AbuseIPDB » 219.237.48.130

Check an IP Address, Domain Name, or Subnet

e.g. 3.233.217.106, microsoft.com, or 5.188.10.0/24

219.237.48.130 was found in our database!

This IP was reported 476 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Sanxin Shidai Co. Ltd.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	cnispgroup.com
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 219.237.48.130

Whois 219.237.48.130

IP Abuse Reports for 219.237.48.130:

This IP address has been reported a total of 476 times from 45 distinct sources. 219.237.48.130 was first reported on June 9th 2021, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
www.tana.it	49 minutes ago	dictionary attack	Brute-Force
Anonymous	3 hours ago	IMAP/POP3 Bruteforce attempt	Brute-Force
Godert Jan van Manen	4 hours ago	Aug 15 01:27:14 odin dovecot: auth-worker(14117): sql(nologin,219.237.48.130,<Kmj12jvmsXXb7TCC>): un ... show moreAug 15 01:27:14 odin dovecot: auth-worker(14117): sql(nologin,219.237.48.130,<Kmj12jvmsXXb7TCC>): unknown user Aug 15 01:27:16 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<Kmj12jvmsXXb7TCC> Aug 15 01:27:22 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<zGIW2zvmsnXb7TCC> Aug 15 01:27:31 odin dovecot: auth-worker(14117): sql(info,219.237.48.130,<QNl52zvms3Xb7TCC>): unknown user Aug 15 01:27:33 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=<info>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<QNl52zvms3Xb7TCC> show less	Brute-Force
GeekOnTheHill	4 hours ago	Multiple failed POP3 logins	Brute-Force
digitalnexus	6 hours ago	2022-08-15 00:03:36 auth: Info: passwd-file(nologin,219.237.48.130,<JjAo2Tnm43zb7TCC>): unknown user ... show more2022-08-15 00:03:36 auth: Info: passwd-file(nologin,219.237.48.130,<JjAo2Tnm43zb7TCC>): unknown user 2022-08-15 00:03:38 pop3-login: Info: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=109.74.201.17, session=<JjAo2Tnm43zb7TCC> 2022-08-15 00:03:46 auth: Info: passwd-file(<EMAIL-PROTECTED>.gr,219.237.48.130,<SB+C2Tnm5Hzb7TCC>): unknown user 2022-08-15 00:03:48 pop3-login: Info: Disconnected: Aborted login ... show less	Brute-Force
JCB	7 hours ago	pop3-login	Brute-Force
Godert Jan van Manen	16 hours ago	Aug 14 13:56:34 odin dovecot: auth-worker(31191): sql(nologin,219.237.48.130,<IgbwNDLmGHXb7TCC>): un ... show moreAug 14 13:56:34 odin dovecot: auth-worker(31191): sql(nologin,219.237.48.130,<IgbwNDLmGHXb7TCC>): unknown user Aug 14 13:56:36 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<IgbwNDLmGHXb7TCC> Aug 14 13:56:43 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<QfkaNTLmGXXb7TCC> Aug 14 13:56:51 odin dovecot: auth-worker(31191): sql(info,219.237.48.130,<W7yANTLmGnXb7TCC>): unknown user Aug 14 13:56:53 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=<info>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<W7yANTLmGnXb7TCC> show less	Brute-Force
tmiland	17 hours ago	(pop3d) Failed POP3 login from 219.237.48.130 (CN/China/-): 3 in the last 3600 secs	Brute-Force
D3monite	17 hours ago	Attempted Brute Force (dovecot)	Brute-Force
kais-universum.de	17 hours ago	Aug 14 12:20:12 h2880623 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): use ... show moreAug 14 12:20:12 h2880623 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=85.214.168.201, session=<xkTj2zDmjybb7TCC> Aug 14 12:20:22 h2880623 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 7 secs): user=<[email protected]>, method=PLAIN, rip=219.237.48.130, lip=85.214.168.201, session=<elFN3DDmkCbb7TCC> Aug 14 12:21:21 h2880623 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=<info>, method=PLAIN, rip=219.237.48.130, lip=85.214.168.201, session=<1AnG3DDmkSbb7TCC> ... show less	Brute-Force
Steve	18 hours ago	Attempts against Pop3/IMAP	Brute-Force
www.tana.it	13 Aug 2022	dictionary attack	Brute-Force
Godert Jan van Manen	13 Aug 2022	Aug 14 03:29:26 odin dovecot: auth-worker(22677): sql(nologin,219.237.48.130,<gywecinmkHTb7TCC>): un ... show moreAug 14 03:29:26 odin dovecot: auth-worker(22677): sql(nologin,219.237.48.130,<gywecinmkHTb7TCC>): unknown user Aug 14 03:29:28 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<gywecinmkHTb7TCC> Aug 14 03:29:34 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<wABJcinmkXTb7TCC> Aug 14 03:29:43 odin dovecot: auth-worker(22677): sql(info,219.237.48.130,<9/CmcinmknTb7TCC>): unknown user Aug 14 03:29:45 odin dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=<info>, method=PLAIN, rip=219.237.48.130, lip=178.162.131.122, session=<9/CmcinmknTb7TCC> show less	Brute-Force
digitalnexus	13 Aug 2022	2022-08-13 21:28:44 auth: Info: passwd-file(nologin,219.237.48.130,<RoJ6kSPmTHvb7TCC>): unknown user ... show more2022-08-13 21:28:44 auth: Info: passwd-file(nologin,219.237.48.130,<RoJ6kSPmTHvb7TCC>): unknown user 2022-08-13 21:28:46 pop3-login: Info: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<nologin>, method=PLAIN, rip=219.237.48.130, lip=109.74.201.17, session=<RoJ6kSPmTHvb7TCC> 2022-08-13 21:28:53 auth: Info: passwd-file(<EMAIL-PROTECTED>.gr,219.237.48.130,<nmLMkSPmTXvb7TCC>): unknown user 2022-08-13 21:28:55 pop3-login: Info: Disconnected: Aborted login b ... show less	Brute-Force
Anonymous	13 Aug 2022	IMAP/POP3 Bruteforce attempt	Brute-Force