JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

113.80.104.212

Recent Activity

Abuse Confidence Score

100% Critical

35 reports

32 reporters · latest 1 hour ago

ISP: CHINANET Guangdong province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Pingshan, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

35 from 32 distinct reporters

First reported

November 5th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇮🇩 Indonesia 4 🇺🇸 United States of America 3

Most common categories Brute-Force 34 Email Spam 6 Exploited Host 1 SSH 1 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-11-07 00:54:18 UTC · (1 hour ago)	SMTP AUTH attack	Brute-Force
🇹🇭 thaizone.com	2026-11-06 23:30:06 UTC · (2 hours ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇦🇺 FSB.ru - Is it?	2026-11-06 23:26:27 UTC · (2 hours ago)	Attempted login to non-existant accounts	Brute-Force
🇬🇧 Joe-Mark	2026-11-06 22:13:13 UTC · (3 hours ago)	Found duggytuxy Blocklist . proto=tcp . spt=46698 . dpt=25 . NFTABLES . (MCCXL)	Email Spam
🇮🇩 adi s	2026-11-06 17:50:01 UTC · (8 hours ago)	2026-11-07T00:50:00.121327+07:00 nice.iptelemedia.id postfix/submission/smtpd[990189]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=noc ...	Brute-Force Email Spam
Anonymous	2026-11-06 12:24:15 UTC · (13 hours ago)	Distributed SMTP AUTH password spraying against mail submission (587): repeated failed logins on valid mailboxes	Brute-Force
🇹🇷 Jova	2026-11-06 10:44:07 UTC · (15 hours ago)	Repeated failed SMTP logins to a mail account (credential guessing).	Brute-Force
🇮🇳 TFG-Server	2026-11-06 09:30:25 UTC · (16 hours ago)	Automated block: Email password guessing x4 in 24 h (mail ports only)	Brute-Force
🇮🇩 xveil	2026-11-06 08:19:21 UTC · (17 hours ago)	2026-11-06T15:19:19.346255 mail-honeypot postfix/submission/smtpd[20468]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: authentication failure ...	Brute-Force
🇪🇸 librebit	2026-11-06 08:06:18 UTC · (17 hours ago)	Attack to Postfix SASL, bad guys	Brute-Force
🇩🇪 dn-systems.net	2026-11-06 07:50:54 UTC · (18 hours ago)	2026-11-06 08:53:28.197 [540022] login authenticator failed for H=(ticons.static.gvt.net.br) [113.80.104.212]:40820 I=[193.108.181.150]:25 Ci=540022: 535 Incorrect authentication data ([email protected]) 2026-11-06 08:53:28.197 [540022] ... show more 2026-11-06 08:53:28.197 [540022] login authenticator failed for H=(ticons.static.gvt.net.br) [113.80.104.212]:40820 I=[193.108.181.150]:25 Ci=540022: 535 Incorrect authentication data ([email protected]) 2026-11-06 08:53:28.197 [540022] no MAIL in SMTP connection from (ticons.static.gvt.net.br) [113.80.104.212]:40820 I=[193.108.181.150]:25 Ci=540022 D=5s C=EHLO,AUTH ... show less	Brute-Force
🇪🇸 el-brujo	2026-11-06 07:43:00 UTC · (18 hours ago)	2026-11-05T21:19:52.317417 ns2.elhacker.net postfix/smtpd[1382150]: warning: unknown[113.80.104.212]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-11-06T08:43:00.272550 ns2.elhacker.net postfix/smtpd ... show more 2026-11-05T21:19:52.317417 ns2.elhacker.net postfix/smtpd[1382150]: warning: unknown[113.80.104.212]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-11-06T08:43:00.272550 ns2.elhacker.net postfix/smtpd[1710683]: warning: unknown[113.80.104.212]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Hacking Brute-Force
🇩🇪 yitzhaq	2026-11-06 07:16:15 UTC · (18 hours ago)	Nov 5 21:17:37 [host] vpopmail[1314548]: vchkpw-smtps: vpopmail user not found [email]:113.80.104.212 Nov 6 06:43:11 [host] vpopmail[1719607]: vchkpw-smtps: vpopmail user not found [email]:113.80.104.212 Nov 6 08:16:13 [host] vpopmail[1761433]: vc ... show more Nov 5 21:17:37 [host] vpopmail[1314548]: vchkpw-smtps: vpopmail user not found [email]:113.80.104.212 Nov 6 06:43:11 [host] vpopmail[1719607]: vchkpw-smtps: vpopmail user not found [email]:113.80.104.212 Nov 6 08:16:13 [host] vpopmail[1761433]: vchkpw-smtps: vpopmail user not found [email]:113.80.104.212 Nov 5 21:17:40 [host] dovecot: submission-login: Remote closed connection (auth failed, 1 attempts in 5 secs): user=<redacted>, method=PLAIN, rip=113.80.104.212, lip=[myip], TLS, TLSv1.2 with cipher ECDHE-ECDSA-AES128-GCM-SHA256 (128/128 bits) Nov 6 03:08:00 [host] vpopmail[1624239]: vchkpw-smtps: password fail [email]:113.80.104.212 Nov 6 03:08:03 [host] dovecot: submission-login: Remote closed connection (auth failed, 1 attempts in 4 secs): user=<redacted>, method=PLAIN, rip=113.80.104.212, lip=[myip], TLS, TLSv1.2 with cipher ECDHE-ECDSA-AES128-GCM-SHA256 (128/128 bits) Nov 6 06:43:14 [host] dovecot: submission-login: Remote closed connection (auth failed, 1 attempts in 5 sec show less	Brute-Force
🇩🇪 MarkGGN	2026-11-06 06:31:05 UTC · (19 hours ago)	SMTP Bruteforce. 2026-11-06T07:31:02.844473+01:00 [HOST] postfix/smtpd[1226938]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=cologne@[HOST] 2026-11-06T07:31:04.245656+01:00 [HOST] postfix/ ... show more SMTP Bruteforce. 2026-11-06T07:31:02.844473+01:00 [HOST] postfix/smtpd[1226938]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=cologne@[HOST] 2026-11-06T07:31:04.245656+01:00 [HOST] postfix/smtpd[1226938]: disconnect from unknown[113.80.104.212] ehlo=2 starttls=1 auth=0/1 commands=3/4 show less	Brute-Force
🇺🇦 MakselPr	2026-11-06 05:55:40 UTC · (20 hours ago)	Nov 6 00:54:10 mail postfix/smtps/smtpd[30619]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=inf Nov 6 07:55:40 mail postfix/smtps/smtpd[53096]: warning: unknown[113.80.104.212]: SASL LOGIN ... show more Nov 6 00:54:10 mail postfix/smtps/smtpd[30619]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=inf Nov 6 07:55:40 mail postfix/smtps/smtpd[53096]: warning: unknown[113.80.104.212]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.203

🇺🇸 156.243.196.198

🇺🇸 156.243.37.162

🇰🇷 14.36.5.203

🇧🇷 187.0.233.184

🇺🇸 156.233.41.164

🇺🇸 154.94.36.23

🇺🇸 154.85.13.99

🇮🇩 125.163.181.224

🇹🇭 119.59.103.146

🇳🇱 77.239.124.41

🇺🇸 45.3.49.96

🇸🇬 43.172.198.184

🇵🇦 190.140.22.121

🇬🇧 185.213.247.103

🇺🇸 154.198.18.79

🇺🇸 154.198.14.83

🇨🇳 117.62.22.127

🇩🇪 93.152.224.190

🇳🇱 45.148.10.233