JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.20.145.48

14.20.145.48 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 88%: ?

88%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Zhuhai, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.20.145.48

Whois 14.20.145.48

IP Abuse Reports for 14.20.145.48:

This IP address has been reported a total of 22 times from 17 distinct sources. 14.20.145.48 was first reported on July 11th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-20 19:49:39 (1 hour ago)	[ti-01ov] Mail server brute-force: 3 failed attempts detected by fail2ban jail <name>.	Brute-Force
🇺🇸 PlexLads	2026-09-20 16:51:18 (4 hours ago)	Sep 20 09:50:24 user postfix/smtpd[71652]: too many errors after DATA from unknown[14.20.145.48] S ... show more Sep 20 09:50:24 user postfix/smtpd[71652]: too many errors after DATA from unknown[14.20.145.48] Sep 20 09:50:50 user postfix/smtpd[71652]: too many errors after DATA from unknown[14.20.145.48] Sep 20 09:51:16 user postfix/smtpd[71652]: too many errors after DATA from unknown[14.20.145.48] show less	Port Scan Hacking Brute-Force
🇫🇷 Sysadmin Peter	2026-09-20 13:45:37 (7 hours ago)	Sep 20 15:45:35 mail postfix/smtpd[3241352]: warning: unknown[14.20.145.48]: SASL LOGIN authenticati ... show more Sep 20 15:45:35 mail postfix/smtpd[3241352]: warning: unknown[14.20.145.48]: SASL LOGIN authentication failed: authentication failure Sep 20 15:45:36 mail postfix/smtpd[3241352]: warning: unknown[14.20.145.48]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam
🇫🇷 ventura-websolutions.de	2026-09-20 13:29:49 (8 hours ago)	Sep 20 15:29:11 server postfix/smtpd[3789219]: warning: unknown[14.20.145.48]: SASL LOGIN authentica ... show more Sep 20 15:29:11 server postfix/smtpd[3789219]: warning: unknown[14.20.145.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 15:29:38 server postfix/smtpd[3789219]: warning: unknown[14.20.145.48]: SASL LOGIN authentication failed: Connection lost to authentication server Sep 20 15:29:49 server postfix/smtpd[3789219]: warning: unknown[14.20.145.48]: SASL LOGIN authentication failed: Connection lost to authentication server show less	Brute-Force
🇩🇪 MarkGGN	2026-09-20 12:54:07 (8 hours ago)	SMTP Bruteforce. 2026-09-20T14:54:05.625136+02:00 . postfix/smtpd[154715]: NOQUEUE: reject: RCPT f ... show more SMTP Bruteforce. 2026-09-20T14:54:05.625136+02:00 . postfix/smtpd[154715]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 504 5.5.2 <huo>: Helo command rejected: need fully-qualified hostname; from=<ttttuu@.> to=<> proto=ESMTP helo=<huo> 2026-09-20T14:54:06.037866+02:00 .* postfix/smtpd[154715]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 504 5.5.2 <huo>: Helo command rejected: need fully-qualified hostname; from=<vvwwxx@.> to=<*> proto=ESMTP helo=<huo> show less	Brute-Force
🇺🇸 mibbsdevs	2026-09-20 10:39:57 (10 hours ago)	(ric-sv) Exim MTA abuse, unauthorized relay, or spam attempt.	Email Spam
🇳🇱 tmiland	2026-09-20 09:50:22 (11 hours ago)	(postfix_disconnect) lost connection after AUTH from 14.20.145.48 (CN/China/-): 1 in the last 3600 s ... show more (postfix_disconnect) lost connection after AUTH from 14.20.145.48 (CN/China/-): 1 in the last 3600 secs; IP: 14.20.145.48; Ports: *; Direction: inout; Trigger: other; Logs: 2026-09-20T11:50:18.959865+02:00 vps1 postfix/smtpd[2919150]: disconnect from unknown[14.20.145.48] commands=0/0 show less	Brute-Force
🇺🇸 rsiddall	2026-09-20 01:58:31 (19 hours ago)	2026-09-19T21:57:36.639061linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:55 ... show more 2026-09-19T21:57:36.639061linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:55136 2026-09-19T21:57:50.616820linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:55169 2026-09-19T21:58:06.097575linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:56002 2026-09-19T21:58:18.728970linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:56649 2026-09-19T21:58:31.037898linnet.elirion.net postfix/postscreen[21946]: DISCONNECT [14.20.145.48]:57233 ... show less	Brute-Force
🇳🇱 Alt255	2026-09-19 23:46:58 (21 hours ago)	[ti-03al] Mail server brute-force: 3 failed attempts detected by fail2ban jail postfix-sasl.	Brute-Force
🇫🇮 hieronymousch	2026-09-19 23:18:49 (22 hours ago)	Sep 20 01:18:30 franssen postfix/smtpd[2082556]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 5 ... show more Sep 20 01:18:30 franssen postfix/smtpd[2082556]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 01:18:34 franssen postfix/smtpd[2082556]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 01:18:39 franssen postfix/smtpd[2082556]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 01:18:4 ... show less	Brute-Force
🇳🇱 Alt255	2026-09-19 23:11:12 (22 hours ago)	[ti-03ov] Mail server brute-force: 3 failed attempts detected by fail2ban jail postfix.	Brute-Force
🇫🇮 hieronymousch	2026-09-19 22:58:07 (22 hours ago)	Sep 20 00:57:49 franssen postfix/smtpd[2081571]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 5 ... show more Sep 20 00:57:49 franssen postfix/smtpd[2081571]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 00:57:54 franssen postfix/smtpd[2081571]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 00:57:58 franssen postfix/smtpd[2081571]: NOQUEUE: reject: RCPT from unknown[14.20.145.48]: 554 5.7.1 Service unavailable; Client host [14.20.145.48] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/14.20.145.48; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<huo> Sep 20 00:58:0 ... show less	Brute-Force
Anonymous	2026-09-19 09:25:05 (1 day ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 Entalpi.net	2026-09-19 08:16:41 (1 day ago)	Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false ... show more Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false positive show less	Hacking
🇩🇪 DerLukas	2026-09-19 05:10:35 (1 day ago)		Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 4.240.96.30

🇺🇸 165.254.241.241

🇳🇱 77.239.124.173

🇺🇸 71.6.238.42

🇺🇸 64.23.177.237

🇮🇱 34.165.228.89

🇹🇼 34.80.137.17

🇰🇷 203.236.95.41

🇷🇺 195.218.159.123

🇮🇳 136.232.11.10

🇯🇵 104.234.140.121

🇮🇳 103.182.132.154

🇮🇩 103.168.135.187

🇬🇧 35.203.210.210

🇫🇷 13.140.168.163

🇮🇩 163.61.134.228

🇬🇧 138.68.182.163

🇳🇱 109.160.32.68

🇹🇷 78.187.206.159

🇳🇱 77.239.124.181