JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.211.16.153

41.211.16.153 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 95%: ?

95%

ISP	Teledata Network – For clients(wan with internet)
Usage Type	Fixed Line ISP
ASN	AS35091
Domain Name	teledata-gh.com
Country	🇬🇭 Ghana
City	Mandela, Greater Accra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.211.16.153

Whois 41.211.16.153

IP Abuse Reports for 41.211.16.153:

This IP address has been reported a total of 141 times from 74 distinct sources. 41.211.16.153 was first reported on June 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-01 18:58:13 (1 day ago)	(imapd) Failed IMAP login from 41.211.16.153 (GH/Ghana/-)	Brute-Force
🇮🇩 sockominfo	2026-06-30 07:00:52 (2 days ago)	Zimbra: Login failures from malicious IP: 41.211.16.153. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 41.211.16.153. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-30 05:56:15 (2 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇬🇧 gaztronics	2026-06-30 03:28:06 (2 days ago)	2026-06-30T03:28:04.036269 liberator auth[2868846]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-06-30T03:28:04.036269 liberator auth[2868846]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=41.211.16.153 ... show less	Brute-Force
Anonymous	2026-06-29 15:07:11 (3 days ago)	3 Login Attempts	Port Scan Brute-Force
🇨🇿 interconnect.cz	2026-06-24 01:45:13 (1 week ago)	[24/Jun/2026 03:44:55] IMAP: Authentication failed for user [email protected]. Attempt from ... show more [24/Jun/2026 03:44:55] IMAP: Authentication failed for user [email protected]. Attempt from IP address 41.211.16.153. External authentication service rejected authentication due to invalid password or authentication restriction. [24/Jun/2026 03:45:05] IMAP: Authentication failed for user [email protected]. Attempt from IP address 41.211.16.153. External authentication service rejected authentication due to invalid password or authentication restriction. [24/Jun/2026 03:45:13] IMAP: Authentication failed for user [email protected]. Attempt from IP address 41.211.16.153. External authentication service rejected authentication due to invalid password or authentication restriction. ... show less	Brute-Force Email Spam
🇦🇺 AWW-Admin	2026-06-22 15:58:33 (1 week ago)	(imapd) Failed IMAP login from 41.211.16.153 (GH/Ghana/-)	Brute-Force
🇬🇧 openstrike.co.uk	2026-06-17 22:51:21 (2 weeks ago)	Email auth failures (3)	Brute-Force
🇷🇴 gtheo99	2026-06-17 17:07:39 (2 weeks ago)	(imapd) Failed IMAP login from 41.211.16.153 (GH/Ghana/-): 3 in the last 900 secs	Brute-Force Email Spam
🇪🇸 www.pk25.com	2026-06-17 08:52:13 (2 weeks ago)	2026-06-17T10:51:55.036268+02:00 servidor1 auth[1765976]: pam_unix(dovecot:auth): authentication fai ... show more 2026-06-17T10:51:55.036268+02:00 servidor1 auth[1765976]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=erick.quinones rhost=41.211.16.153 2026-06-17T10:52:03.920415+02:00 servidor1 auth[1765976]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=erick.quinones rhost=41.211.16.153 2026-06-17T10:52:12.963407+02:00 servidor1 auth[1765976]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=erick.quinones rhost=41.211.16.153 ... show less	Brute-Force
Anonymous	2026-06-16 03:42:36 (2 weeks ago)	2026-06-16T05:42:35.644674+02:00 soli-gate cyrus/imaps[973224]: badlogin: [41.211.16.153] PLAIN (sdk ... show more 2026-06-16T05:42:35.644674+02:00 soli-gate cyrus/imaps[973224]: badlogin: [41.211.16.153] PLAIN ([email protected]) [SASL(-13): authentication failure: Password verification failed] ... show less	Brute-Force
🇺🇸 TTWebhosting	2026-06-15 22:23:03 (2 weeks ago)	(imapd) Failed IMAP login from 41.211.16.153 (GH/Ghana/-/-/-/[AS35091 Teledata, Ghana]): 2 in the la ... show more (imapd) Failed IMAP login from 41.211.16.153 (GH/Ghana/-/-/-/[AS35091 Teledata, Ghana]): 2 in the last 3600 secs show less	Brute-Force Port Scan Hacking
🇦🇹 joe-abuse	2026-06-15 17:07:09 (2 weeks ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-14 13:04:55 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-14 13:04:55. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇦🇺 FireGuard Server	2026-06-15 09:15:16 (2 weeks ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=143	Port Scan Hacking
🇮🇳 dineshskt4all	2026-06-14 02:51:11 (2 weeks ago)	Jun 14 02:51:06 auth: Info: passwd-file([email protected],41.211.16.153,<SNQMyC1UL4cp0xC ... show more Jun 14 02:51:06 auth: Info: passwd-file([email protected],41.211.16.153,<SNQMyC1UL4cp0xCZ>): unknown user Jun 14 02:51:08 imap-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=41.211.16.153, lip=68.183.87.236, TLS, session=<SNQMyC1UL4cp0xCZ> ... show less	SSH

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 178.156.206.238

🇮🇷 85.198.21.237

🇷🇺 62.231.20.54

🇧🇩 161.248.189.83

🇮🇩 157.66.55.50

🇨🇳 115.191.27.238

🇲🇲 103.233.206.154

🇳🇱 93.123.118.48

🇨🇳 61.169.112.210

🇲🇾 49.124.151.63

🇮🇩 43.243.142.42

🇨🇳 36.135.62.79

🇮🇳 172.253.230.157

🇫🇷 157.173.121.149

🇫🇮 147.185.133.209

🇸🇬 118.194.233.182

🇳🇱 93.123.118.52

🇺🇸 66.132.172.40

🇫🇷 51.75.141.245

🇰🇷 14.49.166.131