JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.5.198

172.104.5.198 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-5-198.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.5.198

Whois 172.104.5.198

IP Abuse Reports for 172.104.5.198:

This IP address has been reported a total of 44 times from 28 distinct sources. 172.104.5.198 was first reported on July 20th 2021, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 thaizone.com	2026-06-18 20:26:27 (17 hours ago)	Too many incorrect password attempts (SM10) #5	Phishing Email Spam Brute-Force Exploited Host
🇫🇷 [email protected]	2026-06-18 20:05:27 (18 hours ago)	Jun 18 21:54:58 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<i ... show more Jun 18 21:54:58 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=141.94.194.45, session=<AgfujIxUuMasaAXG> Jun 18 21:58:34 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=141.94.194.45, session=<XJTMmYxUdtqsaAXG> Jun 18 21:58:45 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=141.94.194.45, session=<2T4ymoxUWsWsaAXG> Jun 18 22:03:28 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=141.94.194.45, session=<LsRLq4xUNuSsaAXG> Jun 18 22:05:26 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=141.94.194.45, session=<BKlasox ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 19:18:39 (18 hours ago)	Jun 18 21:11:57 odin dovecot: auth-worker(13141): sql([email protected],172.104.5.198,<LwI284tUUoKs ... show more Jun 18 21:11:57 odin dovecot: auth-worker(13141): sql([email protected],172.104.5.198,<LwI284tUUoKsaAXG>): unknown user Jun 18 21:11:59 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<LwI284tUUoKsaAXG> Jun 18 21:12:12 odin dovecot: auth-worker(13141): sql([email protected],172.104.5.198,<sAPY84tUtuKsaAXG>): unknown user Jun 18 21:12:14 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<sAPY84tUtuKsaAXG> Jun 18 21:18:38 odin dovecot: auth-worker(13141): sql([email protected],172.104.5.198,<Q+cZC4xULs2saAXG>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-18 18:39:07 (19 hours ago)	2026-06-18 12:25:57,648 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 172.104.5.198 20 ... show more 2026-06-18 12:25:57,648 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 172.104.5.198 2026-06-18 16:49:41,842 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 172.104.5.198 2026-06-18 20:39:06,607 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 172.104.5.198 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 16:43:09 (21 hours ago)	Jun 18 18:40:57 odin dovecot: auth-worker(3431): sql([email protected],172.104.5.198,<1kMu14lULIas ... show more Jun 18 18:40:57 odin dovecot: auth-worker(3431): sql([email protected],172.104.5.198,<1kMu14lULIasaAXG>): unknown user Jun 18 18:40:59 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<1kMu14lULIasaAXG> Jun 18 18:41:59 odin dovecot: auth-worker(3431): sql([email protected],172.104.5.198,<W5vi2olUfOusaAXG>): unknown user Jun 18 18:42:01 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<W5vi2olUfOusaAXG> Jun 18 18:43:08 odin dovecot: auth-worker(3431): sql([email protected],172.104.5.198,<yV4A34lUto6saAXG>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 15:51:22 (22 hours ago)	2026-06-18T18:51:21.524873+03:00 radionet dovecot: auth: passwd-file([email protected],172.104.5.198,<nT ... show more 2026-06-18T18:51:21.524873+03:00 radionet dovecot: auth: passwd-file([email protected],172.104.5.198,<nTDKJYlUbOisaAXG>): unknown user show less	Brute-Force
Anonymous	2026-06-18 15:28:54 (22 hours ago)	(PERMBLOCK) 172.104.5.198 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 172.104.5.198 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
Anonymous	2026-06-18 14:34:45 (23 hours ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 6 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇫🇷 Batz	2026-06-18 13:32:58 (1 day ago)	[172.104.5.198] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇹🇭 thaizone.com	2026-06-18 13:11:28 (1 day ago)	Too many incorrect password attempts (SM10) #3	Phishing Email Spam Brute-Force Exploited Host
🇩🇪 onlyops.app	2026-06-18 13:00:15 (1 day ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇳🇱 Godert Jan van Manen	2026-06-18 12:52:40 (1 day ago)	Jun 18 14:47:39 odin dovecot: auth-worker(20585): sql([email protected],172.104.5.198,<QnvYlIZUjo ... show more Jun 18 14:47:39 odin dovecot: auth-worker(20585): sql([email protected],172.104.5.198,<QnvYlIZUjo6saAXG>): unknown user Jun 18 14:47:41 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<QnvYlIZUjo6saAXG> Jun 18 14:50:30 odin dovecot: auth-worker(20585): sql([email protected],172.104.5.198,<3jD/noZUUNGsaAXG>): unknown user Jun 18 14:50:32 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=172.104.5.198, lip=178.162.131.122, session=<3jD/noZUUNGsaAXG> Jun 18 14:52:40 odin dovecot: auth-worker(20585): sql([email protected],172.104.5.198,<5U3DpoZU3IqsaAXG>): unknown user show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 12:33:10 (1 day ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 12:24:26 (1 day ago)	Too many failed attempts / attacks from 172.104.5.198	Brute-Force Port Scan Email Spam
🇩🇪 ecs.ge	2026-06-18 12:14:02 (1 day ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.15.146

🇰🇷 211.106.137.135

🇰🇷 211.46.188.16

🇻🇪 190.89.29.34

🇷🇺 188.168.86.6

🇮🇳 183.82.2.29

🇧🇷 179.0.122.80

🇮🇳 103.250.146.107

🇺🇿 94.158.58.42

🇺🇸 64.62.156.170

🇨🇳 60.24.209.82

🇺🇸 57.141.20.25

🇺🇸 57.141.0.2

🇵🇱 46.203.202.186

🇺🇸 45.33.16.52

🇮🇳 36.50.167.81

🇧🇪 35.205.73.104

🇧🇪 34.52.187.93

🇮🇳 223.185.132.181

🇨🇳 223.104.4.118