This IP address has been reported a total of
8
times from
8 distinct
sources.
114.252.201.115 was first reported on
October 2nd 2026 , and the most recent report was
5 hours ago Italy
with 3
reports;
Austria
with 1
report;
Czechia
with 1
report.
The most common categories in these recent reports were:
Brute-Force
6
times;
Port Scan
2
times;
DDoS Attack
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
edgeshield
2026-10-06 09:37:16
(5 hours ago)
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
2026-10-06 07:20:00
(7 hours ago)
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
Brute-Force
🇺🇸
mnogoweb
2026-10-05 22:23:08
(16 hours ago)
(smtpauth) Failed SMTP AUTH login from 114.252.201.115 (CN/China/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 114.252.201.115 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-10-05 15:33:53 plain authenticator failed for (f40x1ae0zzvhwq4al2f8) [114.252.201.115]: 535 Incorrect authentication data ([email protected] )
2026-10-05 15:33:53 plain authenticator failed for (f40x1ae0zzvhwq4al2f8) [114.252.201.115]: 535 Incorrect authentication data ([email protected] )
2026-10-05 16:22:04 plain authenticator failed for (hp8flsi6pgrzmw7as7g1sacl7os8) [114.252.201.115]: 535 Incorrect authentication data ([email protected] )
2026-10-05 16:22:04 plain authenticator failed for (hp8flsi6pgrzmw7as7g1sacl7os8) [114.252.201.115]: 535 Incorrect authentication data ([email protected] )
2026-10-05 16:23:06 plain authenticator failed for (9sf8klm5de99pmd19wc8wc0nc) [114.252.201.115]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇿🇦
maximonline.co.za
2026-10-05 14:12:04
(1 day ago)
Brute Force SMTP AUTH Attack
Brute-Force
🇮🇹
Inartis
2026-10-04 22:10:00
(1 day ago)
2026-10-05T00:09:59.863766+02:00 mail.inartis.it postfix/smtpd[455007]: warning: unknown[114.252.201 ...
show more
2026-10-05T00:09:59.863766+02:00 mail.inartis.it postfix/smtpd[455007]: warning: unknown[114.252.201.115]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Port Scan
Brute-Force
🇦🇹
AustrianSimon
2026-10-03 21:38:14
(2 days ago)
03 Oct 2026 21:38:14UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more
03 Oct 2026 21:38:14UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 114.252.201.115
show less
Brute-Force
🇨🇿
unhfree.net
2026-10-03 20:35:18
(2 days ago)
Oct 3 17:40:26 canopus postfix/smtpd[3319728]: NOQUEUE: reject: RCPT from unknown[114.252.201.115]: ...
show more
Oct 3 17:40:26 canopus postfix/smtpd[3319728]: NOQUEUE: reject: RCPT from unknown[114.252.201.115]: 554 5.7.1 <[email protected] >: Sender address rejected: Access denied; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<5g5a2xrnuyt8hu4dzemk031fthh>
Oct 3 17:40:28 canopus postfix/smtpd[3319728]: NOQUEUE: reject: RCPT from unknown[114.252.201.115]: 554 5.7.1 <[email protected] >: Sender address rejected: Access denied; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<5g5a2xrnuyt8hu4dzemk031fthh>
Oct 3 22:06:37 canopus postfix/smtpd[3337830]: NOQUEUE: reject: RCPT from unknown[114.252.201.115]: 554 5.7.1 <[email protected] >: Sender address rejected: Access denied; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<erlkqt56rdqbgd0445mp12so49o9fi4>
Oct 3 22:06:38 canopus postfix/smtpd[3337830]: NOQUEUE: reject: RCPT from unknown[114.252.201.115]: 554 5.7.1 <[email protected] >: Sender address rejected: Acces
...
show less
Brute-Force
Exploited Host
🇮🇹
VHosting
2026-10-02 18:40:04
(3 days ago)
Detected mail brute force attack from different servers
Brute-Force
Showing 1 to
8
of 8 reports
