JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 218.78.100.142

218.78.100.142 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 218.78.100.142

Whois 218.78.100.142

IP Abuse Reports for 218.78.100.142:

This IP address has been reported a total of 28 times from 15 distinct sources. 218.78.100.142 was first reported on July 27th 2021, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 codabar	2021-11-17 00:28:48 (4 years ago)	SMTP login attempts.	Brute-Force
Anonymous	2021-11-12 04:14:05 (4 years ago)	Nov 12 01:14:01 propaganda sshd[11206]: Connection from 218.78.100.142 port 34104 on 10.0.0.161 port ... show more Nov 12 01:14:01 propaganda sshd[11206]: Connection from 218.78.100.142 port 34104 on 10.0.0.161 port 22 rdomain "" Nov 12 01:14:04 propaganda sshd[11206]: Invalid user admin from 218.78.100.142 port 34104 show less	Brute-Force SSH
🇬🇧 Paul Smith	2021-11-07 21:42:27 (4 years ago)	Email Auth Brute force attack 3/1 in last day	Brute-Force
🇬🇧 Paul Smith	2021-11-06 22:40:36 (4 years ago)	Email Auth Brute force attack 2/1 in last day	Brute-Force
🇺🇸 Ethan Williams	2021-10-28 04:00:00 (4 years ago)	Attempted Brute force of corporate account	Brute-Force
Anonymous	2021-10-23 04:28:10 (4 years ago)	(imapd) Failed IMAP login from 218.78.100.142 (CN/China/142.100.78.218.dial.xw.sh.dynamic.163data.co ... show more (imapd) Failed IMAP login from 218.78.100.142 (CN/China/142.100.78.218.dial.xw.sh.dynamic.163data.com.cn): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_IMAPD; Logs: Oct 23 03:34:53 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 59 secs): user=<[email protected]>, method=PLAIN, rip=218.78.100.142, lip=209.188.21.35, TLS: Connection closed, session=<JelwF/bObsraTmSO> Oct 23 15:54:20 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 60 secs): user=<marketing>, method=PLAIN, rip=218.78.100.142, lip=209.188.21.35, TLS: Connection closed, session=<UwXcawDP7JPaTmSO> Oct 23 16:28:06 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 58 secs): user=<marketing>, method=PLAIN, rip=218.78.100.142, lip=209.188.21.35, TLS: Connection closed, session=<7oW95ADP2pLaTmSO> show less	Port Scan
🇮🇳 A B	2021-10-18 14:01:37 (4 years ago)	none	FTP Brute-Force
🇩🇪 creoline GmbH	2021-10-16 01:26:08 (4 years ago)	E-Mail Spam (RBL) [T616A7CDDL00000004]	Email Spam
🇬🇧 D3monite	2021-10-15 20:32:28 (4 years ago)	Attempted Brute Force (dovecot)	Brute-Force
🇩🇪 ipcop.net	2021-10-14 04:38:29 (4 years ago)	Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.7 ... show more Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:40 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:53 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:12 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:29 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-14 04:38:29 (4 years ago)	Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.7 ... show more Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:40 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:53 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:12 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:29 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-14 04:38:29 (4 years ago)	Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.7 ... show more Oct 14 00:37:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:40 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:37:53 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:12 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user Oct 14 00:38:29 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<Hvqem0PO4oLaTmSO>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-14 00:08:15 (4 years ago)	Oct 13 20:07:32 mail.srvfarm.net dovecot: auth-worker(700673): sql(careers,218.78.100.142,<WZ8L1j/OP ... show more Oct 13 20:07:32 mail.srvfarm.net dovecot: auth-worker(700673): sql(careers,218.78.100.142,<WZ8L1j/OPK7aTmSO>): unknown user Oct 13 20:07:41 mail.srvfarm.net dovecot: auth-worker(700673): sql(careers,218.78.100.142,<WZ8L1j/OPK7aTmSO>): unknown user Oct 13 20:07:53 mail.srvfarm.net dovecot: auth-worker(700673): sql(careers,218.78.100.142,<WZ8L1j/OPK7aTmSO>): unknown user Oct 13 20:08:13 mail.srvfarm.net dovecot: auth-worker(700673): sql(careers,218.78.100.142,<WZ8L1j/OPK7aTmSO>): unknown user Oct 13 20:08:15 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 43 secs): user=<careers>, method=PLAIN, rip=218.78.100.142, lip=185.118.197.126, TLS: Connection closed, session=<WZ8L1j/OPK7aTmSO> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 19:33:08 (4 years ago)	Oct 13 15:32:26 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.1 ... show more Oct 13 15:32:26 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:32:34 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:32:47 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:33:05 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:33:08 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 42 secs): user=<[email protected]>, method=PLAIN, rip=218.78.100.142, lip=185.118.197.126, TLS: Connection closed, session=<8L8s/jvO2OXaTmSO> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 19:33:08 (4 years ago)	Oct 13 15:32:26 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.1 ... show more Oct 13 15:32:26 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:32:34 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:32:47 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:33:05 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],218.78.100.142,<8L8s/jvO2OXaTmSO>): unknown user Oct 13 15:33:08 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 42 secs): user=<[email protected]>, method=PLAIN, rip=218.78.100.142, lip=185.118.197.126, TLS: Connection closed, session=<8L8s/jvO2OXaTmSO> show less	Fraud VoIP Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.63.202.170

🇭🇰 185.227.153.56

🇯🇴 176.28.166.51

🇺🇸 172.98.33.85

🇩🇪 167.94.146.36

🇿🇦 165.73.183.232

🇬🇧 149.71.229.132

🇵🇭 112.208.70.94

🇺🇸 107.172.88.206

🇮🇳 65.0.30.14

🇮🇪 34.243.241.255

🇺🇸 34.223.225.98

🇭🇰 20.205.122.114

🇨🇭 20.203.162.38

🇧🇷 20.197.227.41

🇨🇦 15.223.213.82

🇯🇵 13.114.128.208

🇨🇱 200.54.211.53

🇳🇱 185.136.15.13

🇧🇷 177.11.196.79