.5.5 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 38%: ?

38%

ISP	Gd. Wisma Mulia Lt.M-19
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Banjarmasin, South Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.194.5.5

Whois 39.194.5.5

IP Abuse Reports for 39.194.5.5:

This IP address has been reported a total of 13 times from 12 distinct sources. 39.194.5.5 was first reported on November 20th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-08-18 08:32:33 (6 days ago)	"SMTP Login failed": count(IP)=37.0is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Incor ... show more "SMTP Login failed": count(IP)=37.0is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Incorrect password for user [[email protected]]is-63909a28 10:28:16.821 [202.155.11.65] SMTP Login failed: Invalid username ([email protected]) and password combination.is-65b7aeb8 10:29:33.896 [5.89.229.42] SMTP Login failed: Incorrect password for user [[email protected]]is-65b7aeb8 10:29:33.896 [5.89.229.42] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 10:29:34.118 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 10:29:34.118 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 10:29:58.041 [209.14.89.110] SMTP Login failed: Domain [serisap.it] not foundSmartermail 10:29:58.041 [209.14.89.110] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 10:30:11.305 [39.194.5.5] SMTP Log show less	Brute-Force
🇧🇬 sanitariu	2026-08-18 05:22:00 (6 days ago)	Aug 18 08:21:59 dri postfix/smtpd[971403]: warning: unknown[39.194.5.5]: SASL PLAIN authentication f ... show more Aug 18 08:21:59 dri postfix/smtpd[971403]: warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=nasko ... show less	Brute-Force
🇨🇿 lp	2026-08-17 09:20:45 (1 week ago)	Email account brute force: 1 attempts were recorded from 39.194.5.5 2026-08-17T10:05:27+02:00 warnin ... show more Email account brute force: 1 attempts were recorded from 39.194.5.5 2026-08-17T10:05:27+02:00 warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 digico_mt	2026-08-17 07:22:15 (1 week ago)	Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: warning: unknown[39.194.5.5]: SASL PLAIN a ... show more Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: warning: unknown[39.194.5.5]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: lost connection after AUTH from unknown[39.194.5.5] Aug 17 09:22:14 digico postfix/submission/smtpd[1325925]: disconnect from unknown[39.194.5.5] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Port Scan
🇮🇹 VHosting	2026-08-15 09:35:03 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 BlueWire Hosting	2026-08-04 21:00:06 (2 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 kosada.com	2026-07-23 04:57:22 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-15 18:44:20 (2 months ago)	[Tue Jun 16 01:44:17.341736 2026] [security2:error] [pid 118543:tid 139893176002240] [client 39.194. ... show more [Tue Jun 16 01:44:17.341736 2026] [security2:error] [pid 118543:tid 139893176002240] [client 39.194.5.5:18262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S911U Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajBIAQeON1JF_m10Xal6-QABDAI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[118563] [cpqxNs+/Q38] [ajBIAQeON1JF_m10Xal6-QABDAI] keep_alive=[1] [2026-06-16 01:44:17.341742] [R:ajBIAQeON1JF_m10Xal6-QABDAI] UA:'Mozi ... show less	Email Spam Hacking
🇫🇷 sthoyer.de	2026-05-06 04:02:33 (3 months ago)	May 6 06:02:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 6 06:02:31 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=39.194.5.5 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=17026 DF PROTO=TCP SPT=14826 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 wlt-blocker	2026-04-17 16:36:40 (4 months ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-04-08 12:56:43 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-11-30 17:12:21 (8 months ago)	[Mon Dec 01 00:06:02.370021 2025] [security2:error] [pid 856653:tid 139859472615104] [client 39.194. ... show more [Mon Dec 01 00:06:02.370021 2025] [security2:error] [pid 856653:tid 139859472615104] [client 39.194.5.5:20498] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/PPID/Jenis_Informasi/Peraturan_Komisi_Informasi_Nomor_1_Tahun_2010_Tentang_Standar_Layanan_Informasi_Publik.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/images/PPID/Jenis_Informasi/Peraturan_Komisi_Informasi_Nomor_1_Tahun_2010_Tentang_Standar_Layanan_Informasi_Publik.pdf Request Basename = viewe..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "O ... show less	Hacking Web App Attack
🇩🇪 marzzzello	2025-11-20 01:32:59 (9 months ago)	Ports: 25x 8285	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 178.244.215.186

🇨🇿 2a00:11b1:1035:4682:18f2:142:c0e7:3863

🇬🇧 193.163.125.112

🇯🇵 154.36.182.73

🇫🇮 153.80.241.245

🇨🇳 103.219.32.239

🇸🇪 95.193.204.137

🇫🇷 89.84.186.73

🇺🇸 76.37.32.179

🇺🇸 65.49.20.114

🇨🇦 45.194.92.47

🇹🇼 35.194.165.220

🇺🇸 20.150.193.32

🇺🇸 2400:cb00:658:1000:4d39:9cff:addc:18f9

🇱🇹 213.176.26.21

🇦🇷 179.36.240.128

🇺🇸 172.71.255.116

🇮🇳 152.58.36.174

🇵🇰 124.109.53.158

🇨🇳 116.179.37.202