JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.214.165.16

181.214.165.16 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutils.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.214.165.16

Whois 181.214.165.16

IP Abuse Reports for 181.214.165.16:

This IP address has been reported a total of 24 times from 18 distinct sources. 181.214.165.16 was first reported on December 3rd 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-03-12 19:27:03 (3 months ago)	Email account brute force: 4 attempts were recorded from 181.214.165.16 2026-03-12T19:02:31+01:00 wa ... show more Email account brute force: 4 attempts were recorded from 181.214.165.16 2026-03-12T19:02:31+01:00 warning: unknown[181.214.165.16]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-12T19:02:32+01:00 warning: unknown[181.214.165.16]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-12T19:02:33+01:00 warning: unknown[181.214.165.16]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-12T19:02:33+01:00 warning: unknown[181.214.165.16]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇪🇸 Nudisco	2026-03-12 18:07:11 (3 months ago)		Brute-Force
🇱🇻 garmtech.com	2026-03-12 15:41:15 (3 months ago)	Multiple SASL authentication failures.	Brute-Force
🇭🇺 DumaNet	2026-02-26 03:30:00 (3 months ago)	Multiple SASL authentication failures. Date: 2026 Feb 25. 04:13:42 -- Source IP: 181.214.165.16 ... show more Multiple SASL authentication failures. Date: 2026 Feb 25. 04:13:42 -- Source IP: 181.214.165.16 Portion of the log(s): Feb 25 04:13:42 michael postfix/smtpd[76032]: warning: unknown[181.214.165.16]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=[removed]@dumanet.hu Feb 25 04:13:25 michael postfix/smtpd[76032]: warning: unknown[181.214.165.16]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=[removed]@dumanet.hu Feb 25 04:13:25 michael postfix/smtpd[76032]: warning: unknown[181.214.165.16]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=[removed]@dumanet.hu Feb 25 04:13:23 michael postfix/smtpd[76032]: warning: unknown[181.214.165.16]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=[removed]@dumanet.hu Feb 25 04:13:23 michael postfix/smtpd[76032]: warning: unknown[181.214.165.16]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=[removed]@dumanet.hu Feb 25 04:13:10 michael postfix/smtpd show less	Brute-Force
🇩🇪 itak	2026-02-24 09:47:38 (3 months ago)	SMTP SASL Brute-Force Attack	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-01-19 21:16:43 (5 months ago)	Blocked by UFW (TCP on 50383) Source port: 43356 TTL: 119 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 50383) Source port: 43356 TTL: 119 Packet length: 52 TOS: 0x08 This report (for 181.214.165.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-12-18 10:20:04 (6 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇫🇷 Dampen59	2025-12-17 14:36:56 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 181.214.165.16 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 181.214.165.16 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-17 15:35:45 dovecot_login authenticator failed for (ADMIN) [181.214.165.16]:2380: 535 Incorrect authentication data ([email protected]) 2025-12-17 15:36:13 dovecot_login authenticator failed for (ADMIN) [181.214.165.16]:37035: 535 Incorrect authentication data ([email protected]) 2025-12-17 15:36:13 dovecot_login authenticator failed for (ADMIN) [181.214.165.16]:19186: 535 Incorrect authentication data ([email protected]) 2025-12-17 15:36:33 dovecot_login authenticator failed for (ADMIN) [181.214.165.16]:11155: 535 Incorrect authentication data ([email protected]) 2025-12-17 15:36:55 dovecot_login authenticator failed for (ADMIN) [181.214.165.16]:61562: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2025-10-24 01:40:14 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-18 17:50:17 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-07 17:40:11 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 polido	2025-10-07 17:04:47 (8 months ago)	Unauthorized connection attempt to port 443 from 181.214.165.16	Port Scan
🇺🇸 xmission.com	2025-09-28 11:43:04 (8 months ago)	Blocked by UFW (TCP on 57948) Source port: 10553 TTL: 119 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 57948) Source port: 10553 TTL: 119 Packet length: 52 TOS: 0x08 This report (for 181.214.165.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 Ticlem	2025-09-01 10:23:35 (9 months ago)	2025-09-01T11:58:12.660424+02:00 clement-turlure kernel: [37122567.121745] [UFW BLOCK] IN=enp0s31f6 ... show more 2025-09-01T11:58:12.660424+02:00 clement-turlure kernel: [37122567.121745] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.165.16 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=50 ID=50657 PROTO=UDP SPT=53337 DPT=6881 LEN=105 2025-09-01T12:23:17.407658+02:00 clement-turlure kernel: [37124071.842594] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.165.16 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=50 ID=53033 PROTO=UDP SPT=20958 DPT=6881 LEN=105 2025-09-01T12:23:34.431663+02:00 clement-turlure kernel: [37124088.866331] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=181.214.165.16 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=50 ID=14000 PROTO=UDP SPT=20958 DPT=6881 LEN=105 ... show less	Port Scan
🇺🇸 oncord	2025-05-15 16:40:31 (1 year ago)	Form spam	Web Spam

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.234.106.215

🇳🇱 185.177.238.75

🇸🇬 103.250.10.18

🇨🇴 186.102.72.253

🇦🇷 138.118.215.192

🇨🇳 117.149.196.213

🇰🇷 110.15.180.184

🇩🇪 213.209.159.242

🇨🇳 120.239.0.239

🇬🇧 109.181.37.0

🇯🇵 101.36.104.242

🇳🇱 45.148.10.141

🇩🇪 207.154.230.149

🇨🇳 101.96.198.153

🇨🇦 96.30.129.156

🇺🇸 66.132.172.248

🇺🇸 47.189.182.17

🇮🇶 37.238.45.202

🇨🇴 209.61.59.6

🇹🇼 198.235.24.93