JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.112.19.104

212.112.19.104 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 0%: ?

ISP	PRIVATE INTERNET ACCESS, Inc Url: https://privateinternetaccess.com/
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Hostname(s)	212-112-19-104.static.glesys.net
Domain Name	privateinternetaccess.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.112.19.104

Whois 212.112.19.104

IP Abuse Reports for 212.112.19.104:

This IP address has been reported a total of 73 times from 54 distinct sources. 212.112.19.104 was first reported on January 19th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-03-26 05:10:37 (2 months ago)	212.112.19.104 (SE/Sweden/212-112-19-104.static.glesys.net), more than 40 Apache 403 hits	Hacking
🇧🇪 cmbplf	2026-03-25 20:26:27 (2 months ago)	150 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7 ... show more 150 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319 147 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802 141 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006) 141 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 141 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 139 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 128 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2 125 request show less	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-03-17 01:38:46 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 lp	2026-02-18 00:03:52 (3 months ago)	Email account brute force: 4 attempts were recorded from 212.112.19.104 2026-02-17T23:26:37+01:00 wa ... show more Email account brute force: 4 attempts were recorded from 212.112.19.104 2026-02-17T23:26:37+01:00 warning: unknown[212.112.19.104]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-17T23:26:37+01:00 warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-17T23:26:38+01:00 warning: unknown[212.112.19.104]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-17T23:26:39+01:00 warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 VHosting	2026-02-17 22:26:30 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇧🇷 SvrAdmin	2025-12-31 04:59:12 (5 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 212.112.19.104 (DK/Denmark/212-112-19-104.static.glesys ... show more [101] (smtpauth) Failed SMTP AUTH login from 212.112.19.104 (DK/Denmark/212-112-19-104.static.glesys.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-31 01:56:54 dovecot_login authenticator failed for (ADMIN) [212.112.19.104]:15519: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:56:54 dovecot_login authenticator failed for (ADMIN) [212.112.19.104]:47881: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:59:09 dovecot_login authenticator failed for (ADMIN) [212.112.19.104]:23508: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:59:09 dovecot_login authenticator failed for (ADMIN) [212.112.19.104]:1543: 535 Incorrect authentication data ([email protected]) 2025-12-31 01:59:09 dovecot_login authenticator failed for (ADMIN) [212.112.19.104]:32669: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 SvrAdmin	2025-12-30 08:43:09 (5 months ago)	[315] (smtpauth) Failed SMTP AUTH login from 212.112.19.104 (DK/Denmark/212-112-19-104.static.glesys ... show more [315] (smtpauth) Failed SMTP AUTH login from 212.112.19.104 (DK/Denmark/212-112-19-104.static.glesys.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 30 05:43:05 cwp01 postfix/smtpd[23777]: warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 05:43:05 cwp01 postfix/smtpd[23778]: warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 05:43:05 cwp01 postfix/smtpd[23780]: warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 05:43:05 cwp01 postfix/smtpd[23776]: warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 30 05:43:05 cwp01 postfix/smtpd[23779]: warning: unknown[212.112.19.104]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2025-12-30 08:43:03 (5 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇹🇭 thaizone.com	2025-12-17 11:54:38 (5 months ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇮🇹 VHosting	2025-12-17 11:53:57 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 dsl	2025-11-28 21:48:59 (6 months ago)	Nov 28 21:48:57 dabeau sshd[13716]: Invalid user pi from 212.112.19.104 port 13795 Nov 28 21:48:57 d ... show more Nov 28 21:48:57 dabeau sshd[13716]: Invalid user pi from 212.112.19.104 port 13795 Nov 28 21:48:57 dabeau sshd[13716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.112.19.104 Nov 28 21:48:58 dabeau sshd[13716]: Failed password for invalid user pi from 212.112.19.104 port 13795 ssh2 ... show less	Brute-Force SSH
🇺🇸 webgobe	2025-08-19 11:03:59 (9 months ago)	wew-Joomla User : try to access forms...	Hacking
🇹🇷 rtbh.com.tr	2025-08-06 20:08:05 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-05 20:08:05 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 diego	2025-08-05 04:39:24 (10 months ago)	[rede-168-134] (sshd) Failed SSH login from 212.112.19.104 (SE/Sweden/212-112-19-104.static.glesys.n ... show more [rede-168-134] (sshd) Failed SSH login from 212.112.19.104 (SE/Sweden/212-112-19-104.static.glesys.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 5 01:39:02 sshd[31137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.112.19.104 user=[USERNAME] Aug 5 01:39:04 sshd[31137]: Failed password for [USERNAME] from 212.112.19.104 port 15721 ssh2 Aug 5 01:39:09 sshd[31142]: Invalid user [USERNAME] from 212.112.19.104 port 17738 Aug 5 01:39:13 sshd[31142]: Failed password for invalid user [USERNAME] from 212.112.19.104 port 17738 ssh2 Aug 5 01:39:19 sshd[31149]: Invalid user [USERNAME] from 212. show less	Port Scan

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇰 188.44.20.30

🇧🇪 158.173.67.25

🇫🇷 84.247.169.208

🇺🇸 18.190.15.50

🇷🇴 2.57.121.25

🇺🇸 2604:a940:301:225:0:1d::

🇩🇪 193.124.20.237

🇨🇱 186.189.75.111

🇻🇳 171.231.192.219

🇧🇷 131.221.142.87

🇵🇭 103.25.220.158

🇸🇦 51.211.81.121

🇺🇸 50.116.72.139

🇨🇳 47.95.255.24

🇮🇳 27.123.114.134

🇲🇩 217.19.215.97

🇮🇶 188.72.10.216

🇫🇷 176.129.57.20

🇸🇦 151.173.22.54

🇮🇳 122.173.31.120