AbuseIPDB » 118.120.230.16

118.120.230.16 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 13%: ?

13%

ISP	ChinaNet Sichuan Province Network
Usage Type	Unknown
Domain Name	chinatelecom.com.cn
Country	China
City	Deyang, Sichuan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 118.120.230.16

Whois 118.120.230.16

IP Abuse Reports for 118.120.230.16:

This IP address has been reported a total of 9 times from 8 distinct sources. 118.120.230.16 was first reported on July 12th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Kinsei Engineering Inc.	2024-08-13 05:52:58 (1 month ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
lp	2024-08-11 01:54:16 (1 month ago)	Email account brute force: 1 attempts were recorded from 118.120.230.16 2024-08-11T02:17:37+02 ... show moreEmail account brute force: 1 attempts were recorded from 118.120.230.16 2024-08-11T02:17:37+02:00 warning: unknown[118.120.230.16]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2024-08-11 00:15:21 (1 month ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
TPI-Abuse	2024-07-20 22:18:47 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 118.120.230.16 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210831) triggered by 118.120.230.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 20 18:18:42.020005 2024] [security2:error] [pid 25603:tid 25603] [client 118.120.230.16:48564] [client 118.120.230.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.huboon.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.huboon.com"] [uri "/devo800813.html"] [unique_id "Zpw3wrQaUaLM-SQ80T51mwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
stom	2024-03-26 19:53:02 (5 months ago)	2024-03-26T19:52:59.223293ls2.tom2.co.uk postfix/smtpd[4302]: warning: unknown[118.120.230.16]: SASL ... show more2024-03-26T19:52:59.223293ls2.tom2.co.uk postfix/smtpd[4302]: warning: unknown[118.120.230.16]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam Brute-Force
Anonymous	2023-07-30 08:08:09 (1 year ago)	Jul 30 10:08:09 ns3130050 postfix/smtpd[26974]: warning: unknown[118.120.230.16]: SASL LOGIN authent ... show moreJul 30 10:08:09 ns3130050 postfix/smtpd[26974]: warning: unknown[118.120.230.16]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Web App Attack
samba.org	2023-07-20 08:33:37 (1 year ago)	spam (f2b h2)	Brute-Force
samba.org	2023-07-14 11:59:01 (1 year ago)	spam (f2b h2)	Brute-Force
Papy Abuse	2023-07-12 11:54:05 (1 year ago)	honeypots-httpproxy	Port Scan