AbuseIPDB » 112.194.91.102

112.194.91.102 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 4%: ?

ISP	China Unicom Sichuan province network
Usage Type	Fixed Line ISP
Domain Name	chinaunicom.cn
Country	China
City	Chengdu, Sichuan

Report 112.194.91.102

Whois 112.194.91.102

IP Abuse Reports for 112.194.91.102:

This IP address has been reported a total of 15 times from 7 distinct sources. 112.194.91.102 was first reported on August 15th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-30 13:33:17 (5 days ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-11-28 07:53:13 (1 week ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-10-18 08:13:50 (1 month ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Alexandr	2024-09-12 16:58:09 (2 months ago)	Sep 12 19:57:48 auth: Info: passwd-file([email protected],112.194.91.102,<hESmAe8hw+Vwwltm>): unknown ... show moreSep 12 19:57:48 auth: Info: passwd-file([email protected],112.194.91.102,<hESmAe8hw+Vwwltm>): unknown user Sep 12 19:57:50 imap-login: Info: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<hESmAe8hw+Vwwltm> Sep 12 19:57:57 imap-login: Info: Aborted login (auth failed, 1 attempts in 6 secs): user=<lulu>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<6gDLAe8hl+5wwltm> Sep 12 19:58:06 auth: Info: passwd-file([email protected],112.194.91.102,<Ff0zAu8hl/5wwltm>): unknown user Sep 12 19:58:08 imap-login: Info: Aborted login (auth failed, 1 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<Ff0zAu8hl/5wwltm> ... show less	Brute-Force
Anonymous	2024-09-09 02:37:31 (2 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
thardie	2024-09-09 02:34:33 (2 months ago)	2024-09-08T19:34:14.189463-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts i ... show more2024-09-08T19:34:14.189463-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=50.225.225.206, session=<6fWZl6YhB9hwwltm> 2024-09-08T19:34:20.459124-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=50.225.225.206, session=<wx/El6YhkOFwwltm> 2024-09-08T19:34:27.405897-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=50.225.225.206, session=<HoommKYhk+pwwltm> 2024-09-08T19:34:29.669666-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=50.225.225.206, session=<T8SNmKYhbPBwwltm> 2024-09-08T19:34:32.606979-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<ingrid@ ... show less	Spoofing Brute-Force
Alexandr	2024-08-31 09:59:41 (3 months ago)	Aug 31 12:59:21 auth: Info: passwd-file([email protected],112.194.91.102,<UfwLw/cgGdpwwltm>): un ... show moreAug 31 12:59:21 auth: Info: passwd-file([email protected],112.194.91.102,<UfwLw/cgGdpwwltm>): unknown user Aug 31 12:59:23 imap-login: Info: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<UfwLw/cgGdpwwltm> Aug 31 12:59:29 imap-login: Info: Aborted login (auth failed, 1 attempts in 6 secs): user=<hostmaster>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<PZgvw/cg4+Jwwltm> Aug 31 12:59:38 auth: Info: passwd-file([email protected],112.194.91.102,<ED+Qw/cgYe9wwltm>): unknown user Aug 31 12:59:40 imap-login: Info: Aborted login (auth failed, 1 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=112.194.91.102, lip=92.60.190.77, session=<ED+Qw/cgYe9wwltm> ... show less	Brute-Force
www.tana.it	2024-08-31 09:00:11 (3 months ago)	dictionary attack	Brute-Force
www.tana.it	2024-08-31 09:00:11 (3 months ago)	dictionary attack	Brute-Force
maximonline.co.za	2024-08-30 10:20:48 (3 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
Anonymous	2024-08-14 05:57:58 (3 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-08-05 06:04:33 (4 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-07-27 07:35:19 (4 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Smel	2024-04-18 20:34:08 (7 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
ThreatBook.io	2023-08-15 23:08:31 (1 year ago)	ThreatBook Intelligence: VPN,Dynamic IP more details on https://threatbook.io/ip/112.194.91.102<br / ... show moreThreatBook Intelligence: VPN,Dynamic IP more details on https://threatbook.io/ip/112.194.91.102 2023-08-15 12:27:09 /help/ssh/ 2023-08-15 12:27:32 /help/ssh/ show less	Web App Attack