JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.199.245.49

166.199.245.49 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 14%: ?

14%

ISP	AT&T Enterprises, LLC
Usage Type	Mobile ISP
ASN	AS7018
Hostname(s)	mobile-166-199-245-049.mycingular.net
Domain Name	att.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.199.245.49

Whois 166.199.245.49

IP Abuse Reports for 166.199.245.49:

This IP address has been reported a total of 5 times from 3 distinct sources. 166.199.245.49 was first reported on May 7th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IDS	2026-06-08 14:02:04 (3 days ago)	2026-06-08T09:46:37.327807mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login b ... show more 2026-06-08T09:46:37.327807mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.49, lip=173.219.81.58, session=<s90RPb5TF8umx/Ux> 2026-06-08T09:46:46.756917mail.idscp.com auth[1932354]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2026-06-08T09:46:50.577591mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 8 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.49, lip=173.219.81.58, session=<uEabPb5TDHymx/Ux> 2026-06-08T10:01:59.280046mail.idscp.com auth[1973496]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2026-06-08T10:02:03.179015mail.idscp.com dovecot[2249325]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): u ... show less	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-07 01:27:32 (5 days ago)	Blocked by UFW (TCP on 123) Source port: 36935 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 36935 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 166.199.245.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 IDS	2026-01-22 17:06:26 (4 months ago)	2026-01-22T11:51:14.506224mail.idscp.com dovecot[1268125]: pop3-login: Disconnected: Aborted login b ... show more 2026-01-22T11:51:14.506224mail.idscp.com dovecot[1268125]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 3 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.49, lip=173.219.81.58, session=<29oT2fxIcYWmx/Ux> 2026-01-22T11:51:24.066298mail.idscp.com auth[1543705]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2026-01-22T11:51:28.311371mail.idscp.com dovecot[1268125]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 8 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.49, lip=173.219.81.58, session=<VT6b2fxIdIWmx/Ux> 2026-01-22T12:06:21.704076mail.idscp.com auth[1567644]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2026-01-22T12:06:25.328478mail.idscp.com dovecot[1268125]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): u ... show less	Brute-Force Web App Attack
🇺🇸 bigscoots.com	2025-06-19 09:45:50 (11 months ago)	(PERMBLOCK) 166.199.245.49 (US/United States/mobile-166-199-245-049.mycingular.net) has had more tha ... show more (PERMBLOCK) 166.199.245.49 (US/United States/mobile-166-199-245-049.mycingular.net) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 IDS	2024-05-07 14:32:10 (2 years ago)	2024-05-07T10:31:44.359628mail.idscp.com auth[2341826]: pam_unix(dovecot:auth): authentication failu ... show more 2024-05-07T10:31:44.359628mail.idscp.com auth[2341826]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2024-05-07T10:31:49.011899mail.idscp.com dovecot[1803280]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 5 secs): user=<planodojo>, method=PLAIN, rip=166.199.245.49, lip=173.219.81.58, session=<ocyOC94Xwb6mx/Ux> 2024-05-07T10:31:58.085849mail.idscp.com auth[2341826]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=166.199.245.49 2024-05-07T10:32:01.318087mail.idscp.com auth[2341826]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=planodojo rhost=166.199.245.49 2024-05-07T10:32:04.205889mail.idscp.com dovecot[1803280]: pop3-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=166.199.245.49, ... show less	Brute-Force Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.182

🇨🇳 115.231.78.11

🇩🇪 69.5.169.118

🇮🇶 188.64.139.147

🇨🇭 179.43.146.227

🇺🇸 162.216.149.95

🇨🇳 113.240.110.0

🇫🇷 85.217.140.40

🇩🇪 69.5.169.69

🇷🇺 45.195.221.26

🇨🇳 221.229.220.180

🇺🇸 184.168.21.211

🇬🇧 138.68.144.227

🇮🇩 115.85.80.12

🇩🇪 92.208.231.46

🇬🇧 89.37.172.155

🇫🇷 75.119.132.109

🇫🇷 51.68.226.171

🇩🇪 213.209.159.56

🇩🇪 206.81.24.74