JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.18.104.201

212.18.104.201 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 81%: ?

81%

ISP	GLOBAL CONNECTIVITY SOLUTIONS LLP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215540
Hostname(s)	31081.ip-ptr.tech
Domain Name	gir.network
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.18.104.201

Whois 212.18.104.201

IP Abuse Reports for 212.18.104.201:

This IP address has been reported a total of 34 times from 14 distinct sources. 212.18.104.201 was first reported on October 14th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇾 SecOpsSL	2026-10-22 09:21:17 (10 hours ago)	Oct 22 06:21:14 mail postfix/smtps/smtpd[28750]: warning: unknown[212.18.104.201]: SASL LOGIN authen ... show more Oct 22 06:21:14 mail postfix/smtps/smtpd[28750]: warning: unknown[212.18.104.201]: SASL LOGIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇩🇰 powerhostingdk	2026-10-21 19:46:41 (1 day ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force
🇨🇦 DidierMX	2026-10-21 18:52:11 (1 day ago)	Wazuh Alert: Exim Auth Failed from 212.18.104.201	Brute-Force Web App Attack
Anonymous	2026-10-21 00:12:56 (1 day ago)	Authentication failure	Brute-Force
🇸🇮 basing	2026-10-20 23:08:57 (1 day ago)	2026-10-21 00:08:57 kb SASL PLAIN auth failed: rhost=212.18.104.201...	Brute-Force
🇮🇩 aaKenshin	2026-10-20 22:54:37 (1 day ago)	Suspicious activity detected from IP 212.18.104.201 based on mailserver logs. Sample logs: 2026-10-2 ... show more Suspicious activity detected from IP 212.18.104.201 based on mailserver logs. Sample logs: 2026-10-21 06:52:47,688 INFO [qtp2102534528-24831] [ip=172.16.0.182;oip=212.18.104.201;oport=52203;oproto=smtp;port=32892;soapId=5377037f;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-10-21 06:52:47,688 INFO [qtp2102534528-24831] [ip=172.16.0.182;oip=212.18.104.201;oport=52203;oproto=smtp;port=32892;soapId=5377037f;] SoapEngine - handler exception: authentication failed for [], account not found 2026-10-21 06:52:47,688 INFO [qtp2102534528-24831] [ip=172.16.0.182;oip=212.18.104.201;oport=52203;oproto=smtp;port=32892;soapId=5377037f;] soap - AuthRequest elapsed=1 2026-10-21 06:54:26,618 INFO [qtp2102534528-24850] [name=*@.id;ip=172.16.0.182;oip=212.18.104.201;oport=62655;oproto=smtp;port=38172;soapId=53770383;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invali show less	Brute-Force
🇫🇷 UM3	2026-10-20 21:04:27 (1 day ago)	Exim Auth Failed	Brute-Force
🇩🇪 tall1oN	2026-10-20 20:42:48 (1 day ago)	2026-10-20T13:00:19.160292+02:00 kenny dovecot: auth-worker(3829394): conn unix:auth-worker (pid=380 ... show more 2026-10-20T13:00:19.160292+02:00 kenny dovecot: auth-worker(3829394): conn unix:auth-worker (pid=3807723,uid=107): auth-worker<1>: sql([email protected],212.18.104.201): unknown user 2026-10-20T13:00:21.035185+02:00 kenny dovecot: auth-worker(3829394): conn unix:auth-worker (pid=3807723,uid=107): auth-worker<2>: pam([email protected],212.18.104.201): pam_authenticate() failed: Authentication failure (Password mismatch?) 2026-10-20T22:42:47.602544+02:00 kenny dovecot: auth-worker(3962454): conn unix:auth-worker (pid=3904512,uid=107): auth-worker<1>: sql([email protected],212.18.104.201): unknown user ... show less	Brute-Force Email Spam
🇨🇦 DidierMX	2026-10-20 18:19:36 (2 days ago)	Wazuh Alert: Exim Auth Failed from 212.18.104.201	Brute-Force Web App Attack
🇫🇮 notelseit	2026-10-20 11:38:02 (2 days ago)	2026-10-20T13:37:29.228820+02:00 mail postfix/smtps/smtpd[3470298]: lost connection after CONNECT fr ... show more 2026-10-20T13:37:29.228820+02:00 mail postfix/smtps/smtpd[3470298]: lost connection after CONNECT from unknown[212.18.104.201] 2026-10-20T13:37:45.936049+02:00 mail postfix/smtps/smtpd[3471021]: lost connection after CONNECT from unknown[212.18.104.201] 2026-10-20T13:38:01.757355+02:00 mail postfix/smtps/smtpd[3470298]: lost connection after CONNECT from unknown[212.18.104.201] ... show less	Brute-Force Email Spam
🇩🇰 powerhostingdk	2026-10-20 08:54:11 (2 days ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force
🇨🇦 DidierMX	2026-10-19 16:25:35 (3 days ago)	Wazuh Alert: Exim Auth Failed from 212.18.104.201	Brute-Force Web App Attack
🇵🇾 SecOpsSL	2026-10-19 09:47:54 (3 days ago)	Oct 19 06:47:52 mail postfix/smtps/smtpd[35448]: warning: unknown[212.18.104.201]: SASL LOGIN authen ... show more Oct 19 06:47:52 mail postfix/smtps/smtpd[35448]: warning: unknown[212.18.104.201]: SASL LOGIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇨🇿 lp	2026-10-18 12:00:57 (4 days ago)	Email account brute force: 1 attempts were recorded from 212.18.104.201 2026-10-18T13:37:59+0200 war ... show more Email account brute force: 1 attempts were recorded from 212.18.104.201 2026-10-18T13:37:59+0200 warning: unknown[212.18.104.201]: SASL authentication failed show less	Brute-Force
🇩🇰 powerhostingdk	2026-10-18 11:44:50 (4 days ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 109.160.32.164

🇺🇸 104.248.231.150

🇩🇪 195.182.16.23

🇫🇷 194.5.53.250

🇫🇮 147.185.133.63

🇩🇪 109.160.32.36

🇺🇸 66.132.195.195

🇨🇳 42.225.231.189

🇨🇦 34.186.218.244

🇨🇭 34.65.230.7

🇷🇺 31.173.69.14

🇨🇦 23.27.77.103

🇺🇸 20.81.44.48

🇧🇷 16.5.0.180

🇺🇸 170.23.19.123

🇨🇳 123.13.70.159

🇨🇳 112.249.182.7

🇰🇷 112.216.129.27

🇬🇧 86.38.187.72

🇳🇱 85.11.167.7