223.198.166.58
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET HAINAN PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Haikou, Hainan
Abuse Reports
Total reports
57 from
46 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-postfix jail
|
Brute-Force | |
| 🇩🇪 LRob |
SMTP AUTH probe | 2026-10-01 15:18 UTC
|
Port Scan | |
| Anonymous |
Brute Force User Attack SMTP
|
Brute-Force | |
| Anonymous |
SMTP brute force - auth failed
|
Brute-Force Exploited Host | |
| 🇩🇪 DocNetzwerk |
(smtpauth) Failed SMTP AUTH login from 223.198.166.58 (CN/China/-)
|
Brute-Force | |
| 🇩🇪 mnpx |
SMTP brute forcing (2× over 4h:50m); first seen here 2026-10-01T06:56Z
|
Brute-Force | |
| 🇫🇷 Stara |
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
|
Brute-Force DDoS Attack | |
| 🇫🇷 pwozniak |
warning: unknown[223.198.166.58]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
|
Brute-Force | |
| 🇵🇦 iphezimbra |
Fail2Ban reported IP from jail zimbra-smtp on <hostname>
|
Brute-Force SSH | |
| 🇮🇩 xveil |
2026-10-01T16:44:26.696382 mail-honeypot postfix/submission/smtpd[12534]: warning: unknown[223.198.166.58]: SASL LOGIN authentication failed: authentication failure
...
|
Brute-Force | |
| 🇩🇪 FeG Deutschland |
Mail: - login with unknown user - bruteforce
|
Brute-Force | |
| 🇯🇵 gomasy |
2026-10-01T17:27:23.909324+09:00 ssv01 auth[2941825]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=********** rhost=223.198.166.58
...
|
Brute-Force | |
| 🇯🇵 tttomomi |
Repeated failed SMTP AUTH attempts (SASL) against our mail server. Usernames attempted: ndoe.
|
Brute-Force | |
| 🇺🇸 Zestysoft |
2026-10-01T05:44:30.875962+00:00 mail dovecot: auth([email protected],223.198.166.58,sasl:login): passdb-default: unknown user (given password: test1234!)
...
|
Brute-Force | |
| 🇩🇪 MarkGGN |
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown