AbuseIPDB » 218.64.57.12

Enter an IP Address, Domain Name, or Subnet:

e.g. 18.207.134.98, microsoft.com, or 5.188.10.0/24

218.64.57.12 was found in our database!

This IP was reported 396 times. Confidence of Abuse is 100%: ?

100%

ISP	Jiangxi Province Nanchang City 3L-Medical-Produce-Company
Usage Type	Commercial
Hostname(s)	12.57.64.218.broad.nc.jx.dynamic.163data.com.cn
Domain Name	163data.com.cn
Country	China
City	Nanchang, Jiangxi

Spot an error? IP info including ISP, Usage Type, and Location provided by IP2Location.

Report 218.64.57.12

Whois 218.64.57.12

IP Abuse Reports for 218.64.57.12:

This IP address has been reported a total of 396 times from 85 distinct sources. 218.64.57.12 was first reported on October 20th 2019, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
SleepyNerdLLC	20 Oct 2019	(mod_security) mod_security (id:230011) triggered by 218.64.57.12 (CN/China/12.57.64.218.broad.nc.jx ... show more(mod_security) mod_security (id:230011) triggered by 218.64.57.12 (CN/China/12.57.64.218.broad.nc.jx.dynamic.163data.com.cn): 5 in the last 3600 secs show less	Brute-Force
security.rdmc.fr	19 Oct 2019	Automatic report - Banned IP Access	Web App Attack
applemooz	18 Oct 2019	[munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:03 +0200] "POST /[munged]: HTTP/1.1" 200 8165 "htt ... show more[munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:03 +0200] "POST /[munged]: HTTP/1.1" 200 8165 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:04 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:05 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:06 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:07 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [18/Oct/2019:22:17:08 +0200] show less	Brute-Force Web App Attack
smtp.com.es	17 Oct 2019	Brute force attempt	Brute-Force Exploited Host
lgirvin	17 Oct 2019	Jun 12 15:53:47 mercury auth[27491]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 ... show moreJun 12 15:53:47 mercury auth[27491]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=218.64.57.12 ... show less	Hacking Brute-Force
computerdoc	16 Oct 2019	failed_logins	Brute-Force
applemooz	14 Oct 2019	[munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:34 +0200] "POST /[munged]: HTTP/1.1" 200 7916 "htt ... show more[munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:34 +0200] "POST /[munged]: HTTP/1.1" 200 7916 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:35 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:35 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:36 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:37 +0200] "POST /[munged]: HTTP/1.1" 200 4052 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 218.64.57.12 - - [15/Oct/2019:02:00:38 +0200] show less	Brute-Force Web App Attack
opcenter	14 Oct 2019	Oct 13 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\<v ... show moreOct 13 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS, session=\<AiE8aM+UxqnaQDkM\> Oct 14 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS, session=\<oB6WNdiUhajaQDkM\> Oct 14 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS, session=\<cW2EIdqUCOTaQDkM\> show less	Brute-Force
security.rdmc.fr	13 Oct 2019	Automatic report - Banned IP Access	Web App Attack
SleepyNerdLLC	13 Oct 2019	(mod_security) mod_security (id:230011) triggered by 218.64.57.12 (CN/China/12.57.64.218.broad.nc.jx ... show more(mod_security) mod_security (id:230011) triggered by 218.64.57.12 (CN/China/12.57.64.218.broad.nc.jx.dynamic.163data.com.cn): 5 in the last 3600 secs show less	Brute-Force
fremnet.net	13 Oct 2019	invalid login attempt	Email Spam Brute-Force
opcenter	12 Oct 2019	Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\<f ... show moreOct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS: Disconnected, session=\<mhNYwq6UVUraQDkM\> Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS: Disconnected, session=\<R7Fu/bCU4lfaQDkM\> Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS: Disconnected, session=\<wAKJOrWUH03aQDkM\> show less	Brute-Force
DragonFly	10 Oct 2019		Hacking Brute-Force
Smel	10 Oct 2019	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
opcenter	10 Oct 2019	Oct 9 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<c ... show moreOct 9 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS: Disconnected, session=\<ZvfvJniUn47aQDkM\> Oct 9 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS, session=\<0ozil32UEizaQDkM\> Oct 10 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]REMOVED.de\>, method=PLAIN, rip=218.64.57.12, lip=REMOVED, TLS, session=\</+qFs4qU5bnaQDkM\> show less	Brute-Force