AbuseIPDB » 1.180.97.138

1.180.97.138 was found in our database!

This IP was reported 3,964 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET NeiMengGu province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 1.180.97.138

Whois 1.180.97.138

IP Abuse Reports for 1.180.97.138:

This IP address has been reported a total of 3,964 times from 396 distinct sources. 1.180.97.138 was first reported on April 4th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Paul Smith	2025-03-25 05:06:26 (3 hours ago)	Email Auth Brute force attack 13/13 in last day	Brute-Force
dd3589	2025-03-25 03:57:02 (4 hours ago)	2025-03-25T04:56:27+01:00 <masked> exim[384445]: fixed_login authenticator failed for ([1.180.97.138 ... show more2025-03-25T04:56:27+01:00 <masked> exim[384445]: fixed_login authenticator failed for ([1.180.97.138]) [1.180.97.138]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
DAUGDE	2025-03-25 03:34:27 (4 hours ago)	2025-03-25T04:34:27.150966+01:00 v2202104133598150667 4110c8849e9a[2410812]: Mar 25 04:34:27 4110c88 ... show more2025-03-25T04:34:27.150966+01:00 v2202104133598150667 4110c8849e9a[2410812]: Mar 25 04:34:27 4110c8849e9a postfix/smtps/smtpd[54047]: warning: unknown[1.180.97.138]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=josef.froehle ... show less	Email Spam Spoofing Brute-Force
eebh.hu	2025-03-25 03:04:00 (5 hours ago)	Mar 25 04:04:00 mail postfix/smtps/smtpd[1828545]: warning: unknown[1.180.97.138]: SASL LOGIN authen ... show moreMar 25 04:04:00 mail postfix/smtps/smtpd[1828545]: warning: unknown[1.180.97.138]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
Anonymous	2025-03-25 01:43:10 (6 hours ago)	Ports: 25,2525,465,587,2525; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Vieira Filho	2025-03-25 01:31:04 (7 hours ago)	Mar 24 17:55:06 vieirafilho postfix/smtps/smtpd[10297]: warning: unknown[1.180.97.138]: SASL PLAIN a ... show moreMar 24 17:55:06 vieirafilho postfix/smtps/smtpd[10297]: warning: unknown[1.180.97.138]: SASL PLAIN authentication failed: authentication failure Mar 24 22:31:04 vieirafilho postfix/smtps/smtpd[17335]: warning: unknown[1.180.97.138]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force SSH
triplecode	2025-03-25 00:29:54 (8 hours ago)	Reported from hMailServer	Email Spam
ThreatBook.io	2025-03-25 00:10:59 (8 hours ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/1.180.97.138	Brute-Force
Voluna	2025-03-24 22:20:40 (10 hours ago)	2025-03-24T22:20:36.950819+00:00 MailServer-Slave sshd[70839]: pam_unix(sshd:auth): authentication f ... show more2025-03-24T22:20:36.950819+00:00 MailServer-Slave sshd[70839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.180.97.138 2025-03-24T22:20:39.204441+00:00 MailServer-Slave sshd[70839]: Failed password for invalid user ubnt from 1.180.97.138 port 48837 ssh2 ... show less	Brute-Force SSH
rtbh.com.tr	2025-03-24 20:48:37 (11 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
kreativstrecke	2025-03-24 19:15:07 (13 hours ago)	2025-03-24T20:15:05.324665+01:00 srv03 postfix/smtps/smtpd[3173371]: warning: unknown[1.180.97.138]: ... show more2025-03-24T20:15:05.324665+01:00 srv03 postfix/smtps/smtpd[3173371]: warning: unknown[1.180.97.138]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=r.boensch 2025-03-24T20:15:06.505258+01:00 srv03 postfix/smtps/smtpd[3173371]: lost connection after AUTH from unknown[1.180.97.138] 2025-03-24T20:15:06.505535+01:00 srv03 postfix/smtps/smtpd[3173371]: disconnect from unknown[1.180.97.138] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
www.tana.it	2025-03-24 19:11:52 (13 hours ago)	SMTP auth dictionary attack	Brute-Force
m2jest1c	2025-03-24 18:12:10 (14 hours ago)	2025-03-24T14:12:09.404855 rhel-20gb-ash-1 sshd[724779]: error: kex_exchange_identification: Connect ... show more2025-03-24T14:12:09.404855 rhel-20gb-ash-1 sshd[724779]: error: kex_exchange_identification: Connection closed by remote host 2025-03-24T14:12:09.404892 rhel-20gb-ash-1 sshd[724779]: Connection closed by 1.180.97.138 port 33128 ... show less	Brute-Force SSH
adlp.org	2025-03-24 17:29:06 (15 hours ago)	Mar 24 17:28:59 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;1.180.97.138;[UNAVAI ... show moreMar 24 17:28:59 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;1.180.97.138;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Mar 24 17:29:02 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;1.180.97.138;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Mar 24 17:29:05 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;1.180.97.138;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
szkiddaj	2025-03-24 16:50:05 (15 hours ago)	unauthorized ssh/telnet connection with user "user" and password "default" at 2025-03-24T16:50:05Z	Brute-Force SSH