AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User DepTIPrefIbi joined AbuseIPDB in April 2022 and has reported 98 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 69.64.57.239	21 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br	Email Spam
🇧🇷 177.70.124.35	19 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br	Email Spam
🇧🇷 187.29.147.50	19 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br	Email Spam
🇺🇸 69.64.57.239	19 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br	Email Spam
🇬🇷 87.203.217.154	18 May 2022	May 18 17:01:10 email-server postfix/smtpd[324202]: NOQUEUE: reject: RCPT from athedsl-61516.home.ot ... show more May 18 17:01:10 email-server postfix/smtpd[324202]: NOQUEUE: reject: RCPT from athedsl-61516.home.otenet.gr[87.203.217.154]: 554 5.7.1 <[email protected]>: Relay access denied; from=<sams-*@ibi*.sp.gov.br> to=<[email protected]> proto=ESMTP helo=<[127.0.0.1]> show less	Email Spam Hacking
🇧🇷 189.1.169.150	16 May 2022	[16/May/2022:16:59:03 -0300] 189.1.169.150:9522 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:1 ... show more [16/May/2022:16:59:03 -0300] 189.1.169.150:9522 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:03 -0300] 189.1.169.150:9523 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:03 -0300] 189.1.169.150:9524 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:03 -0300] 189.1.169.150:9525 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:04 -0300] 189.1.169.150:9526 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:04 -0300] 189.1.169.150:9527 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:04 -0300] 189.1.169.150:9528 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:04 -0300] 189.1.169.150:9530 - - "-" "-" "GET / HTTP/1.0" 400 362 [16/May/2022:16:59:04 -0300] 189.1.169.150:9531 - - "-" "-" "GET / HTTP/1.0" 400 362 show less	DDoS Attack
🇺🇸 162.241.55.124	14 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br	Email Spam
🇳🇱 62.197.136.223	12 May 2022	[12/May/2022:11:49:30 -0300] 62.197.136.223:60656 - - "-" "Response status 404" "GET /wp-includes/im ... show more [12/May/2022:11:49:30 -0300] 62.197.136.223:60656 - - "-" "Response status 404" "GET /wp-includes/images/wlw/content.php HTTP/1.1" 404 1245 [12/May/2022:11:49:56 -0300] 62.197.136.223:50725 - - "-" "Response status 404" "GET /alwso.php HTTP/1.1" 404 1245 [12/May/2022:11:50:05 -0300] 62.197.136.223:51056 - - "-" "Response status 404" "GET /alwso.php HTTP/1.1" 404 1245 show less	Web App Attack
🇧🇷 164.163.224.221	12 May 2022	May 12 08:46:51 internet-server kernel: [5595512.384239] blacklist: SRC=164.163.224.221 DST=* LEN= ... show more May 12 08:46:51 internet-server kernel: [5595512.384239] blacklist: SRC=164.163.224.221 DST=* LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=8935 DF PROTO=TCP SPT=9273 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 show less	Port Scan Brute-Force
🇧🇷 45.7.12.238	12 May 2022	May 12 08:44:26 internet-server kernel: [5595367.157123] blacklist check: SRC=45.7.12.238 DST=* LE ... show more May 12 08:44:26 internet-server kernel: [5595367.157123] blacklist check: SRC=45.7.12.238 DST=* LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=23708 DF PROTO=TCP SPT=57631 DPT=7680 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 200.186.209.194	12 May 2022	May 12 08:29:54 internet-server kernel: [5594495.632649] blacklist: SRC=200.186.209.194 DST=* LEN= ... show more May 12 08:29:54 internet-server kernel: [5594495.632649] blacklist: SRC=200.186.209.194 DST=* LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=25889 DF PROTO=TCP SPT=54268 DPT=7680 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 45.65.9.244	11 May 2022	May 11 10:35:32 email-server postfix/smtpd[190701]: NOQUEUE: reject: RCPT from fin42.ddnsguru.com[45 ... show more May 11 10:35:32 email-server postfix/smtpd[190701]: NOQUEUE: reject: RCPT from fin42.ddnsguru.com[45.65.9.244]: 554 5.7.1 Service unavailable; Client host [45.65.9.244] blocked using truncate.gbudb.net; http://www.gbudb.com/truncate/ [45.65.9.244]; from=<[email protected]> to=<secre*@ibi*.sp.gov.br> proto=ESMTP helo=<fin42.ddnsguru.com> show less	Email Spam Exploited Host
🇧🇷 187.4.152.50	11 May 2022	DKIM Report of sending mails for ibitinga.sp.gov.br <org_name>google.com</org_name> <record> <ro ... show more DKIM Report of sending mails for ibitinga.sp.gov.br <org_name>google.com</org_name> <record> <row> <source_ip>187.4.152.50</source_ip> <count>1</count> <policy_evaluated> <disposition>none</disposition> <dkim>pass</dkim> <spf>fail</spf> </policy_evaluated> </row> <identifiers> <header_from>ibitinga.sp.gov.br</header_from> </identifiers> <auth_results> <dkim> <domain>ibitinga.sp.gov.br</domain> <result>pass</result> <selector>*</selector> </dkim> <dkim> <domain>ibitinga.sp.gov.br</domain> <result>fail</result> <selector>*</selector> </dkim> <spf> <domain>ibitinga.sp.gov.br</domain> <result>fail</result> </spf> </auth_results> </record> show less	Email Spam
🇦🇷 181.105.9.166	10 May 2022	May 10 16:35:38 internet-server kernel: [5450839.741337] blacklist check: SRC=181.105.9.166 DST=164. ... show more May 10 16:35:38 internet-server kernel: [5450839.741337] blacklist check: SRC=181.105.9.166 DST=164.163.52.87 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=15687 PROTO=TCP SPT=59614 DPT=81 WINDOW=1300 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 164.163.23.78	10 May 2022	May 10 06:24:45 internet-server kernel: [5414185.827628] invalid mss (drop): SRC=164.163.49.230 DST= ... show more May 10 06:24:45 internet-server kernel: [5414185.827628] invalid mss (drop): SRC=164.163.49.230 DST=164.163.52.78 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=46518 DF PROTO=TCP SPT=50093 DPT=8291 WINDOW=14600 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 177.93.108.138	10 May 2022	May 10 14:53:56 email-server postfix/smtpd[180107]: NOQUEUE: reject: RCPT from katana-mta.lsbra.com. ... show more May 10 14:53:56 email-server postfix/smtpd[180107]: NOQUEUE: reject: RCPT from katana-mta.lsbra.com.br[177.93.108.138]: 554 5.7.1 Service unavailable; Client host [177.93.108.138] blocked using b.barracudacentral.org; http://www.barracudanetworks.com/reputation/?pr=1&ip=177.93.108.138; from=<[email protected]> to=<com*@ibi*.sp.gov.br> proto=ESMTP helo=<katana-mta.lsbra.com.br> show less	Email Spam
🇷🇺 45.156.26.120	10 May 2022	May 10 15:03:11 email-server postfix/smtpd[180316]: NOQUEUE: reject: RCPT from marketing7.promocoesm ... show more May 10 15:03:11 email-server postfix/smtpd[180316]: NOQUEUE: reject: RCPT from marketing7.promocoesmkt.com[45.156.26.120]: 554 5.7.1 Service unavailable; Client host [45.156.26.120] blocked using truncate.gbudb.net; http://www.gbudb.com/truncate/ [45.156.26.120]; from=<[email protected]> to=<sam*@ibi*.sp.gov.br> proto=ESMTP helo=<marketing7.promocoesmkt.com> show less	Email Spam Exploited Host
🇧🇷 45.225.251.30	10 May 2022	May 10 15:08:19 internet-server kernel: [5445600.621387] blacklist check: SRC=45.225.251.30 DST=* ... show more May 10 15:08:19 internet-server kernel: [5445600.621387] blacklist check: SRC=45.225.251.30 DST=* LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=25814 DF PROTO=TCP SPT=1497 DPT=8291 WINDOW=14600 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 164.163.180.2	10 May 2022	May 10 15:02:20 internet-server kernel: [5445241.127998] blacklist check: SRC=164.163.180.2 DST=164. ... show more May 10 15:02:20 internet-server kernel: [5445241.127998] blacklist check: SRC=164.163.180.2 DST=164.163.52.80 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=13368 DF PROTO=TCP SPT=53013 DPT=139 WINDOW=8192 RES=0x00 SYN URGP=0 show less	Port Scan
🇷🇺 45.156.26.240	10 May 2022	May 10 13:11:45 email-server postfix/smtpd[178220]: NOQUEUE: reject: RCPT from marketing6.promocoesm ... show more May 10 13:11:45 email-server postfix/smtpd[178220]: NOQUEUE: reject: RCPT from marketing6.promocoesmkt.com[45.156.26.240]: 554 5.7.1 Service unavailable; Client host [45.156.26.240] blocked using truncate.gbudb.net; http://www.gbudb.com/truncate/ [45.156.26.240]; from=<[email protected]> to=<tur*@ibi*.sp.gov.br> proto=ESMTP helo=<marketing6.promocoesmkt.com> show less	Email Spam Exploited Host
🇧🇷 164.163.180.2	10 May 2022	May 10 11:13:08 internet-server kernel: [5431489.187253] blacklist check: SRC=164.163.180.2 DST=164. ... show more May 10 11:13:08 internet-server kernel: [5431489.187253] blacklist check: SRC=164.163.180.2 DST=164.163.52.89 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=17612 DF PROTO=TCP SPT=58075 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 show less	Port Scan
🇰🇷 163.171.135.70	10 May 2022	May 10 08:18:58 internet-server kernel: [5421039.515774] blacklist check: SRC=163.171.135.70 DST=* ... show more May 10 08:18:58 internet-server kernel: [5421039.515774] blacklist check: SRC=163.171.135.70 DST=* LEN=52 TOS=0x00 PREC=0x00 TTL=4 ID=54073 DF PROTO=UDP SPT=35728 DPT=33434 LEN=32 show less	Port Scan
🇭🇰 157.185.178.156	10 May 2022	May 10 08:13:27 internet-server kernel: [5420708.462241] blacklist check: SRC=157.185.178.156 DST= ... show more May 10 08:13:27 internet-server kernel: [5420708.462241] blacklist check: SRC=157.185.178.156 DST=* LEN=52 TOS=0x00 PREC=0x00 TTL=11 ID=0 DF PROTO=UDP SPT=62645 DPT=33434 LEN=32 show less	Port Scan
🇺🇸 188.241.177.201	09 May 2022	May 9 17:26:26 email-server postfix/smtpd[167932]: warning: AUTH command rate limit exceeded: 7 fro ... show more May 9 17:26:26 email-server postfix/smtpd[167932]: warning: AUTH command rate limit exceeded: 7 from unknown[188.241.177.201] for service smtp show less	Email Spam Brute-Force
🇧🇷 164.163.180.2	09 May 2022	May 9 17:06:01 internet-server kernel: [5366262.701150] blacklist check: IN=* OUT=* MAC=* SRC ... show more May 9 17:06:01 internet-server kernel: [5366262.701150] blacklist check: IN=* OUT=* MAC=* SRC=164.163.180.2 DST=*** LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=49810 DF PROTO=TCP SPT=25836 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 show less	Port Scan