JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.199.245.129

166.199.245.129 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 2%: ?

ISP	AT&T Enterprises, LLC
Usage Type	Mobile ISP
ASN	AS7018
Hostname(s)	mobile-166-199-245-129.mycingular.net
Domain Name	att.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.199.245.129

Whois 166.199.245.129

IP Abuse Reports for 166.199.245.129:

This IP address has been reported a total of 10 times from 3 distinct sources. 166.199.245.129 was first reported on September 26th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IDS	2026-06-15 12:44:10 (1 week ago)	2026-06-15T08:37:59.962835mail.idscp.com auth[924901]: pam_unix(dovecot:auth): authentication failur ... show more 2026-06-15T08:37:59.962835mail.idscp.com auth[924901]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.129 2026-06-15T08:38:03.477014mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<dx3CGEpUWYymx/WB> 2026-06-15T08:38:13.076041mail.idscp.com auth[924901]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.129 2026-06-15T08:38:16.415593mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 7 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<Nh9NGUpUgUumx/WB> 2026-06-15T08:44:09.301203mail.idscp.com auth[924901]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodo ... show less	Brute-Force Web App Attack
🇺🇸 IDS	2026-04-22 23:20:05 (2 months ago)	2026-04-22T19:04:37.325630mail.idscp.com auth[2178138]: pam_unix(dovecot:auth): authentication failu ... show more 2026-04-22T19:04:37.325630mail.idscp.com auth[2178138]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.129 2026-04-22T19:04:41.597980mail.idscp.com dovecot[1516308]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<gq9NjhRQDxemx/WB> 2026-04-22T19:04:41.598684mail.idscp.com dovecot[1516308]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<+e5NjhRQCRemx/WB> 2026-04-22T19:20:04.887585mail.idscp.com auth[2217442]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.129 2026-04-22T19:20:04.891283mail.idscp.com auth[2217444]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ... show less	Brute-Force Web App Attack
🇺🇸 IDS	2024-07-06 21:08:22 (1 year ago)	2024-07-06T17:08:08.065605mail.idscp.com auth[1057052]: pam_unix(dovecot:auth): authentication failu ... show more 2024-07-06T17:08:08.065605mail.idscp.com auth[1057052]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=166.199.245.129 2024-07-06T17:08:08.079235mail.idscp.com auth[1057053]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.129 2024-07-06T17:08:11.609598mail.idscp.com dovecot[2625477]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 3 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<0MOnk5ocfXSmx/WB> 2024-07-06T17:08:11.620996mail.idscp.com dovecot[2625477]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=166.199.245.129, lip=173.219.81.58, session=<ZqCnk5ocfnSmx/WB> 2024-07-06T17:08:21.113652mail.idscp.com auth[1057052]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 ... show less	Brute-Force Web App Attack
Anonymous	2024-05-27 03:37:53 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_IMAPD	Brute-Force SSH
Anonymous	2024-05-27 01:42:47 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-03-14 06:13:35 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_IMAPD	Brute-Force SSH
Anonymous	2024-03-10 09:46:15 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_IMAPD	Brute-Force SSH
Anonymous	2024-03-10 08:45:00 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-03-09 04:49:29 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_IMAPD	Brute-Force SSH
Anonymous	2023-09-26 17:35:07 (2 years ago)	Port Scan detected from 166.199.245.129 (US/United States/Texas/Dallas/mobile-166-199-245-129.myci ... show more Port Scan detected from 166.199.245.129 (US/United States/Texas/Dallas/mobile-166-199-245-129.mycingular.net/[redacted]). show less	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.198.62.180

🇩🇪 87.106.29.151

🇳🇱 45.142.193.164

🇯🇵 8.216.9.195

🇺🇸 216.25.89.79

🇺🇸 205.210.31.71

🇿🇲 165.56.14.32

🇺🇸 104.152.52.200

🇭🇰 223.197.178.95

🇳🇱 192.144.91.85

🇷🇺 178.178.194.131

🇨🇳 111.226.26.221

🇱🇹 62.60.130.219

🇨🇳 8.138.35.149

🇫🇷 2001:41d0:33a:a00::402

🇧🇷 198.1.195.197

🇬🇧 188.240.59.59

🇨🇳 163.204.70.97

🇺🇸 157.55.39.53

🇺🇸 104.152.52.210