JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.204.161.91

121.204.161.91 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Fujian province network
Usage Type	Commercial
ASN	AS133774
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Fuzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.204.161.91

Whois 121.204.161.91

IP Abuse Reports for 121.204.161.91:

This IP address has been reported a total of 30 times from 19 distinct sources. 121.204.161.91 was first reported on August 10th 2021, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 it-ngo.com	2021-11-26 21:25:27 (4 years ago)	SMTP login attempts.	Hacking Brute-Force
🇩🇪 dwmp	2021-11-26 03:05:54 (4 years ago)	2021-11-26T09:05:26.547090mail1 auth[17304]: pam_unix(dovecot:auth): authentication failure; logname ... show more 2021-11-26T09:05:26.547090mail1 auth[17304]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=121.204.161.91 2021-11-26T09:05:37.828304mail1 auth[16195]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=121.204.161.91 2021-11-26T09:05:52.616887mail1 auth[16195]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=121.204.161.91 ... show less	Brute-Force
🇪🇪 reigo	2021-11-25 13:15:45 (4 years ago)	SSH invalid-user multiple login try	Brute-Force SSH
🇩🇪 dwmp	2021-11-24 19:08:55 (4 years ago)	2021-11-25T01:07:59.703339mail1 auth[1001]: pam_unix(dovecot:auth): authentication failure; logname= ... show more 2021-11-25T01:07:59.703339mail1 auth[1001]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=121.204.161.91 2021-11-25T01:08:15.616176mail1 auth[1001]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=121.204.161.91 2021-11-25T01:08:53.379691mail1 dovecot[1515]: imap-login: Disconnected (auth failed, 2 attempts in 54 secs): user=<[email protected]>, method=PLAIN, rip=121.204.161.91, lip=62.171.143.187, TLS: Disconnected, session=<ayNwxJHRmJ15zKFb> ... show less	Brute-Force
🇩🇪 it-ngo.com	2021-11-21 13:48:26 (4 years ago)	SMTP login attempts.	Hacking Brute-Force
🇹🇷 GHS	2021-11-19 20:46:32 (4 years ago)	Unauthorized connection attempt from 121.204.161.91 on port 143	Port Scan Hacking
🇮🇹 codabar	2021-11-19 03:06:37 (4 years ago)	SMTP login attempts.	Brute-Force
Anonymous	2021-11-08 04:30:32 (4 years ago)	121.204.161.91 (CN/China/-), 2 distributed imapd attacks on account [[email protected]] in ... show more 121.204.161.91 (CN/China/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇩🇪 bsoft.de	2021-10-26 23:39:18 (4 years ago)	2021-10-27T05:39:05.767366MailD imap[24035]: badlogin: [121.204.161.91] PLAIN [SASL(-13): authentica ... show more 2021-10-27T05:39:05.767366MailD imap[24035]: badlogin: [121.204.161.91] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-27T05:39:11.835281MailD imap[24035]: badlogin: [121.204.161.91] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-27T05:39:17.488835MailD imap[24035]: badlogin: [121.204.161.91] PLAIN [SASL(-13): authentication failure: Password verification failed] show less	Hacking Brute-Force
🇮🇳 A B	2021-10-18 14:01:37 (4 years ago)	none	FTP Brute-Force
🇲🇾 syokadmin	2021-10-17 09:56:19 (4 years ago)	121.204.161.91 (CN/China/-), 2 distributed imapd attacks on account [[email protected]] in the la ... show more 121.204.161.91 (CN/China/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇳🇱 Koen	2021-10-14 01:14:37 (4 years ago)	Auto Fail2Ban report, multiple IMAP login attempts.	Brute-Force
Anonymous	2021-10-13 14:26:51 (4 years ago)	(imapd) Failed IMAP login from 121.204.161.91 (CN/China/-): 10 in the last 3600 secs; Ports: ; Dire ... show more (imapd) Failed IMAP login from 121.204.161.91 (CN/China/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_IMAPD; Logs: Oct 14 01:30:31 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 65 secs): user=<admin>, method=PLAIN, rip=121.204.161.91, lip=209.188.21.35, TLS: Connection closed, session=<idS/TT/O6IZ5zKFb> Oct 14 02:26:48 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 59 secs): user=<support>, method=PLAIN, rip=121.204.161.91, lip=209.188.21.35, TLS: Connection closed, session=<ujRtF0DOitd5zKFb> show less	Port Scan
🇩🇪 ipcop.net	2021-10-13 05:31:47 (4 years ago)	Oct 13 01:30:57 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDD ... show more Oct 13 01:30:57 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:06 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:19 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:37 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:46 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<reception>, method=PLAIN, rip=121.204.161.91, lip=185.118.197.126, TLS: Connection closed, session=<YyvRPDDOyIt5zKFb> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 05:31:47 (4 years ago)	Oct 13 01:30:57 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDD ... show more Oct 13 01:30:57 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:06 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:19 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:37 mail.srvfarm.net dovecot: auth-worker(700673): sql(reception,121.204.161.91,<YyvRPDDOyIt5zKFb>): unknown user Oct 13 01:31:46 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<reception>, method=PLAIN, rip=121.204.161.91, lip=185.118.197.126, TLS: Connection closed, session=<YyvRPDDOyIt5zKFb> show less	Fraud VoIP Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.221.68.74

🇺🇸 205.210.31.68

🇮🇷 185.141.107.50

🇧🇷 152.32.197.166

🇭🇰 123.58.213.118

🇮🇩 103.226.139.69

🇮🇪 52.30.25.84

🇺🇸 178.20.212.26

🇺🇸 172.66.47.106

🇬🇧 171.22.105.47

🇩🇪 140.248.75.187

🇧🇷 131.72.70.28

🇵🇭 122.54.251.214

🇨🇳 118.252.27.84

🇰🇷 106.243.155.71

🇨🇳 39.171.252.186

🇨🇳 36.106.166.133

🇯🇵 36.52.178.110

🇩🇪 195.63.26.72

🇺🇸 130.131.162.132