AbuseIPDB » 168.0.16.116

168.0.16.116 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 28%: ?

28%

ISP	DeltaAtiva Telecomunicacoes
Usage Type	Fixed Line ISP
Domain Name	deltaativa.com.br
Country	Brazil
City	Ibirama, Santa Catarina

Report 168.0.16.116

Whois 168.0.16.116

IP Abuse Reports for 168.0.16.116:

This IP address has been reported a total of 10 times from 6 distinct sources. 168.0.16.116 was first reported on November 17th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-18 16:30:10 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2024-11-18 15:18:36 (2 weeks ago)	2024-11-18T15:18:24.029944+00:00 mail postfix/smtpd[1510832]: warning: unknown[168.0.16.116]: SASL P ... show more2024-11-18T15:18:24.029944+00:00 mail postfix/smtpd[1510832]: warning: unknown[168.0.16.116]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2024-11-18T15:18:30.495477+00:00 mail postfix/smtpd[1510832]: warning: unknown[168.0.16.116]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2024-11-18T15:18:36.223468+00:00 mail postfix/smtpd[1510832]: warning: unknown[168.0.16.116]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=financeiro ... show less	Email Spam Brute-Force
SvrAdmin	2024-11-17 23:48:19 (2 weeks ago)	[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Po ... show more[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-11-17 20:41:47 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:43691: 535 Incorrect authentication data ([email protected]) 2024-11-17 20:41:53 dovecot_login authenticator failed for (SCANNER.) [168.0.16.116]:43691: 535 Incorrect authentication data ([email protected]) 2024-11-17 20:41:59 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:43691: 535 Incorrect authentication data (set_id=financeiro) 2024-11-17 20:42:09 dovecot_login authenticator failed for (SCANNER.) [168.0.16.116]:43691: 535 Incorrect authentication data (set_id=financeiro) 2024-11-17 20:48:15 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:43050: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2024-11-16 13:31:51 (2 weeks ago)	2024-11-16T13:31:38.122468+00:00 mail postfix/smtpd[1481206]: warning: unknown[168.0.16.116]: SASL P ... show more2024-11-16T13:31:38.122468+00:00 mail postfix/smtpd[1481206]: warning: unknown[168.0.16.116]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2024-11-16T13:31:44.083229+00:00 mail postfix/smtpd[1481206]: warning: unknown[168.0.16.116]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2024-11-16T13:31:50.309027+00:00 mail postfix/smtpd[1481206]: warning: unknown[168.0.16.116]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=financeiro ... show less	Email Spam Brute-Force
Julio Covolato	2024-11-15 19:05:01 (2 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
hostseries	2024-11-15 04:38:22 (2 weeks ago)	Trigger: LF_SMTPAUTH	Brute-Force
SvrAdmin	2024-11-15 04:12:45 (2 weeks ago)	[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Po ... show more[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-11-15 00:50:33 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:42795: 535 Incorrect authentication data ([email protected]) 2024-11-15 00:50:39 dovecot_login authenticator failed for (SCANNER.) [168.0.16.116]:42795: 535 Incorrect authentication data ([email protected]) 2024-11-15 00:50:45 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:42795: 535 Incorrect authentication data (set_id=financeiro) 2024-11-15 00:50:55 dovecot_login authenticator failed for (SCANNER.) [168.0.16.116]:42795: 535 Incorrect authentication data (set_id=financeiro) 2024-11-15 01:12:39 dovecot_plain authenticator failed for (SCANNER.) [168.0.16.116]:41640: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
hostseries	2024-10-25 03:09:23 (1 month ago)	Trigger: LF_SMTPAUTH	Brute-Force
SvrAdmin	2024-10-25 03:07:04 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Po ... show more[101] (smtpauth) Failed SMTP AUTH login from 168.0.16.116 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-10-25 00:01:14 dovecot_plain authenticator failed for (DESKTOP-ASNFQGH.) [168.0.16.116]:50026: 535 Incorrect authentication data ([email protected]) 2024-10-25 00:01:20 dovecot_login authenticator failed for (DESKTOP-ASNFQGH.) [168.0.16.116]:50026: 535 Incorrect authentication data ([email protected]) 2024-10-25 00:01:26 dovecot_plain authenticator failed for (DESKTOP-ASNFQGH.) [168.0.16.116]:50026: 535 Incorrect authentication data (set_id=wagner) 2024-10-25 00:01:36 dovecot_login authenticator failed for (DESKTOP-ASNFQGH.) [168.0.16.116]:50026: 535 Incorrect authentication data (set_id=wagner) 2024-10-25 00:07:00 dovecot_plain authenticator failed for (DESKTOP-ASNFQGH.) [168.0.16.116]:50933: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Pingger Shikkoken	2023-11-17 12:34:10 (1 year ago)	Participating in DDoS Amplification Attack! Sending 18 requests over 17005s asking for ?0? of apple. ... show moreParticipating in DDoS Amplification Attack! Sending 18 requests over 17005s asking for ?0? of apple.com, cisco.com, atlassian.com show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host