JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 160.191.54.23

160.191.54.23 was found in our database!

This IP was reported 526 times. Confidence of Abuse is 100%: ?

100%

ISP	VPS VN Company Limitedc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150862
Domain Name	vnnic.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 160.191.54.23

Whois 160.191.54.23

IP Abuse Reports for 160.191.54.23:

This IP address has been reported a total of 526 times from 165 distinct sources. 160.191.54.23 was first reported on April 28th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-26 04:32:29 (3 days ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force
🇩🇪 ghostwarriors	2026-06-17 12:22:25 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-06-15 04:31:59 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇦 llighthunter	2026-06-10 23:00:29 (2 weeks ago)	Jun 9 13:29:04 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<co ... show more Jun 9 13:29:04 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=160.191.54.23, lip=192.168.1.80, session=<jpqgmM9TIOagvzYX> Jun 9 13:38:35 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=160.191.54.23, lip=192.168.1.80, session=<g3ypus9TfIigvzYX> Jun 9 13:48:33 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=160.191.54.23, lip=192.168.1.80, session=<qg9J3s9TvJygvzYX> show less	Port Scan Hacking Spoofing
🇫🇷 basing	2026-06-10 03:25:18 (2 weeks ago)	2026-06-10 04:25:18 pzb SASL PLAIN auth failed: rhost=160.191.54.23...	Brute-Force
🇺🇸 shaunc	2026-06-10 03:05:10 (2 weeks ago)	Jun 9 21:00:40 mailman postfix/smtpd[29319]: lost connection after UNKNOWN from unknown[160.191.54. ... show more Jun 9 21:00:40 mailman postfix/smtpd[29319]: lost connection after UNKNOWN from unknown[160.191.54.23] Jun 9 22:05:08 mailman postfix/smtpd[1261]: lost connection after UNKNOWN from unknown[160.191.54.23] show less	Port Scan
🇩🇪 mattk	2026-06-10 03:03:22 (2 weeks ago)	Jun 10 03:03:22 postfix/submission/smtpd[910229]: warning: unknown[160.191.54.23]: SASL PLAIN authen ... show more Jun 10 03:03:22 postfix/submission/smtpd[910229]: warning: unknown[160.191.54.23]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇺🇸 mnogoweb	2026-06-10 02:52:27 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 160.191.54.23 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 160.191.54.23 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-09 20:37:28 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 20:37:30 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 20:46:21 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 20:46:23 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 20:52:21 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇩🇪 FeG Deutschland	2026-06-10 02:52:02 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇦🇹 joe-abuse	2026-06-10 02:41:15 (2 weeks ago)	2026-06-10T04:41:14.943395+02:00 ucs1 dovecot: auth-worker(186066): conn unix:auth-worker (pid=1060, ... show more 2026-06-10T04:41:14.943395+02:00 ucs1 dovecot: auth-worker(186066): conn unix:auth-worker (pid=1060,uid=121): auth-worker<1>: pam([email protected],160.191.54.23): unknown user (given password: P@ssw0rd1) ... show less	Brute-Force
🇨🇦 zXero	2026-06-10 02:34:12 (2 weeks ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
🇨🇦 craftxbox	2026-06-10 02:25:10 (2 weeks ago)	SMTP Brute-Force Attempt. HELO/EHLO as 'localhost'. Attempted Username: [email protected]	Brute-Force
🇩🇪 DAUGDE	2026-06-10 02:24:03 (2 weeks ago)	2026-06-10T04:23:53.215013+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 04:23:53 9275893e ... show more 2026-06-10T04:23:53.215013+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 04:23:53 9275893e7080 postfix/submission/smtpd[51204]: lost connection after CONNECT from unknown[160.191.54.23] 2026-06-10T04:23:56.120955+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 04:23:56 9275893e7080 postfix/submission/smtpd[51195]: warning: unknown[160.191.54.23]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-10T04:24:03.225892+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 04:24:03 9275893e7080 postfix/smtps/smtpd[51233]: warning: unknown[160.191.54.23]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Email Spam Spoofing Brute-Force
🇱🇻 user-4736	2026-06-10 02:22:14 (2 weeks ago)	Fail2Ban - SASL LOGIN authentication failed / Email auth brute force attack ...	Brute-Force
🇺🇸 mnogoweb	2026-06-10 02:17:34 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 160.191.54.23 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 160.191.54.23 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-09 19:47:09 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 19:47:11 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 19:49:25 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 19:49:27 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) 2026-06-09 20:17:33 plain authenticator failed for (localhost) [160.191.54.23]: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 526 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:c300:1000::383

🇺🇸 2604:2d80:ea82:4f00:a1ba:34f3:5195:ddbc

🇫🇷 2400:cb00:727:1000:8e81:639:5280:dbe2

🇳🇵 202.70.80.153

🇧🇪 198.235.24.217

🇪🇹 196.188.187.59

🇬🇧 194.74.196.10

🇫🇷 194.38.17.228

🇬🇧 185.249.74.198

🇰🇷 175.248.161.4

🇦🇹 150.251.225.83

🇧🇪 104.155.123.166

🇺🇸 76.36.208.216

🇱🇹 62.60.130.219

🇱🇹 62.60.130.210

🇺🇸 54.208.40.167

🇸🇬 47.79.200.2

🇳🇱 45.148.10.157

🇺🇸 35.255.232.191

🇺🇸 23.153.216.49