JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.5.0.214

16.5.0.214 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 100%: ?

100%

ISP	EMBNEX. LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401661
Hostname(s)	embnex.com
Domain Name	embnex.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.5.0.214

Whois 16.5.0.214

IP Abuse Reports for 16.5.0.214:

This IP address has been reported a total of 91 times from 44 distinct sources. 16.5.0.214 was first reported on September 8th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 raiolanetworks.com	2026-09-17 10:33:42 (7 minutes ago)	Honeypot detection: port scan / service probe. 3 events observed. 2 distinct ports targeted. Reporte ... show more Honeypot detection: port scan / service probe. 3 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Port Scan
🇫🇮 iamxorum	2026-09-17 10:28:40 (12 minutes ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-17T10:28:40.19 ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-17T10:28:40.197944+00:00 XRM-01 kernel: [351903.841011] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=16.5.0.214 DST=REDACTED LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=55783 DF PROTO=TCP SPT=61243 DPT=6379 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇴 juan_mesa	2026-09-17 10:13:41 (27 minutes ago)	Unauthorized connection attempts to HTTP admin TCP/8085 on 1 MikroTik router(s) (blocked by firewall ... show more Unauthorized connection attempts to HTTP admin TCP/8085 on 1 MikroTik router(s) (blocked by firewall). show less	Port Scan
🇺🇸 xmission.com	2026-09-17 10:00:01 (41 minutes ago)	Blocked by UFW (TCP on 8001) Source port: 61214 TTL: 59 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8001) Source port: 61214 TTL: 59 Packet length: 44 TOS: 0x00 This report (for 16.5.0.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-17 09:17:04 (1 hour ago)	Unauthorized access (3306/tcp/mysql)	Port Scan
🇺🇸 sefinek.net	2026-09-17 09:04:54 (1 hour ago)	Blocked by UFW on NY01 [1883/tcp] \| SPT: 61231 \| TTL: 56 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on NY01 [1883/tcp] \| SPT: 61231 \| TTL: 56 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-17 08:58:52 (1 hour ago)	tcp ports: 7547,8443 (2 or more attempts)	Port Scan
🇬🇧 Net Storm	2026-09-17 08:50:57 (1 hour ago)	IoT/ICS honeypot capture (NSVPS-SOC): IoT/ICS scan on 8 connections; protocols: Elasticsearch; ports ... show more IoT/ICS honeypot capture (NSVPS-SOC): IoT/ICS scan on 8 connections; protocols: Elasticsearch; ports: 9200; active exploitation: 985 bytes sent show less	Port Scan Hacking Brute-Force IoT Targeted
🇺🇸 RAP	2026-09-17 08:36:49 (2 hours ago)	2026-09-17 08:36:49 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇺🇸 donarev419	2026-09-17 08:28:02 (2 hours ago)	Connection to port 21 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 xmission.com	2026-09-17 08:10:45 (2 hours ago)	Blocked by UFW (TCP on 3306) Source port: 61077 TTL: 59 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 3306) Source port: 61077 TTL: 59 Packet length: 44 TOS: 0x00 This report (for 16.5.0.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SQL Injection
🇺🇸 OceanTreasure	2026-09-17 08:10:19 (2 hours ago)	tcp/9200; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 20 ... show more tcp/9200; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-17T08:04:48Z show less	Port Scan
🇺🇸 sandra361	2026-09-17 08:09:49 (2 hours ago)	Port scan detected: 55 attempts across 1 port (81). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=16.5.0. ... show more Port scan detected: 55 attempts across 1 port (81). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=16.5.0.214 LEN=56 TOS=0x00 PREC=0x00 TTL=50 ID=39008 DF PROTO=TCP SPT=50559 DPT=81 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇺🇸 MPL	2026-09-17 08:03:43 (2 hours ago)	tcp port scan (5 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-17 07:48:28 (2 hours ago)	Blocked by UFW (TCP on 8001) Source port: 61154 TTL: 54 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8001) Source port: 61154 TTL: 54 Packet length: 44 TOS: 0x00 This report (for 16.5.0.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.175.76.20

🇧🇷 200.106.183.4

🇬🇧 198.244.240.231

🇨🇴 191.93.101.138

🇳🇱 185.226.197.27

🇨🇴 181.119.66.41

🇧🇷 179.0.121.27

🇫🇮 147.185.133.105

🇫🇮 147.185.133.34

🇨🇳 111.228.15.51

🇳🇱 93.123.109.6

🇵🇰 39.63.158.250

🇬🇧 35.203.210.67

🇮🇹 34.154.92.42

🇫🇷 20.43.35.101

🇹🇷 2a02:4e0:2d85:896f:514a:f05b:8d6d:916

🇦🇪 2001:8f8:1e6d:11ea:bd37:2ab:10cf:3023

🇰🇿 212.116.240.83

🇺🇸 195.184.76.208

🇧🇷 189.6.249.62