JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.237.181.57

116.237.181.57 was found in our database!

This IP was reported 861 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.237.181.57

Whois 116.237.181.57

IP Abuse Reports for 116.237.181.57:

This IP address has been reported a total of 861 times from 178 distinct sources. 116.237.181.57 was first reported on April 11th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-01 19:44:02 (2 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇭🇺 dd3589	2026-06-01 19:05:02 (2 days ago)	2026-06-01T21:04:32+02:00 <masked> exim[118348]: REJECT [116.237.181.57]: bad recipient count high [ ... show more 2026-06-01T21:04:32+02:00 <masked> exim[118348]: REJECT [116.237.181.57]: bad recipient count high [99] show less	Brute-Force
🇩🇪 Paul Smith	2026-06-01 18:29:05 (2 days ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
🇩🇪 mnpx	2026-06-01 15:44:18 (2 days ago)	SMTP brute forcing (2× over 0h:44m); first seen here 2026-04-16T10:51Z	Brute-Force
Anonymous	2026-06-01 15:20:17 (2 days ago)	2026-06-01 17:19:58.952 [124190] no host name found for IP address 116.237.181.57 2026-06-01 17:20:1 ... show more 2026-06-01 17:19:58.952 [124190] no host name found for IP address 116.237.181.57 2026-06-01 17:20:15.305 [124190] dovecot_login authenticator failed for (wsip-72-215-46-115.pn.at.cox.net) [116.237.181.57]:21280 I=[217.197.86.168]:25 Ci=124190: 535 Incorrect authentication data 2026-06-01 17:20:16.733 [124190] no MAIL in SMTP connection from (wsip-72-215-46-115.pn.at.cox.net) [116.237.181.57]:21280 I=[217.197.86.168]:25 Ci=124190 D=17s X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no C=EHLO,STARTTLS,EHLO,AUTH ... show less	Email Spam
🇦🇺 brocococonut	2026-06-01 14:03:17 (2 days ago)	2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 ... show more 2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 Incorrect authentication data (set_id=nathan) 2026-06-01 08:45:37 dovecot_login authenticator failed for ([175.206.1.60]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) 2026-06-01 09:07:21 dovecot_login authenticator failed for ([166.145.212.12]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) 2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 Incorrect authentication data (set_id=nathan) 2026-06-01 08:45:37 dovecot_login authenticator failed for ([175.206.1.60]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇬🇧 stom	2026-06-01 03:55:23 (2 days ago)	2026-06-01T03:55:20.107386ls1.tom2.co.uk postfix/smtps/smtpd[7990]: warning: unknown[116.237.181.57] ... show more 2026-06-01T03:55:20.107386ls1.tom2.co.uk postfix/smtps/smtpd[7990]: warning: unknown[116.237.181.57]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇳🇱 EGP Abuse Dept	2026-06-01 01:16:25 (2 days ago)	Numeric HELO: 218.202.143.68	Email Spam Exploited Host
🇺🇸 bigwavedave	2026-05-31 23:58:30 (2 days ago)	SMTP	Brute-Force
🇹🇷 ferique	2026-05-31 23:14:04 (3 days ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-01 02:13:52.2152 Login failure: 116.237.181.57 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-01 02:13:52.2152 Login failure: 116.237.181.57 SMTP show less	Brute-Force Email Spam
🇦🇺 brocococonut	2026-05-31 23:07:22 (3 days ago)	2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 ... show more 2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 Incorrect authentication data (set_id=nathan) 2026-06-01 00:26:01 dovecot_login authenticator failed for ([169.211.232.182]) [116.237.181.57]: 535 Incorrect authentication data (set_id=nathan) 2026-06-01 08:45:37 dovecot_login authenticator failed for ([175.206.1.60]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) 2026-06-01 08:45:37 dovecot_login authenticator failed for ([175.206.1.60]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) 2026-06-01 09:07:21 dovecot_login authenticator failed for ([166.145.212.12]) [116.237.181.57]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇩🇪 mnpx	2026-05-31 20:51:09 (3 days ago)	SMTP brute forcing (2× over 0h:30m); first seen here 2026-04-16T10:51Z	Brute-Force
🇯🇵 ki3	2026-05-31 18:31:26 (3 days ago)	Fail2Ban: Postfix Attack 116.237.181.57 1780252286.0(JST)	Email Spam Brute-Force
🇩🇪 Paul Smith	2026-05-31 18:24:20 (3 days ago)	Email Auth Brute force attack 5/5 in last day	Brute-Force
🇩🇪 FeG Deutschland	2026-05-31 17:12:05 (3 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 31 to 45 of 861 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.186.79.173

🇮🇪 54.155.172.110

🇨🇳 14.103.117.85

🇧🇷 205.210.31.198

🇰🇪 41.203.213.8

🇺🇸 31.220.96.135

🇺🇸 205.210.31.96

🇺🇸 205.210.31.64

🇺🇸 159.203.83.195

🇬🇷 145.224.119.190

🇨🇳 139.9.191.197

🇨🇳 111.26.69.160

🇻🇳 103.82.21.8

🇩🇪 69.5.169.79

🇺🇸 68.216.144.83

🇰🇷 61.36.200.131

🇹🇭 58.136.223.222

🇳🇱 45.156.87.34

🇳🇱 45.148.10.121

🇹🇼 45.64.233.243