This IP address has been reported a total of
39
times from
24 distinct
sources.
24.199.116.161 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 12
reports;
Ukraine
with 5
reports;
Finland
with 2
reports.
The most common categories in these recent reports were:
Port Scan
21
times;
Hacking
7
times;
Spoofing
5
times;
Web App Attack
4
times;
Brute-Force
3
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts ...
show moreSep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS, session=<A+HQ2KBctI0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<UxHd2KBcwo0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<Bd3l2KBcyI0Yx3Sh>
show less
Sep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts ...
show moreSep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS, session=<A+HQ2KBctI0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<UxHd2KBcwo0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<Bd3l2KBcyI0Yx3Sh>
show less
Sep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts ...
show moreSep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS, session=<A+HQ2KBctI0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<UxHd2KBcwo0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<Bd3l2KBcyI0Yx3Sh>
show less
Sep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts ...
show moreSep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS, session=<A+HQ2KBctI0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<UxHd2KBcwo0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<Bd3l2KBcyI0Yx3Sh>
show less
firewall port scanning detected. 2 or more observation(s) from 2026-09-29T16:00:53.000Z through 2026 ...
show morefirewall port scanning detected. 2 or more observation(s) from 2026-09-29T16:00:53.000Z through 2026-09-29T16:00:53.000Z.
show less
Sep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts ...
show moreSep 29 18:29:22 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS, session=<A+HQ2KBctI0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<UxHd2KBcwo0Yx3Sh>
Sep 29 18:29:23 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.199.116.161, lip=192.168.1.80, TLS handshaking: Connection closed, session=<Bd3l2KBcyI0Yx3Sh>
show less
tcp/44444; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2 ...
show moretcp/44444; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-29T14:51:52Z
show less
Honeypot detection: port scan / service probe. 3 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 3 events observed. Reported automatically from a honeypot sensor.
show less
Blocked by UFW (TCP on 5555)
Source port: 61000
TTL: 245
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 5555)
Source port: 61000
TTL: 245
Packet length: 44
TOS: 0x00
This report (for 24.199.116.161) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
