JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

16.5.0.148

Recent Activity

Abuse confidence score ?

100% Critical

86 reports

47 reporters · latest 21 hours ago

ISP	EMBNEX. LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401661
Hostname(s)	embnex.com
Domain Name	embnex.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 16.5.0.148

Export CSV

This IP address has been reported a total of 86 times from 47 distinct sources. 16.5.0.148 was first reported on October 12th 2026, and the most recent report was 21 hours ago. In the last 60 days, the top reporter locations were: France with 22 reports; Brazil with 14 reports; United States of America with 10 reports. The most common categories in these recent reports were: Port Scan 58 times; Hacking 21 times; Brute-Force 14 times; Web App Attack 11 times; Bad Web Bot 7 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-10-25 10:25:38 (21 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 61616 [1] TCP	Port Scan
🇧🇷 cibersecoptidata	2026-10-25 02:51:23 (1 day ago)	Port scan / Unsolicited traffic.	Port Scan
🇫🇷 agroman93	2026-10-24 21:59:09 (1 day ago)	T-Pot honeypot: 10 hits on ports [7071] (automated)	Port Scan
🇧🇷 cibersecoptidata	2026-10-24 02:51:22 (2 days ago)	Port scan / Unsolicited traffic.	Port Scan
🇳🇱 Maurice	2026-10-24 00:06:40 (2 days ago)	Honeypot hit: HTTP/1.1 request on 9090 GET /login.jsp User-Agent: Mozilla/5.0 Accept: /; 9090 [2] ... show more Honeypot hit: HTTP/1.1 request on 9090 GET /login.jsp User-Agent: Mozilla/5.0 Accept: /; 9090 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 Maurice	2026-10-23 23:41:34 (2 days ago)	Honeypot hit: HTTP/1.1 request on 9000 GET /login.jsp User-Agent: Mozilla/5.0 Accept: /; 9000 [2] ... show more Honeypot hit: HTTP/1.1 request on 9000 GET /login.jsp User-Agent: Mozilla/5.0 Accept: /; 9000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 banankicks	2026-10-23 23:06:33 (2 days ago)	Unauthorized connection attempt detected from IP address 16.5.0.148 to port 8080 (banankicks-server) ... show more Unauthorized connection attempt detected from IP address 16.5.0.148 to port 8080 (banankicks-server) [w] show less	Brute-Force Exploited Host
🇧🇷 diego	2026-10-23 23:04:00 (2 days ago)	[probe-44-49] 2026-10-23 22:48:07, Client: 16.5.0.148, Protocol: 6, Unauthorized activity to HTTP: G ... show more [probe-44-49] 2026-10-23 22:48:07, Client: 16.5.0.148, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇸🇪 SkyDancer	2026-10-23 22:54:27 (2 days ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇧🇷 diego	2026-10-23 22:48:08 (2 days ago)	[rede-44-49] 10/23/2026-19:48:07.612048, 16.5.0.148, Protocol: 6, LOCAL MikroTik recon multi-porta	Port Scan
🇫🇷 Kejult	2026-10-23 22:22:11 (2 days ago)	Honeypot Finding: repeated TCP service probing on TCP/7071 (service); 2 application-level events acr ... show more Honeypot Finding: repeated TCP service probing on TCP/7071 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇫🇷 Kejult	2026-10-23 22:22:11 (2 days ago)	Honeypot Finding: verified TCP multi-port scan/probing; 17 application-level events across 7 target ... show more Honeypot Finding: verified TCP multi-port scan/probing; 17 application-level events across 7 target ports and 17 source port(s). Ports: 8081/HTTP, 9091/service, 7071/service, 8088/service, 9090/service, 50000/service, 80/HTTP. Sensors: Honeytrap, Tanner. show less	Port Scan
🇸🇬 drewf.ink	2026-10-23 22:16:42 (2 days ago)	[22:16] Crawled recognized Elasticsearch endpoints without a follow-up attack: GET /, POST /_search	Hacking
🇬🇧 Vluxon, Inc.	2026-10-23 21:58:15 (2 days ago)	Horizontal TCP service scan detected by honeypot [Vlux-Sensor-05, Vlux-Sensor-17, Vlux-Sensor-13] Ob ... show more Horizontal TCP service scan detected by honeypot [Vlux-Sensor-05, Vlux-Sensor-17, Vlux-Sensor-13] Observed: 2026-10-23T21:58:15.568Z Distinct destination ports (2): 8080, 8443 Distinct sensors: 3 Completed TCP connections: 3 Source ports: 22181, 52985, 11847 Submitted by Vlux-Sensor-05, Vlux-Sensor-17, Vlux-Sensor-13 show less	Port Scan
🇸🇬 drewf.ink	2026-10-23 21:44:24 (2 days ago)	[21:44] Crawled recognized Elasticsearch endpoints without a follow-up attack: GET /, POST /_search	Hacking

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.59.88.52

🇺🇸 195.184.76.214

🇺🇦 195.140.161.2

🇬🇧 193.163.125.116

🇻🇳 180.93.251.103

🇮🇳 165.232.179.1

🇺🇸 152.32.205.193

🇺🇸 147.185.132.105

🇭🇰 123.58.219.41

🇩🇪 109.160.32.163

🇺🇸 104.190.184.230

🇳🇱 93.123.109.178

🇳🇱 77.91.71.23

🇨🇳 61.53.82.25

🇺🇸 47.89.230.198

🇺🇸 13.90.206.6

🇩🇪 213.209.159.241

🇮🇳 203.192.232.180

🇲🇾 202.165.22.173

🇳🇱 200.138.46.233