JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.180.216.12

111.180.216.12 was found in our database!

This IP was reported 508 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET HUBEI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.180.216.12

Whois 111.180.216.12

IP Abuse Reports for 111.180.216.12:

This IP address has been reported a total of 508 times from 115 distinct sources. 111.180.216.12 was first reported on April 14th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-05-18 10:22:19 (2 weeks ago)	SMTP SASL brute-force attempt	Brute-Force Exploited Host
🇵🇱 bmino.pl	2026-05-18 10:17:33 (2 weeks ago)	Autoban IP(2): 111.180.216.12 - Hostname: Chinanet - City: Shizishan - Region: Hubei - Country: Chin ... show more Autoban IP(2): 111.180.216.12 - Hostname: Chinanet - City: Shizishan - Region: Hubei - Country: China - Location: 30.5454,114.342 - Organization: Chinanet HB - failed attempts. show less	Brute-Force
Anonymous	2026-05-18 06:56:28 (2 weeks ago)	2026-05-18T08:56:26.143852+02:00 host postfix/smtpd[970682]: warning: unknown[111.180.216.12]: SASL ... show more 2026-05-18T08:56:26.143852+02:00 host postfix/smtpd[970682]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: authentication failure, sasl_username=wordpress ... show less	Brute-Force
Anonymous	2026-05-18 03:29:32 (2 weeks ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇺🇸 bigwavedave	2026-05-18 02:01:03 (2 weeks ago)	SMTP	Brute-Force
🇩🇪 mnpx	2026-05-17 20:39:19 (2 weeks ago)	SMTP brute forcing (2× over 3h:42m); first seen here 2026-04-15T04:48Z	Brute-Force
Anonymous	2026-05-17 19:51:00 (2 weeks ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇩🇪 mnpx	2026-05-17 16:57:42 (2 weeks ago)	SMTP brute forcing (3× over 6h:45m); first seen here 2026-04-15T04:48Z	Brute-Force
Anonymous	2026-05-17 16:35:52 (2 weeks ago)	May 17 17:27:04 mx4 postfix/smtpd[1463159]: warning: unknown[111.180.216.12]: SASL LOGIN authenticat ... show more May 17 17:27:04 mx4 postfix/smtpd[1463159]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 17 18:35:51 mx4 postfix/smtpd[1471072]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇵🇭 marklozada88	2026-05-17 15:53:52 (2 weeks ago)	SASL LOGIN authentication failed:	Brute-Force
Anonymous	2026-05-17 15:18:34 (2 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 mnpx	2026-05-17 14:15:06 (2 weeks ago)	SMTP brute forcing (2× over 4h:02m); first seen here 2026-04-15T04:48Z	Brute-Force
🇦🇺 brocococonut	2026-05-17 14:01:17 (2 weeks ago)	2026-05-17 14:30:26 dovecot_login authenticator failed for ([178.178.222.53]) [111.180.216.12]: 535 ... show more 2026-05-17 14:30:26 dovecot_login authenticator failed for ([178.178.222.53]) [111.180.216.12]: 535 Incorrect authentication data ([email protected]) 2026-05-17 14:30:26 dovecot_login authenticator failed for ([178.178.222.53]) [111.180.216.12]: 535 Incorrect authentication data ([email protected]) 2026-05-17 15:45:26 dovecot_login authenticator failed for (hn.kd.ny.adsl) [111.180.216.12]: 535 Incorrect authentication data ([email protected]) 2026-05-17 15:45:26 dovecot_login authenticator failed for (hn.kd.ny.adsl) [111.180.216.12]: 535 Incorrect authentication data ([email protected]) 2026-05-17 14:30:26 dovecot_login authenticator failed for ([178.178.222.53]) [111.180.216.12]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇩🇪 kreativstrecke	2026-05-17 10:08:38 (2 weeks ago)	2026-05-17T11:08:36.095666+01:00 srv03 postfix/submission/smtpd[4135805]: warning: unknown[111.180.2 ... show more 2026-05-17T11:08:36.095666+01:00 srv03 postfix/submission/smtpd[4135805]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-17T11:08:37.995330+01:00 srv03 postfix/submission/smtpd[4135805]: lost connection after AUTH from unknown[111.180.216.12] 2026-05-17T11:08:37.995467+01:00 srv03 postfix/submission/smtpd[4135805]: disconnect from unknown[111.180.216.12] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇺🇦 MakselPr	2026-05-17 08:21:20 (2 weeks ago)	May 17 04:59:41 mail postfix/smtps/smtpd[1573010]: warning: unknown[111.180.216.12]: SASL LOGIN auth ... show more May 17 04:59:41 mail postfix/smtps/smtpd[1573010]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 17 11:21:19 mail postfix/smtps/smtpd[1589624]: warning: unknown[111.180.216.12]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force

Showing 151 to 165 of 508 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 165.154.105.128

🇺🇸 147.185.132.107

🇨🇳 120.193.9.167

🇮🇩 36.95.232.73

🇧🇷 200.155.66.2

🇧🇴 200.105.172.184

🇲🇾 175.138.190.133

🇭🇰 172.253.237.27

🇧🇷 168.181.113.164

🇺🇸 146.88.241.174

🇭🇰 123.58.212.28

🇳🇱 85.11.167.7

🇺🇸 66.132.195.76

🇺🇸 66.132.195.35

🇧🇪 35.241.200.253

🇺🇸 34.229.185.214

🇹🇼 34.81.129.60

🇺🇸 2001:470:1:fb5::2ac

🇧🇷 167.250.40.55

🇨🇦 137.184.167.134