JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.89.120.140

101.89.120.140 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 78%: ?

78%

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.89.120.140

Whois 101.89.120.140

IP Abuse Reports for 101.89.120.140:

This IP address has been reported a total of 16 times from 12 distinct sources. 101.89.120.140 was first reported on July 13th 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-14 15:12:02 (45 minutes ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇹 CoreTech srl	2026-07-14 15:07:33 (50 minutes ago)	"SMTP Login failed": count(IP)=16.0is-60632bc2 17:03:20.230 [101.89.120.140] SMTP Login failed: Doma ... show more "SMTP Login failed": count(IP)=16.0is-60632bc2 17:03:20.230 [101.89.120.140] SMTP Login failed: Domain [biniviaggi.it] not foundis-60632bc2 17:03:20.230 [101.89.120.140] SMTP Login failed: That domain was not found. Double check your email address.is-60632bc2 17:03:27.470 [114.214.164.242] SMTP Login failed: Invalid username ([email protected]) and password combination.is-60632bc2 17:03:27.470 [114.214.164.242] SMTP Login failed: User [azzurra.t] not foundSmartermail 17:03:57.722 [202.62.95.243] SMTP Login failed: Domain [fermanafc.com] not foundSmartermail 17:03:59.436 [5.61.220.196] SMTP Login failed: Domain [paciotti.com] not foundSmartermail 17:03:57.722 [202.62.95.243] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 17:03:59.436 [5.61.220.196] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 17:04:00.536 [78.213.102.116] SMTP Login failed: Domain [gierrehome.com] not found show less	Brute-Force
🇮🇹 CoreTech srl	2026-07-14 13:52:33 (2 hours ago)	"SMTP Login failed": count(IP)=36.0mail3-dc1 15:47:42.605 [185.149.191.92] SMTP Login failed: Incorr ... show more "SMTP Login failed": count(IP)=36.0mail3-dc1 15:47:42.605 [185.149.191.92] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 15:48:50.784 [186.189.233.163] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 15:48:50.784 [186.189.233.163] SMTP Login failed: Domain [omecdepurazione.com] not foundSmartermail 15:48:56.613 [61.80.165.187] SMTP Login failed: Domain [] not foundSmartermail 15:48:56.613 [61.80.165.187] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 15:50:08.747 [95.54.1.88] SMTP Login failed: Domain [valentina96.it] not foundSmartermail 15:50:08.747 [95.54.1.88] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 15:50:30.269 [101.89.120.140] SMTP Login failed: Domain [] not foundSmartermail 15:50:30.269 [101.89.120.140] SMTP Login failed: That domain was not found. Double check your email address. show less	Brute-Force
🇩🇪 Paul Smith	2026-07-14 11:48:08 (4 hours ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇷🇺 DZBOT	2026-07-14 09:40:42 (6 hours ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force
🇩🇪 www.fransveldman.world	2026-07-14 07:41:52 (8 hours ago)	Jul 14 07:41:51 mail postfix/submission/smtpd[1220165]: warning: unknown[101.89.120.140]: SASL LOGIN ... show more Jul 14 07:41:51 mail postfix/submission/smtpd[1220165]: warning: unknown[101.89.120.140]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 07:41:51 mail postfix/submission/smtpd[1220165]: lost connection after AUTH from unknown[101.89.120.140] ... show less	Brute-Force Email Spam
🇩🇪 DocNetzwerk	2026-07-14 07:39:46 (8 hours ago)	(smtpauth) Failed SMTP AUTH login from 101.89.120.140 (CN/China/-)	Brute-Force
🇮🇹 CoreTech srl	2026-07-13 21:22:33 (18 hours ago)	"SMTP Login failed": count(IP)=31.0mail3-dc1 23:18:30.885 [93.38.138.89] SMTP Login failed: Domain [ ... show more "SMTP Login failed": count(IP)=31.0mail3-dc1 23:18:30.885 [93.38.138.89] SMTP Login failed: Domain [pampavia.it] not foundmail3-dc1 23:18:30.885 [93.38.138.89] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 23:19:03.026 [101.89.120.140] SMTP Login failed: Invalid username ([email protected]) and password combination.is-6411d9d7 23:19:03.026 [101.89.120.140] SMTP Login failed: User [nub_lol_01] not foundis-60632bc2 23:19:05.030 [59.8.45.104] SMTP Login failed: Domain [biniviaggi.it] not foundis-60632bc2 23:19:05.030 [59.8.45.104] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 23:19:07.440 [95.70.116.228] SMTP Login failed: Domain [] not foundis-6411d9d7 23:19:07.440 [95.70.116.228] SMTP Login failed: That domain was not found. Double check your email address.is-60632bc2 23:19:17.799 [77.34.157.29] SMTP Login failed: Invalid username ([email protected]) and password combination. show less	Brute-Force
🇭🇺 Lacika555	2026-07-13 19:41:03 (20 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇨🇦 Julio Covolato	2026-07-13 15:40:02 (1 day ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 FeG Deutschland	2026-07-13 15:02:02 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 Paul Smith	2026-07-13 11:44:19 (1 day ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇮🇹 VHosting	2026-07-13 11:38:37 (1 day ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-07-13 11:20:56 (1 day ago)	IMAP password guessing	Brute-Force
Anonymous	2026-07-13 11:18:34 (1 day ago)	SMTP brute force - auth failed	Brute-Force Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.79

🇬🇧 195.96.139.90

🇬🇧 188.240.59.40

🇺🇸 172.203.234.251

🇫🇷 141.94.246.155

🇨🇳 183.223.46.28

🇺🇸 146.190.112.200

🇭🇰 118.193.39.146

🇮🇩 103.99.214.211

🇫🇮 62.220.236.203

🇮🇳 49.207.244.59

🇧🇪 35.233.103.87

🇬🇧 35.203.211.253

🇬🇧 35.203.211.230

🇬🇧 5.252.83.138

🇬🇧 2a06:4880:c000::

🇩🇪 69.5.169.216

🇺🇸 20.38.33.240

🇨🇦 16.54.250.20

🇮🇳 182.66.193.212