JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.121.20.187

113.121.20.187 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.121.20.187

Whois 113.121.20.187

IP Abuse Reports for 113.121.20.187:

This IP address has been reported a total of 49 times from 15 distinct sources. 113.121.20.187 was first reported on October 2nd 2021, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 IrisFlower	2023-05-08 21:48:18 (3 years ago)	Unauthorized connection attempt detected from IP address 113.121.20.187 to port 443 [J]	Port Scan Hacking
🇵🇱 fripers.pl	2022-03-28 08:24:31 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇵🇱 fripers.pl	2022-03-08 05:50:33 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇵🇱 fripers.pl	2022-01-12 03:42:08 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇵🇱 fripers.pl	2021-12-16 02:55:43 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇵🇱 fripers.pl	2021-12-14 03:18:34 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇵🇱 fripers.pl	2021-12-10 02:42:05 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇩🇪 samba.org	2021-11-27 02:38:55 (4 years ago)	spam (f2b h1)	Brute-Force
🇬🇧 Bytemark	2021-11-24 22:40:59 (4 years ago)	Nov 25 03:40:35 dlcentre3 postfix/smtpd[413]: warning: unknown[113.121.20.187]: SASL LOGIN authentic ... show more Nov 25 03:40:35 dlcentre3 postfix/smtpd[413]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 25 03:40:35 dlcentre3 postfix/smtpd[22046]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 25 03:40:45 dlcentre3 postfix/smtpd[22046]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 25 03:40:45 dlcentre3 postfix/smtpd[413]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 25 03:40:58 dlcentre3 postfix/smtpd[22046]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Email Spam Spoofing Brute-Force Exploited Host
🇵🇱 fripers.pl	2021-11-22 04:22:11 (4 years ago)	2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I= ... show more 2021-10-02 13:53:43 SMTP protocol error in "AUTH LOGIN" H=\(8lPworthh3\) \[113.121.20.187\]:51282 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:47 SMTP protocol error in "AUTH LOGIN" H=\(HlDHKh7Bk\) \[113.121.20.187\]:51368 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:53:53 SMTP protocol error in "AUTH LOGIN" H=\(Wi85UTxgIi\) \[113.121.20.187\]:51531 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:10 SMTP protocol error in "AUTH LOGIN" H=\(33av2bGT\) \[113.121.20.187\]:51855 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:24 SMTP protocol error in "AUTH LOGIN" H=\(oydukcw\) \[113.121.20.187\]:52234 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:33 SMTP protocol error in "AUTH LOGIN" H=\(Wljc37Dg4R\) \[113.121.20.187\]:52578 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2021-10-02 13:54:43 SMTP protocol error ... show less	Brute-Force
🇸🇮 basing	2021-11-14 08:46:45 (4 years ago)	2021-11-14 09:46:45 bs SASL PLAIN auth failed: rhost=113.121.20.187...	Brute-Force
Anonymous	2021-11-14 02:49:41 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 113.121.20.187 (CN/China/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 113.121.20.187 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2021-11-14 02:47:56 dovecot_login authenticator failed for (YajuXt) [113.121.20.187]:59994: 535 Incorrect authentication data (set_id=luoxia) 2021-11-14 02:48:21 dovecot_login authenticator failed for (xfqIF7) [113.121.20.187]:51779: 535 Incorrect authentication data (set_id=luoxia) 2021-11-14 02:48:46 dovecot_login authenticator failed for (kwBWaqvMQ) [113.121.20.187]:58622: 535 Incorrect authentication data (set_id=luoxia) 2021-11-14 02:49:11 dovecot_login authenticator failed for (IN9HtnnR) [113.121.20.187]:49469: 535 Incorrect authentication data (set_id=luoxia) 2021-11-14 02:49:36 dovecot_login authenticator failed for (irZMkC6md) [113.121.20.187]:56534: 535 Incorrect authentication data (set_id=luoxia) show less	Brute-Force
🇩🇪 SpaceHost-Server	2021-11-14 02:29:22 (4 years ago)	Nov 14 08:28:56 andromeda postfix/smtpd[15365]: warning: unknown[113.121.20.187]: SASL LOGIN authent ... show more Nov 14 08:28:56 andromeda postfix/smtpd[15365]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: authentication failure Nov 14 08:29:01 andromeda postfix/smtpd[1687]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: authentication failure Nov 14 08:29:09 andromeda postfix/smtpd[55953]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: authentication failure Nov 14 08:29:15 andromeda postfix/smtpd[15365]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: authentication failure Nov 14 08:29:20 andromeda postfix/smtpd[1687]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: authentication failure show less	Hacking Brute-Force
🇬🇧 Bytemark	2021-11-13 09:26:28 (4 years ago)	Nov 13 14:25:13 dlcentre3 postfix/smtpd[1703]: warning: unknown[113.121.20.187]: SASL LOGIN authenti ... show more Nov 13 14:25:13 dlcentre3 postfix/smtpd[1703]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 14:25:22 dlcentre3 postfix/smtpd[1120]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 14:25:36 dlcentre3 postfix/smtpd[1703]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 14:26:10 dlcentre3 postfix/smtpd[1703]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 13 14:26:28 dlcentre3 postfix/smtpd[1120]: warning: unknown[113.121.20.187]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Email Spam Spoofing Brute-Force Exploited Host
Anonymous	2021-11-13 09:25:34 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 113.121.20.187 (CN/China/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 113.121.20.187 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2021-11-13 09:23:40 dovecot_login authenticator failed for (Q4b2hlAZIR) [113.121.20.187]:60494: 535 Incorrect authentication data ([email protected]) 2021-11-13 09:24:09 dovecot_login authenticator failed for (YX5sMQ) [113.121.20.187]:49971: 535 Incorrect authentication data ([email protected]) 2021-11-13 09:24:37 dovecot_login authenticator failed for (uFOCEOK8nE) [113.121.20.187]:56267: 535 Incorrect authentication data ([email protected]) 2021-11-13 09:25:02 dovecot_login authenticator failed for (bQc1ot8B) [113.121.20.187]:62531: 535 Incorrect authentication data ([email protected]) 2021-11-13 09:25:29 dovecot_login authenticator failed for (J3OVwyYBqt) [113.121.20.187]:51978: 535 Incorrect authentication data ([email protected]) show less	Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.45.50.44

🇺🇸 156.232.10.218

🇺🇸 104.152.52.234

🇺🇸 65.49.1.94

🇺🇸 64.62.197.156

🇮🇩 34.50.93.154

🇺🇸 9.234.19.10

🇦🇲 176.32.193.16

🇺🇸 157.245.85.91

🇸🇬 157.245.61.54

🇫🇮 147.185.133.219

🇨🇳 124.221.153.220

🇹🇼 114.33.196.152

🇨🇳 111.170.244.192

🇭🇰 104.208.108.166

🇵🇱 104.165.20.89

🇧🇬 79.124.58.90

🇸🇬 47.84.101.80

🇺🇸 40.124.186.93

🇬🇧 35.203.211.148