JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.100.29.84

159.100.29.84 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 50%: ?

50%

ISP	UltaHost Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214036
Domain Name	ultahost.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.100.29.84

Whois 159.100.29.84

IP Abuse Reports for 159.100.29.84:

This IP address has been reported a total of 14 times from 13 distinct sources. 159.100.29.84 was first reported on August 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 wHosts	2026-09-13 18:18:04 (2 days ago)	Blocked by Fail2Ban	Brute-Force Web App Attack
🇵🇱 Widmo	2026-09-13 03:17:59 (2 days ago)	unknown[159.100.29.84]: SASL LOGIN authentication failed unknown[159.100.29.84]: SASL LOGIN authenti ... show more unknown[159.100.29.84]: SASL LOGIN authentication failed unknown[159.100.29.84]: SASL LOGIN authentication failed show less	Brute-Force
🇮🇹 CoreTech srl	2026-09-12 10:17:33 (3 days ago)	is-6411d9d7 12:13:10.441 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-641 ... show more is-6411d9d7 12:13:10.441 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-6411d9d7 12:13:10.441 [159.100.29.84] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 12:13:10.576 [159.100.29.84] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 12:13:10.576 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-6411d9d7 12:13:10.711 [159.100.29.84] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 12:13:10.711 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-6411d9d7 12:13:10.841 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-6411d9d7 12:13:10.841 [159.100.29.84] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 12:13:10.974 [159.100.29.84] SMTP Login failed: Username or password is incorrect.is-6411d9d7 12:13:10.974 [159.100.29.84] SMTP Login failed: Incorrect password for user [[email protected]] show less	Brute-Force
🇫🇷 Dampen59	2026-09-04 15:44:15 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 159.100.29.84 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 159.100.29.84 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-04 10:43:19 dovecot_login authenticator failed for H=(8RLrTVAvt) [159.100.29.84]:62152: 535 Incorrect authentication data (set_id=rbaumann) 2026-09-04 10:43:25 dovecot_login authenticator failed for H=(Km1ABm) [159.100.29.84]:62412: 535 Incorrect authentication data (set_id=rbaumann) 2026-09-04 10:43:35 dovecot_login authenticator failed for H=(534kd4vnZb) [159.100.29.84]:62635: 535 Incorrect authentication data (set_id=rbaumann) 2026-09-04 10:43:52 dovecot_login authenticator failed for H=(UcFW57TG7) [159.100.29.84]:63247: 535 Incorrect authentication data (set_id=rbaumann) 2026-09-04 10:44:09 dovecot_login authenticator failed for H=(sBfIX20q) [159.100.29.84]:65247: 535 Incorrect authentication data (set_id=rbaumann) show less	Port Scan
🇬🇧 Aetherweb Ark	2026-09-03 13:19:42 (1 week ago)	cphulk brute force one-day block	Brute-Force
🇫🇷 UM3	2026-08-22 08:53:32 (3 weeks ago)	Exim Auth Failed	Brute-Force
🇨🇿 lp	2026-08-22 06:20:23 (3 weeks ago)	Email account brute force: 6 attempts were recorded from 159.100.29.84 2026-08-22T08:06:26+02:00 war ... show more Email account brute force: 6 attempts were recorded from 159.100.29.84 2026-08-22T08:06:26+02:00 warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-08-22T08:06:27+02:00 warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-08-22T08:06:27+02:00 warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-08-22T08:06:27+02:00 warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-08-22T08:06:27+02:00 warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-08-22T08:06:27+02:00 warning: unknown[159.100.29.84]: show less	Brute-Force
🇬🇧 iss-security-operations	2026-08-21 16:01:48 (3 weeks ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇩🇪 rh24	2026-08-17 23:01:46 (4 weeks ago)	(smtpauth) Failed SMTP AUTH login from 159.100.29.84 (DE/Germany/-)	Brute-Force
🇺🇸 integrantservices.com	2026-08-17 18:35:38 (4 weeks ago)	(smtpauth) Failed SMTP AUTH login from 159.100.29.84 (DE/Germany/-)	Brute-Force
🇬🇧 iss-security-operations	2026-08-16 16:02:34 (4 weeks ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇺🇸 IndigoRidge	2026-08-16 06:31:41 (4 weeks ago)	Aug 16 02:31:34 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authenticati ... show more Aug 16 02:31:34 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] Aug 16 02:31:36 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] Aug 16 02:31:37 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] Aug 16 02:31:39 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] Aug 16 02:31:40 car postfix/smtpd[2511533]: warning: unknown[159.100.29.84]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇦🇹 joe-abuse	2026-08-15 21:45:07 (1 month ago)	2026-08-15T23:45:06.669988+02:00 ucs1 dovecot: auth-worker(585325): conn unix:auth-worker (pid=54398 ... show more 2026-08-15T23:45:06.669988+02:00 ucs1 dovecot: auth-worker(585325): conn unix:auth-worker (pid=543983,uid=121): auth-worker<1>: pam(admin,159.100.29.84): unknown user (given password: admin) ... show less	Brute-Force
🇺🇸 Ghost Rider	2026-08-15 20:49:39 (1 month ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.92.7.247

🇳🇱 193.176.31.196

🇫🇷 152.228.195.238

🇺🇸 71.75.155.93

🇺🇸 20.169.90.214

🇦🇺 2602:f71d:200::20

🇹🇼 220.133.95.63

🇮🇩 182.253.79.194

🇧🇷 181.233.95.240

🇧🇷 177.220.170.28

🇺🇸 172.202.106.102

🇺🇸 141.148.165.230

🇨🇳 120.48.33.69

🇳🇱 95.97.203.206

🇫🇷 91.196.152.34

🇳🇱 45.140.222.112

🇺🇸 20.150.210.180

🇺🇸 20.106.212.193

🇨🇳 14.103.53.119

🇺🇸 3.129.187.38