AbuseIPDB » 114.104.134.97

114.104.134.97 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 30%: ?

30%

ISP	ChinaNet Anhui Province Network
Usage Type	Data Center/Web Hosting/Transit
Domain Name	chinatelecom.com.cn
Country	China
City	Huangshan, Anhui

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 114.104.134.97

Whois 114.104.134.97

IP Abuse Reports for 114.104.134.97:

This IP address has been reported a total of 37 times from 23 distinct sources. 114.104.134.97 was first reported on April 25th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Alexandr	2024-09-04 22:55:27 (6 days ago)	Sep 05 01:55:04 auth: Info: passwd-file([email protected],114.104.134.97,<lo2aEFMhQNVyaIZh>): un ... show moreSep 05 01:55:04 auth: Info: passwd-file([email protected],114.104.134.97,<lo2aEFMhQNVyaIZh>): unknown user Sep 05 01:55:06 imap-login: Info: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=92.60.190.77, session=<lo2aEFMhQNVyaIZh> Sep 05 01:55:13 imap-login: Info: Aborted login (auth failed, 1 attempts in 6 secs): user=<hostmaster>, method=PLAIN, rip=114.104.134.97, lip=92.60.190.77, session=<dE3AEFMhINpyaIZh> Sep 05 01:55:23 auth: Info: passwd-file([email protected],114.104.134.97,<bFA7EVMhnONyaIZh>): unknown user Sep 05 01:55:25 imap-login: Info: Aborted login (auth failed, 1 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=92.60.190.77, session=<bFA7EVMhnONyaIZh> ... show less	Brute-Force
AustrianSimon	2024-08-28 01:19:27 (2 weeks ago)	28 Aug 2024 01:19:27UTC:spam e-mail originating from IP address 114.104.134.97 failing dmarc criteri ... show more28 Aug 2024 01:19:27UTC:spam e-mail originating from IP address 114.104.134.97 failing dmarc criteria of sending domain <[email protected]> (e.g. unauthorized by sending domain) show less	Email Spam
thardie	2024-08-23 16:53:06 (2 weeks ago)	2024-08-23T09:52:48.282902-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts i ... show more2024-08-23T09:52:48.282902-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=50.225.225.206, session=<dpLHmlwg4exyaIZh> 2024-08-23T09:52:55.204687-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=50.225.225.206, session=<Q9nzmlwgEvFyaIZh> 2024-08-23T09:53:01.579126-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=50.225.225.206, session=<QZ9cm1wgrfZyaIZh> 2024-08-23T09:53:04.251942-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=50.225.225.206, session=<DT27m1wgAPtyaIZh> 2024-08-23T09:53:06.586441-07:00 orcas dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<ingrid@ ... show less	Spoofing Brute-Force
Anonymous	2024-08-22 01:49:26 (2 weeks ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Aetherweb Ark	2024-07-31 08:37:50 (1 month ago)	114.104.134.97 (CN/China/-), N distributed imapd attacks on account in the last X secs	Hacking
OcampoFer	2024-07-28 03:03:22 (1 month ago)	SPAM - IP blocked by DNSBL due to two or more matches and recidivism more than twice in 24 hours.	Email Spam
OcampoFer	2024-07-27 23:08:48 (1 month ago)	SPAM - IP blocked by DNSBL for a period of 12 hours.	Email Spam
chris_yooo	2024-07-18 20:37:38 (1 month ago)	Jul 18 22:37:30 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, ... show moreJul 18 22:37:30 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=114.104.134.97, lip=144.76.2.152, session=<cxIfjIsdww5yaIZh> Jul 18 22:37:38 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 7 secs): user=<peter>, method=PLAIN, rip=114.104.134.97, lip=144.76.2.152, session=<Dj5FjIsd8g5yaIZh> ... show less	Spoofing Brute-Force
syokadmin	2024-07-10 02:38:16 (2 months ago)	114.104.134.97 (CN/China/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
backslash	2024-04-22 06:44:09 (4 months ago)	honeypot	Bad Web Bot
samba.org	2023-07-16 08:39:50 (1 year ago)	spam (f2b h2)	Brute-Force
noise.agency	2023-07-07 16:27:26 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 114.104.134.97 (CN/China/-)	Brute-Force
samba.org	2023-06-28 03:37:00 (1 year ago)	spam (f2b h2)	Brute-Force
samba.org	2023-06-24 19:23:56 (1 year ago)	spam (f2b h2)	Brute-Force
samba.org	2023-06-22 04:30:43 (1 year ago)	spam (f2b h2)	Brute-Force