JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.104.135.181

114.104.135.181

Neutral Activity

36 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

CHINANET Anhui PROVINCE NETWORK

Usage Type

Fixed Line ISP

ASN

AS4134

Domain Name

chinatelecom.cn

Country

🇨🇳 China

City

Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

114.104.135.181 has been reported 36 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 114.104.135.181:

This IP address has been reported a total of 36 times from 15 distinct sources. 114.104.135.181 was first reported on April 27th 2022, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mattk	2025-03-10 11:11:54 (1 year ago)	Mar 10 11:11:54 postfix/smtpd[2641232]: disconnect from unknown[114.104.135.181] ehlo=1 auth=0/1 com ... show more Mar 10 11:11:54 postfix/smtpd[2641232]: disconnect from unknown[114.104.135.181] ehlo=1 auth=0/1 commands=1/2 show less	Email Spam Brute-Force
🇯🇵 Masataka Murasawa	2025-02-05 08:56:00 (1 year ago)	This appears to be the originating IP of a phishing email that is tricking Amazon.	Phishing Web Spam Email Spam Hacking
🇺🇸 shaunc	2024-08-23 21:52:38 (2 years ago)	Aug 23 16:52:36 mailman postfix/smtpd[7453]: NOQUEUE: reject: RCPT from unknown[114.104.135.181]: 55 ... show more Aug 23 16:52:36 mailman postfix/smtpd[7453]: NOQUEUE: reject: RCPT from unknown[114.104.135.181]: 554 5.7.1 Service unavailable; Client host [114.104.135.181] blocked using dnsbl.dronebl.org; Open HTTP proxy; from=<order-update[at]aeon.co.jp> to=<[redacted][at][redacted]> proto=ESMTP helo=<aeon.co.jp> Aug 23 16:52:37 mailman postfix/smtpd[7453]: NOQUEUE: reject: RCPT from unknown[114.104.135.181]: 554 5.7.1 Service unavailable; Client host [114.104.135.181] blocked using dnsbl.dronebl.org; Open HTTP proxy; from=<order-update[at]aeon.co.jp> to=<[redacted][at][redacted]> proto=ESMTP helo=<aeon.co.jp> show less	Email Spam
🇩🇪 chris_yooo	2024-08-23 08:13:04 (2 years ago)	Aug 23 10:10:03 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, ... show more Aug 23 10:10:03 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=114.104.135.181, lip=144.76.2.152, session=<4zRFTVUgrwtyaIe1> Aug 23 10:13:04 plesk dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts in 180 secs): user=<cathy>, method=PLAIN, rip=114.104.135.181, lip=144.76.2.152, session=<N9x2TVUgJwxyaIe1> ... show less	Spoofing Brute-Force
Anonymous	2024-08-03 09:18:41 (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 lfpanels.com	2024-05-20 10:48:24 (2 years ago)	SASL broute force	Brute-Force
🇺🇸 TPI-Abuse	2024-05-07 10:51:01 (2 years ago)	(mod_security) mod_security (id:210831) triggered by 114.104.135.181 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 114.104.135.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 07 06:50:54.618455 2024] [security2:error] [pid 12325:tid 47136084461312] [client 114.104.135.181:44040] [client 114.104.135.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|aafm.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aafm.org"] [uri "/Book-07.html"] [unique_id "ZjoHjtt-AsHgbpUZ4lIQagAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 samba.org	2023-07-22 22:41:05 (3 years ago)	spam (f2b h2)	Brute-Force
🇩🇪 samba.org	2023-07-19 10:24:26 (3 years ago)	spam (f2b h2)	Brute-Force
🇩🇪 samba.org	2023-07-15 12:30:58 (3 years ago)	spam (f2b h2)	Brute-Force
🇺🇸 vestibtech	2023-07-14 18:03:56 (3 years ago)	Jul 14 12:03:53 Host-KLAX-C postfix/smtp/smtpd[1612990]: lost connection after AUTH from unknown[114 ... show more Jul 14 12:03:53 Host-KLAX-C postfix/smtp/smtpd[1612990]: lost connection after AUTH from unknown[114.104.135.181] Jul 14 12:03:54 Host-KLAX-C postfix/smtp/smtpd[1614221]: lost connection after AUTH from unknown[114.104.135.181] Jul 14 12:03:55 Host-KLAX-C postfix/smtp/smtpd[1613176]: lost connection after AUTH from unknown[114.104.135.181] Jul 14 12:03:55 Host-KLAX-C postfix/smtp/smtpd[1612798]: lost connection after AUTH from unknown[114.104.135.181] ... show less	DDoS Attack Port Scan
🇺🇸 MSchienle	2023-06-18 11:54:03 (3 years ago)	Jun 18 06:46:04 customvisuals postfix/smtpd[56135]: warning: unknown[114.104.135.181]: SASL LOGIN au ... show more Jun 18 06:46:04 customvisuals postfix/smtpd[56135]: warning: unknown[114.104.135.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Email Spam
🇩🇪 ipcop.net	2023-06-18 11:45:34 (3 years ago)	Jun 18 13:45:30 mail.srvfarm.net postfix/smtpd[657449]: lost connection after AUTH from unknown[114. ... show more Jun 18 13:45:30 mail.srvfarm.net postfix/smtpd[657449]: lost connection after AUTH from unknown[114.104.135.181] Jun 18 13:45:31 mail.srvfarm.net postfix/smtpd[659538]: lost connection after AUTH from unknown[114.104.135.181] Jun 18 13:45:31 mail.srvfarm.net postfix/smtpd[657515]: lost connection after AUTH from unknown[114.104.135.181] Jun 18 13:45:31 mail.srvfarm.net postfix/smtpd[652499]: lost connection after AUTH from unknown[114.104.135.181] Jun 18 13:45:32 mail.srvfarm.net postfix/smtpd[655396]: lost connection after AUTH from unknown[114.104.135.181] show less	Fraud VoIP Brute-Force
🇩🇪 samba.org	2023-06-17 23:09:19 (3 years ago)	spam (f2b h2)	Brute-Force
🇩🇪 samba.org	2023-06-14 21:14:32 (3 years ago)	spam (f2b h2)	Brute-Force

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 222.167.100.83

🇳🇱 195.178.110.231

🇺🇸 193.37.203.125

🇵🇾 181.103.2.38

🇧🇷 170.83.174.152

🇧🇷 45.71.89.23

🇧🇷 45.6.185.116

🇺🇸 35.236.220.59

🇯🇵 35.189.132.235

🇯🇵 34.84.141.239

🇺🇸 34.66.22.122

🇺🇸 34.60.114.189

🇺🇸 34.60.91.232

🇳🇱 193.176.31.211

🇩🇪 188.68.38.45

🇧🇷 186.237.166.215

🇮🇷 185.255.91.121

🇺🇸 178.92.237.246

🇳🇱 176.65.148.93

🇺🇸 155.94.194.165