JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.36.104.239

101.36.104.239 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.36.104.239

Whois 101.36.104.239

IP Abuse Reports for 101.36.104.239:

This IP address has been reported a total of 82 times from 44 distinct sources. 101.36.104.239 was first reported on April 4th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇾 SecOpsSL	2026-08-15 02:19:55 (2 hours ago)	Aug 14 23:12:09 mail postfix/smtps/smtpd\[13817\]: warning: unknown\[101.36.104.239\]: SASL PLAIN au ... show more Aug 14 23:12:09 mail postfix/smtps/smtpd\[13817\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure Aug 14 23:15:05 mail postfix/smtps/smtpd\[11650\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure Aug 14 23:19:54 mail postfix/smtps/smtpd\[11650\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇮🇩 xveil	2026-08-14 23:37:06 (5 hours ago)	2026-08-15T06:37:05.073888 mail-honeypot postfix/submission/smtpd[14701]: warning: unknown[101.36.10 ... show more 2026-08-15T06:37:05.073888 mail-honeypot postfix/submission/smtpd[14701]: warning: unknown[101.36.104.239]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇵🇾 SecOpsSL	2026-08-14 20:03:55 (8 hours ago)	Aug 14 16:55:11 mail postfix/smtps/smtpd\[14878\]: warning: unknown\[101.36.104.239\]: SASL PLAIN au ... show more Aug 14 16:55:11 mail postfix/smtps/smtpd\[14878\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure Aug 14 16:55:53 mail postfix/smtps/smtpd\[14878\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure Aug 14 17:03:54 mail postfix/smtps/smtpd\[14878\]: warning: unknown\[101.36.104.239\]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇬🇧 [email protected]	2026-08-14 00:30:24 (1 day ago)	...	Brute-Force SSH
🇮🇩 sockominfo	2026-08-14 00:00:59 (1 day ago)	Zimbra: Login failures from malicious IP: 101.36.104.239. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 101.36.104.239. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-13 23:00:11 (1 day ago)	Zimbra: Login failures from malicious IP: 101.36.104.239. Threat Score: 5.2/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 101.36.104.239. Threat Score: 5.2/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇮 notelseit	2026-08-12 18:17:44 (2 days ago)	2026-08-12T20:17:08.334122+02:00 mail postfix/smtps/smtpd[3681920]: warning: unknown[101.36.104.239] ... show more 2026-08-12T20:17:08.334122+02:00 mail postfix/smtps/smtpd[3681920]: warning: unknown[101.36.104.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-08-12T20:17:08.804381+02:00 mail postfix/smtps/smtpd[3681920]: disconnect from unknown[101.36.104.239] ehlo=1 auth=0/1 unknown=0/1 commands=1/3 2026-08-12T20:17:44.091159+02:00 mail postfix/submission/smtpd[3681577]: lost connection after STARTTLS from unknown[101.36.104.239] ... show less	Brute-Force Email Spam
🇩🇪 digico_mt	2026-08-12 11:02:55 (2 days ago)	Aug 12 13:02:55 digico postfix/submission/smtpd[784045]: warning: unknown[101.36.104.239]: SASL PLAI ... show more Aug 12 13:02:55 digico postfix/submission/smtpd[784045]: warning: unknown[101.36.104.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Aug 12 13:02:55 digico postfix/submission/smtpd[784045]: lost connection after AUTH from unknown[101.36.104.239] Aug 12 13:02:55 digico postfix/submission/smtpd[784045]: disconnect from unknown[101.36.104.239] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Port Scan
Anonymous	2026-08-12 10:33:10 (2 days ago)	SMTP AUTH 101.36.104.239 (SMTP_LOGIN_ATTEMPT)	Brute-Force
🇮🇩 xveil	2026-08-11 16:43:03 (3 days ago)	2026-08-11T23:43:01.376037 mail-honeypot postfix/submission/smtpd[30680]: warning: unknown[101.36.10 ... show more 2026-08-11T23:43:01.376037 mail-honeypot postfix/submission/smtpd[30680]: warning: unknown[101.36.104.239]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-11 12:34:01 (3 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇿🇦 maximonline.co.za	2026-08-11 01:00:04 (4 days ago)	Brute Force SMTP AUTH Attack	Brute-Force
Anonymous	2026-08-10 16:30:17 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-08-10 05:21:02 (4 days ago)	Authentication failure	Brute-Force
Anonymous	2026-08-10 03:36:21 (5 days ago)	Port scan and brute force attack	Port Scan Brute-Force

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.49

🇮🇳 103.194.243.199

🇱🇹 213.176.26.37

🇬🇧 212.38.189.186

🇨🇭 209.99.190.110

🇪🇹 196.190.220.199

🇵🇰 163.61.128.86

🇺🇸 162.216.150.35

🇺🇸 147.185.132.42

🇸🇬 101.47.159.50

🇨🇦 85.217.149.70

🇧🇷 69.6.222.101

🇨🇳 47.94.93.178

🇧🇷 205.210.31.213

🇦🇷 200.59.104.110

🇺🇸 173.77.160.50

🇵🇰 103.194.93.144

🇳🇱 91.92.47.19

🇺🇸 47.251.179.212

🇺🇸 17.241.75.160