JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

200.98.65.126

Neutral Activity

Abuse confidence score ?

0% Low Risk

29 reports

26 reporters · latest 5 months ago

ISP	Universo Online S.A.
Usage Type	Fixed Line ISP
ASN	AS7162
Domain Name	uol.com.br
Country	🇧🇷 Brazil
City	Ferraz de Vasconcelos, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

200.98.65.126 has been reported 29 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 200.98.65.126

Export CSV

This IP address has been reported a total of 29 times from 26 distinct sources. 200.98.65.126 was first reported on April 7th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-06 06:00:00 (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=85, sources=1)	Hacking Brute-Force SSH
🇫🇷 dwmp	2026-04-13 10:55:11 (5 months ago)	Apr 13 12:55:02 plesk postfix/smtpd[2089510]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: ... show more Apr 13 12:55:02 plesk postfix/smtpd[2089510]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure Apr 13 12:55:03 plesk postfix/smtpd[2089510]: disconnect from 200-98-65-126.clouduol.com.br[200.98.65.126] ehlo=1 auth=0/1 quit=1 unknown=0/1 commands=2/4 Apr 13 12:55:10 plesk postfix/smtpd[2089912]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force SSH
Anonymous	2026-04-10 08:38:46 (6 months ago)	SMTP AUTH 200.98.65.126 (SMTP_LOGIN_ATTEMPT)	Brute-Force
🇫🇷 dwmp	2026-04-10 03:21:17 (6 months ago)	Apr 10 05:21:14 plesk postfix/smtpd[4062330]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: ... show more Apr 10 05:21:14 plesk postfix/smtpd[4062330]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure Apr 10 05:21:15 plesk postfix/smtpd[4062330]: disconnect from 200-98-65-126.clouduol.com.br[200.98.65.126] ehlo=1 auth=0/1 quit=1 unknown=0/1 commands=2/4 Apr 10 05:21:16 plesk postfix/smtpd[4062282]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force SSH
Anonymous	2026-04-09 22:53:16 (6 months ago)	8x Postfix SASL LOGIN authentication failed	Brute-Force
Anonymous	2026-04-09 16:30:55 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇳🇴 atluxity	2026-04-09 15:35:44 (6 months ago)	2026-04-09 15:35:33,207 INFO [qtp626742236-3682:smtp://host1.domain.tld:7073/service/admin/soap/] [ ... show more 2026-04-09 15:35:33,207 INFO [qtp626742236-3682:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=200.98.65.126;oport=23023;oproto=smtp;soapId=4d4a291b;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2026-04-09 15:35:33,210 INFO [qtp626742236-3682:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=200.98.65.126;oport=23023;oproto=smtp;soapId=4d4a291b;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2026-04-09 15:35:35,169 INFO [qtp626742236-3680:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=200.98.65.126;oport=64543;oproto=smtp;soapId=4d4a291c;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2026-04-09 15:35:35,169 INFO [qtp626742236-3680:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=200.98.65.126;oport=64543;oproto=smtp;soapId=4d4a291c;] SoapEngine - handler exception: authentic ... show less	Brute-Force Web App Attack
🇧🇷 SvrAdmin	2026-04-09 15:21:57 (6 months ago)	[254] (smtpauth) Failed SMTP AUTH login from 200.98.65.126 (BR/Brazil/200-98-65-126.clouduol.com.br) ... show more [254] (smtpauth) Failed SMTP AUTH login from 200.98.65.126 (BR/Brazil/200-98-65-126.clouduol.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Apr 9 12:21:35 painel postfix/smtpd[20966]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: Apr 9 12:21:41 painel postfix/smtpd[21011]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: Apr 9 12:21:47 painel postfix/smtpd[21113]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: Apr 9 12:21:53 painel postfix/smtpd[20966]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: Apr 9 12:21:55 painel postfix/smtpd[21011]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: show less	Port Scan Hacking Brute-Force Exploited Host
🇵🇦 iphezimbra	2026-04-09 13:35:27 (6 months ago)	Fail2Ban reported IP from jail zimbra-smtp on <hostname>	Brute-Force SSH
🇫🇷 dwmp	2026-04-09 13:03:09 (6 months ago)	Apr 9 15:03:06 plesk postfix/smtpd[3999668]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: ... show more Apr 9 15:03:06 plesk postfix/smtpd[3999668]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure Apr 9 15:03:07 plesk postfix/smtpd[3999668]: disconnect from 200-98-65-126.clouduol.com.br[200.98.65.126] ehlo=1 auth=0/1 quit=1 unknown=0/1 commands=2/4 Apr 9 15:03:08 plesk postfix/smtpd[4001963]: warning: 200-98-65-126.clouduol.com.br[200.98.65.126]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force SSH
Anonymous	2026-04-08 16:30:53 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇫🇮 [email protected]	2026-04-08 16:27:39 (6 months ago)	Attack attempt against Interwebbi servers; (smtpauth) Failed SMTP AUTH login from 200.98.65.126 (BR/ ... show more Attack attempt against Interwebbi servers; (smtpauth) Failed SMTP AUTH login from 200.98.65.126 (BR/Brazil/200-98-65-126.clouduol.com.br): 5 in the last 3600 secs; IP: 200.98.65.126; Ports: *; Direction: 0; Trigger: LF_SMTPAUTH; show less	Brute-Force
Anonymous	2026-04-08 16:27:02 (6 months ago)	...	Brute-Force
🇨🇭 Origon	2026-04-08 13:12:14 (6 months ago)	postfix-non-smtp-command - IP: 200.98.65.126 - time="2026-04-08T15:12:14+02:00" level=info msg="(55 ... show more postfix-non-smtp-command - IP: 200.98.65.126 - time="2026-04-08T15:12:14+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 200.98.65.126 (BR/7162) : 4h ban on Ip 200.98.65.126" module=db show less	Email Spam
Anonymous	2026-04-08 12:08:30 (6 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 206.189.124.16

🇳🇱 185.226.197.35

🇨🇳 183.251.240.156

🇳🇱 109.160.32.35

🇬🇧 104.248.162.89

🇷🇴 92.118.39.77

🇮🇹 87.1.160.126

🇫🇷 85.217.140.13

🇩🇿 41.111.208.66

🇺🇸 34.132.239.74

🇳🇱 160.119.66.206

🇰🇷 121.154.163.135

🇮🇳 103.70.40.36

🇺🇸 92.113.210.15

🇬🇧 86.38.187.186

🇬🇧 86.38.187.133

🇰🇷 59.24.158.2

🇨🇳 47.110.142.108

🇺🇸 20.127.154.194

🇫🇷 2001:41d0:303:a15c::1