JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.68.192.34

117.68.192.34 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	CHINANET anhui province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.68.192.34

Whois 117.68.192.34

IP Abuse Reports for 117.68.192.34:

This IP address has been reported a total of 30 times from 24 distinct sources. 117.68.192.34 was first reported on June 12th 2021, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WebpodsLLC	2022-07-21 10:54:34 (3 years ago)	Direction: in Trigger: LF_SMTPAUTH;	Port Scan Brute-Force Web App Attack
🇸🇬 Sofibox Cyberwatch	2022-03-30 01:58:57 (4 years ago)	[bad_ip: 117.68.192.34 [alert_level: Medium Risk [inbound(0)+outbound(1): 1 [target_port: 55944 [cla ... show more [bad_ip: 117.68.192.34 [alert_level: Medium Risk [inbound(0)+outbound(1): 1 [target_port: 55944 [class: Generic Protocol Command Decode [msg: SURICATA Applayer Detect protocol only one direction [csf_block_status: ip-already-blocked [blcheck_ip_score: 90.5% (17/179) [blcheck_domain: "all.spamrats.com,noptr.spamrats.com,hartkore.dnsbl.tuxad.de,bl.fmb.la,bl.mailspike.net,z.mailspike. [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 21.05% [mod_security_alert: false [has_cidr24_network: false(1) show less	Email Spam Brute-Force
🇳🇿 billyborsht	2022-03-30 01:54:13 (4 years ago)	sasl authentication brute-force	Email Spam Brute-Force
🇺🇸 etu brutus	2022-03-29 19:59:52 (4 years ago)	117.68.192.34 has been banned for [cms abuse] ...	Hacking Brute-Force
🇩🇪 ipcop.net	2022-03-29 15:54:05 (4 years ago)	Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from u ... show more Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from unknown[117.68.192.34]: 554 5.7.1 <unknown[117.68.192.34]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<n2eIPnGV> Mar 29 11:53:51 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:53:52 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] Mar 29 11:54:03 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:54:04 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2022-03-29 15:54:05 (4 years ago)	Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from u ... show more Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from unknown[117.68.192.34]: 554 5.7.1 <unknown[117.68.192.34]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<n2eIPnGV> Mar 29 11:53:51 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:53:52 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] Mar 29 11:54:03 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:54:04 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2022-03-29 15:54:05 (4 years ago)	Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from u ... show more Mar 29 11:53:45 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: NOQUEUE: reject: RCPT from unknown[117.68.192.34]: 554 5.7.1 <unknown[117.68.192.34]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<n2eIPnGV> Mar 29 11:53:51 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:53:52 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] Mar 29 11:54:03 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 11:54:04 web01.agentur-b-2.de postfix/submission/smtpd[2137453]: lost connection after AUTH from unknown[117.68.192.34] show less	Fraud VoIP Brute-Force
🇬🇧 chrisw	2022-03-29 12:38:27 (4 years ago)	Mar 29 17:38:04 l03 postfix/smtpd[25776]: warning: unknown[117.68.192.34]: SASL LOGIN authentication ... show more Mar 29 17:38:04 l03 postfix/smtpd[25776]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: authentication failure Mar 29 17:38:12 l03 postfix/smtpd[25776]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: authentication failure Mar 29 17:38:21 l03 postfix/smtpd[25776]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: authentication failure Mar 29 17:38:26 l03 postfix/smtpd[25776]: warning: unknown[117.68.192.34]: SASL LOGIN authentication failed: authentication failure ... show less	Web Spam Brute-Force Exploited Host
🇳🇿 [email protected]	2022-03-29 10:18:32 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 117.68.192.34 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 117.68.192.34 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2022-03-30 03:17:28 dovecot_login authenticator failed for (qY16q9niHa) [117.68.192.34]:65433 I=[218.185.229.177]:587: 535 Incorrect authentication data (set_id=mail) 2022-03-30 03:17:40 dovecot_login authenticator failed for (0uTMZov) [117.68.192.34]:49455 I=[218.185.229.177]:587: 535 Incorrect authentication data ([email protected]) 2022-03-30 03:17:58 dovecot_login authenticator failed for (kzBzRsuZ) [117.68.192.34]:49777 I=[218.185.229.177]:587: 535 Incorrect authentication data (set_id=mail) 2022-03-30 03:18:06 dovecot_login authenticator failed for (btRdcF) [117.68.192.34]:50061 I=[218.185.229.177]:587: 535 Incorrect authentication data ([email protected]) 2022-03-30 03:18:27 dovecot_login authenticator failed for (fj5Kgi7) [117.68.192.34]:50379 I=[218.185.229.177]:587: 535 Incorrect authentication data (set_id=mail) show less	Port Scan
🇮🇷 ModiranHost.com	2022-03-29 07:28:29 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 117.68.192.34 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 117.68.192.34 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2022-03-29 15:48:42 login authenticator failed for (viwJPT4h) [117.68.192.34]: 535 Incorrect authentication data (set_id=mail) 2022-03-29 15:48:48 login authenticator failed for (7qxIuG) [117.68.192.34]: 535 Incorrect authentication data ([email protected]) 2022-03-29 15:49:04 login authenticator failed for (WJmgCVE) [117.68.192.34]: 535 Incorrect authentication data (set_id=mail) 2022-03-29 15:49:09 login authenticator failed for (gw3itz5G) [117.68.192.34]: 535 Incorrect authentication data ([email protected]) 2022-03-29 15:49:23 login authenticator failed for (hfhCsdsaI) [117.68.192.34]: 535 Incorrect authentication data (set_id=mail) show less	Port Scan
🇵🇱 fripers.pl	2022-03-29 06:24:40 (4 years ago)	2022-03-29 12:24:25 SMTP protocol error in "AUTH LOGIN" H=\(aBcAIdhKl\) \[117.68.192.34\]:51337 I=\[ ... show more 2022-03-29 12:24:25 SMTP protocol error in "AUTH LOGIN" H=\(aBcAIdhKl\) \[117.68.192.34\]:51337 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2022-03-29 12:24:32 SMTP protocol error in "AUTH LOGIN" H=\(IoUMdjmZT\) \[117.68.192.34\]:51380 I=\[193.107.88.166\]:587 AUTH command used when not advertised 2022-03-29 12:24:39 SMTP protocol error in "AUTH LOGIN" H=\(7bLLURPE\) \[117.68.192.34\]:51688 I=\[193.107.88.166\]:587 AUTH command used when not advertised ... show less	Brute-Force
🇲🇾 syokadmin	2022-03-29 06:16:00 (4 years ago)	(PERMBLOCK) 117.68.192.34 (CN/China/-) has had more than 2 temp blocks in the last 86400 secs	Brute-Force
🇪🇸 10dencehispahard SL	2022-03-29 06:05:51 (4 years ago)	Unauthorized login attempts [{'postfix-sasl'}]	Brute-Force
Anonymous	2022-03-29 03:10:25 (4 years ago)	2022-03-29 07:10:07.892 [2946882] login authenticator failed for (ytQFToL) [117.68.192.34]:56444 I=[ ... show more 2022-03-29 07:10:07.892 [2946882] login authenticator failed for (ytQFToL) [117.68.192.34]:56444 I=[10.157.71.2]:587: 535 Incorrect authentication data (set_id=mail) 2022-03-29 07:10:12.268 [2946963] login authenticator failed for (AHDeKnM5v) [117.68.192.34]:56540 I=[10.157.71.2]:587: 535 Incorrect authentication data ([email protected]) 2022-03-29 07:10:22.130 [2947245] login authenticator failed for (T1lrV2) [117.68.192.34]:56828 I=[10.157.71.2]:587: 535 Incorrect authentication data (set_id=mail) 2022-03-29 07:10:22.877 [2947243] login authenticator failed for (cpgtC8j2) [117.68.192.34]:56816 I=[10.157.71.2]:587: 535 Incorrect authentication data (set_id=mail) 2022-03-29 07:10:24.796 [2947262] login authenticator failed for (nEBlbIcD5x) [117.68.192.34]:56916 I=[10.157.71.2]:587: 535 Incorrect authentication data ([email protected]) ... show less	Email Spam SSH
🇺🇸 NXTwoThou	2022-03-28 20:54:55 (4 years ago)	SMTP relay attempt	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.150.37.249

🇹🇼 198.235.24.8

🇧🇷 191.35.252.194

🇧🇷 187.120.73.224

🇺🇸 147.185.132.79

🇩🇪 134.209.249.189

🇷🇴 92.118.39.49

🇬🇧 88.215.1.201

🇰🇷 61.76.38.54

🇫🇷 51.75.120.67

🇧🇿 45.227.254.156

🇳🇱 45.142.193.161

🇺🇦 37.221.151.13

🇳🇱 20.224.41.181

🇳🇱 5.61.209.43

🇧🇷 205.210.31.204

🇺🇸 172.104.11.34

🇩🇪 150.241.77.28

🇯🇵 118.194.228.101

🇨🇳 114.250.50.172