JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.69.189.97

117.69.189.97 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	CHINANET anhui province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.69.189.97

Whois 117.69.189.97

IP Abuse Reports for 117.69.189.97:

This IP address has been reported a total of 18 times from 14 distinct sources. 117.69.189.97 was first reported on April 17th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Kinsei Engineering Inc.	2025-03-03 10:07:36 (1 year ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇦🇷 OcampoFer	2024-09-22 12:50:56 (1 year ago)	SPAM - IP blocked by DNSBL for a period of 12 hours.	Email Spam
🇯🇵 Kinsei Engineering Inc.	2024-07-19 06:43:39 (2 years ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇺🇸 TPI-Abuse	2024-07-12 13:17:36 (2 years ago)	(mod_security) mod_security (id:210831) triggered by 117.69.189.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 117.69.189.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 09:17:29.656636 2024] [security2:error] [pid 21134:tid 47977288734464] [client 117.69.189.97:49242] [client 117.69.189.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|crosstheatre.org\|F\|4"] [data "User-agent:"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "crosstheatre.org"] [uri "/contact.html"] [unique_id "ZpEs6f_UVKLmr7aoUYaptgAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lfpanels.com	2024-05-30 07:20:03 (2 years ago)	SASL broute force	Brute-Force
🇮🇷 ModiranHost.com	2023-12-28 19:45:15 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 117.69.189.97 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 117.69.189.97 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-12-28 23:15:00 login authenticator failed for (7oZOIsS4) [117.69.189.97]: 535 Incorrect authentication data ([email protected]) 2023-12-28 23:15:01 login authenticator failed for (mObk0mj) [117.69.189.97]: 535 Incorrect authentication data ([email protected]) 2023-12-28 23:15:06 login authenticator failed for (3zxJ369c) [117.69.189.97]: 535 Incorrect authentication data ([email protected]) 2023-12-28 23:15:08 login authenticator failed for (zp86ud3M) [117.69.189.97]: 535 Incorrect authentication data ([email protected]) 2023-12-28 23:15:11 login authenticator failed for (SH0u0frU6) [117.69.189.97]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇫🇷 UM3	2023-12-25 13:47:34 (2 years ago)	Exim Auth Failed	Brute-Force
Anonymous	2023-07-29 04:31:07 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 117.69.189.97 (CN/China/-)	Brute-Force
🇺🇸 webstracthosting.com	2023-04-13 16:18:39 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 117.69.189.97 (CN/China/-)	Brute-Force
🇺🇸 vestibtech	2023-04-12 20:04:38 (3 years ago)	Apr 12 14:04:35 Host-KLAX-C postfix/smtp/smtpd[3710523]: lost connection after AUTH from unknown[117 ... show more Apr 12 14:04:35 Host-KLAX-C postfix/smtp/smtpd[3710523]: lost connection after AUTH from unknown[117.69.189.97] Apr 12 14:04:36 Host-KLAX-C postfix/smtp/smtpd[3710772]: lost connection after AUTH from unknown[117.69.189.97] Apr 12 14:04:37 Host-KLAX-C postfix/smtp/smtpd[3710466]: lost connection after AUTH from unknown[117.69.189.97] Apr 12 14:04:38 Host-KLAX-C postfix/smtp/smtpd[3710523]: lost connection after AUTH from unknown[117.69.189.97] ... show less	DDoS Attack Port Scan
🇮🇹 www.tana.it	2023-04-07 13:19:14 (3 years ago)	SMTP auth dictionary attack	Brute-Force
🇺🇸 vestibtech	2023-03-17 16:01:02 (3 years ago)	Mar 17 10:00:59 Host-KLAX-C postfix/smtp/smtpd[855801]: lost connection after AUTH from unknown[117. ... show more Mar 17 10:00:59 Host-KLAX-C postfix/smtp/smtpd[855801]: lost connection after AUTH from unknown[117.69.189.97] Mar 17 10:01:00 Host-KLAX-C postfix/smtp/smtpd[856820]: lost connection after AUTH from unknown[117.69.189.97] Mar 17 10:01:01 Host-KLAX-C postfix/smtp/smtpd[856821]: lost connection after AUTH from unknown[117.69.189.97] Mar 17 10:01:02 Host-KLAX-C postfix/smtp/smtpd[856817]: lost connection after AUTH from unknown[117.69.189.97] ... show less	DDoS Attack Port Scan
🇺🇸 FreeMyIP	2023-03-16 16:42:23 (3 years ago)	Mar 16 12:42:22 dns-1 postfix/smtpd[1206865]: warning: unknown[117.69.189.97]: SASL LOGIN authentica ... show more Mar 16 12:42:22 dns-1 postfix/smtpd[1206865]: warning: unknown[117.69.189.97]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 vestibtech	2023-03-15 06:09:04 (3 years ago)	Mar 15 02:08:59 Host-KEWR-E postfix/smtp/smtpd[124594]: lost connection after AUTH from unknown[117. ... show more Mar 15 02:08:59 Host-KEWR-E postfix/smtp/smtpd[124594]: lost connection after AUTH from unknown[117.69.189.97] Mar 15 02:08:59 Host-KEWR-E postfix/smtp/smtpd[124791]: lost connection after AUTH from unknown[117.69.189.97] Mar 15 02:09:00 Host-KEWR-E postfix/smtp/smtpd[124780]: lost connection after AUTH from unknown[117.69.189.97] Mar 15 02:09:02 Host-KEWR-E postfix/smtp/smtpd[124583]: lost connection after AUTH from unknown[117.69.189.97] ... show less	DDoS Attack Port Scan
🇺🇸 FreeMyIP	2022-12-07 21:06:53 (3 years ago)	Dec 7 21:06:49 dns-1 postfix/smtpd[2097096]: warning: unknown[117.69.189.97]: SASL LOGIN authentica ... show more Dec 7 21:06:49 dns-1 postfix/smtpd[2097096]: warning: unknown[117.69.189.97]: SASL LOGIN authentication failed: authentication failure Dec 7 21:06:52 dns-1 postfix/smtpd[2097000]: warning: unknown[117.69.189.97]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.208

🇳🇱 195.178.110.228

🇬🇧 188.240.59.62

🇬🇧 188.240.59.52

🇧🇷 186.211.101.119

🇨🇳 183.23.182.4

🇷🇴 92.118.39.50

🇰🇷 61.105.6.100

🇫🇷 45.77.61.56

🇨🇳 42.54.156.10

🇬🇧 5.226.140.108

🇩🇪 195.201.27.50

🇨🇼 190.123.21.23

🇳🇱 185.223.235.16

🇨🇳 183.238.76.87

🇺🇸 162.216.150.158

🇺🇸 154.16.115.99

🇨🇦 146.190.245.208

🇧🇩 137.59.154.67

🇺🇸 65.49.20.67