JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.228.21.104

140.228.21.104 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities NA LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	iana.org
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.228.21.104

Whois 140.228.21.104

IP Abuse Reports for 140.228.21.104:

This IP address has been reported a total of 54 times from 42 distinct sources. 140.228.21.104 was first reported on February 15th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-04-21 11:42:58 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-21 07:42:30 dovecot_plain authenticator failed for H=([10.5.18.204]) [140.228.21.104]:8367: 535 Incorrect authentication data ([email protected]) 2026-04-21 07:42:36 dovecot_login authenticator failed for H=([10.5.18.204]) [140.228.21.104]:8367: 535 Incorrect authentication data ([email protected]) 2026-04-21 07:42:42 dovecot_plain authenticator failed for H=([10.5.18.204]) [140.228.21.104]:17138: 535 Incorrect authentication data ([email protected]) 2026-04-21 07:42:48 dovecot_login authenticator failed for H=([10.5.18.204]) [140.228.21.104]:17138: 535 Incorrect authentication data ([email protected]) 2026-04-21 07:42:56 dovecot_plain authenticator failed for H=([10.5.18.204]) [140.228.21.104]:23247: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇷🇸 Smel	2026-04-19 06:04:05 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇵🇱 KZGM	2026-04-19 03:40:41 (2 months ago)	smtp - too many invalid logins. Banned by fail2ban.	Brute-Force
Anonymous	2026-04-19 02:36:01 (2 months ago)	...	Brute-Force
🇫🇷 Dampen59	2026-04-18 22:15:51 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-19 00:15:22 dovecot_plain authenticator failed for H=([10.5.18.173]) [140.228.21.104]:47799: 535 Incorrect authentication data ([email protected]) 2026-04-19 00:15:28 dovecot_login authenticator failed for H=([10.5.18.173]) [140.228.21.104]:47799: 535 Incorrect authentication data ([email protected]) 2026-04-19 00:15:34 dovecot_plain authenticator failed for H=([10.5.18.173]) [140.228.21.104]:11049: 535 Incorrect authentication data ([email protected]) 2026-04-19 00:15:40 dovecot_login authenticator failed for H=([10.5.18.173]) [140.228.21.104]:11049: 535 Incorrect authentication data ([email protected]) 2026-04-19 00:15:49 dovecot_plain authenticator failed for H=([10.5.18.173]) [140.228.21.104]:29615: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇨🇿 lp	2026-03-28 22:19:53 (2 months ago)	Email account brute force: 6 attempts were recorded from 140.228.21.104 2026-03-28T22:32:24+01:00 wa ... show more Email account brute force: 6 attempts were recorded from 140.228.21.104 2026-03-28T22:32:24+01:00 warning: unknown[140.228.21.104]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T22:32:25+01:00 warning: unknown[140.228.21.104]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-28T22:32:26+01:00 warning: unknown[140.228.21.104]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T22:32:26+01:00 warning: unknown[140.228.21.104]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-28T22:32:34+01:00 warning: unknown[140.228.21.104]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T22:32:34+01:00 warning: unknown[140.228.21.104]: SASL LOGIN authentication failed: show less	Brute-Force
🇩🇪 netclix.gr	2026-03-28 20:37:12 (2 months ago)	(mysaslmatch) Failed SASL login from 140.228.21.104 (CA/Canada/-): 2 in the last 4600 secs; Ports: * ... show more (mysaslmatch) Failed SASL login from 140.228.21.104 (CA/Canada/-): 2 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Mar 28 22:37:07 anak postfix/smtpd[1477807]: warning: unknown[140.228.21.104]: SASL PLAIN authentication failed: authentication failure Mar 28 22:37:08 anak postfix/smtpd[1477807]: warning: unknown[140.228.21.104]: SASL LOGIN authentication failed: authentication failure show less	Port Scan
Anonymous	2026-03-28 20:20:52 (2 months ago)	2026-03-28T13:20:43.988773-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logna ... show more 2026-03-28T13:20:43.988773-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=bradk72015 rhost=140.228.21.104 2026-03-28T13:20:52.360946-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=bradk72015 rhost=140.228.21.104 ... show less	Brute-Force SSH
🇧🇷 SvrAdmin	2026-03-28 20:17:19 (2 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-03-28 17:16:47 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:23511: 535 Incorrect authentication data ([email protected]) 2026-03-28 17:16:53 dovecot_login authenticator failed for H=([10.5.18.176]) [140.228.21.104]:23511: 535 Incorrect authentication data ([email protected]) 2026-03-28 17:17:10 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:42322: 535 Incorrect authentication data ([email protected]) 2026-03-28 17:17:12 dovecot_login authenticator failed for H=([10.5.18.176]) [140.228.21.104]:42322: 535 Incorrect authentication data ([email protected]) 2026-03-28 17:17:15 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:39694: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇮🇩 xveil	2026-03-28 19:57:26 (2 months ago)	2026-03-29T02:57:24.519424 mail-honeypot postfix/submission/smtpd[15648]: warning: unknown[140.228.2 ... show more 2026-03-29T02:57:24.519424 mail-honeypot postfix/submission/smtpd[15648]: warning: unknown[140.228.21.104]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇷🇴 clauss	2026-03-28 19:36:02 (2 months ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇳🇱 big-cloud.nl	2026-03-26 21:13:28 (3 months ago)	Unauthorized SMTP connection attempt	Brute-Force
🇺🇸 Ghost Rider	2026-03-26 21:08:08 (3 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇺🇸 bigscoots.com	2026-03-26 20:53:57 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-26 16:53:26 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:15573: 535 Incorrect authentication data ([email protected]) 2026-03-26 16:53:32 dovecot_login authenticator failed for H=([10.5.18.176]) [140.228.21.104]:15573: 535 Incorrect authentication data ([email protected]) 2026-03-26 16:53:38 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:62748: 535 Incorrect authentication data ([email protected]) 2026-03-26 16:53:44 dovecot_login authenticator failed for H=([10.5.18.176]) [140.228.21.104]:62748: 535 Incorrect authentication data ([email protected]) 2026-03-26 16:53:52 dovecot_plain authenticator failed for H=([10.5.18.176]) [140.228.21.104]:21221: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇸🇬 bioxten.com	2026-03-26 20:48:22 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/Quebec/Montreal/-/[AS174 COGENT-174 ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.104 (CA/Canada/Quebec/Montreal/-/[AS174 COGENT-174]): 10 in the last 3600 secs show less	Brute-Force Hacking

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.219

🇲🇾 180.73.200.163

🇺🇸 162.216.149.200

🇺🇸 152.32.182.8

🇺🇸 147.185.132.252

🇺🇸 147.185.132.246

🇺🇸 147.185.132.234

🇹🇭 118.194.250.113

🇮🇳 115.245.231.170

🇮🇳 103.220.82.84

🇮🇳 103.24.135.212

🇳🇱 45.148.10.141

🇸🇬 43.159.51.254

🇺🇸 13.90.206.6

🇧🇪 198.235.24.240

🇨🇱 186.64.123.124

🇻🇪 181.233.91.183

🇦🇷 181.169.42.89

🇺🇸 147.185.132.222

🇺🇸 147.185.132.207