JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.228.21.102

140.228.21.102 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 34%: ?

34%

ISP	Internet Utilities NA LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	iana.org
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.228.21.102

Whois 140.228.21.102

IP Abuse Reports for 140.228.21.102:

This IP address has been reported a total of 60 times from 42 distinct sources. 140.228.21.102 was first reported on December 12th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jasperedv.de	2026-05-05 02:19:21 (1 month ago)	Failed SMTP Login - Brutforcing	Email Spam Brute-Force
🇺🇸 bigscoots.com	2026-05-04 17:27:35 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-04 13:27:08 dovecot_plain authenticator failed for H=([10.3.18.250]) [140.228.21.102]:27384: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:27:14 dovecot_login authenticator failed for H=([10.3.18.250]) [140.228.21.102]:27384: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:27:23 dovecot_plain authenticator failed for H=([10.3.18.250]) [140.228.21.102]:54314: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:27:25 dovecot_login authenticator failed for H=([10.3.18.250]) [140.228.21.102]:54314: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:27:35 dovecot_plain authenticator failed for H=([10.3.18.250]) [140.228.21.102]:19325: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-05-04 17:05:11 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-)	Brute-Force
🇧🇷 SvrAdmin	2026-05-04 16:03:46 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-05-04 13:03:00 dovecot_plain authenticator failed for H=([10.3.18.46]) [140.228.21.102]:33442: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:03:06 dovecot_login authenticator failed for H=([10.3.18.46]) [140.228.21.102]:33442: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:03:18 dovecot_plain authenticator failed for H=([10.3.18.46]) [140.228.21.102]:1282: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:03:20 dovecot_login authenticator failed for H=([10.3.18.46]) [140.228.21.102]:1282: 535 Incorrect authentication data ([email protected]) 2026-05-04 13:03:40 dovecot_plain authenticator failed for H=([10.3.18.46]) [140.228.21.102]:36517: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2026-05-04 11:58:22 (1 month ago)	2026-05-04T13:58:22.398812+02:00 soli-gate postfix/submission/smtpd[2757809]: warning: unknown[140.2 ... show more 2026-05-04T13:58:22.398812+02:00 soli-gate postfix/submission/smtpd[2757809]: warning: unknown[140.228.21.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇺🇸 Smee	2026-05-04 10:55:24 (1 month ago)	IMAP/SMTP Authentication Failure	Brute-Force
🇮🇹 Inartis	2026-05-04 09:13:04 (1 month ago)	2026-05-04T11:13:03.115293mail1.inartis.it postfix/smtpd[3529717]: warning: unknown[140.228.21.102]: ... show more 2026-05-04T11:13:03.115293mail1.inartis.it postfix/smtpd[3529717]: warning: unknown[140.228.21.102]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
Anonymous	2026-05-04 09:09:52 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-)	Brute-Force
🇩🇪 ITSNF	2026-05-01 19:18:36 (1 month ago)	FL May 1 21:18:22 server01 postfix/submission/smtpd[3633872]: warning: unknown[140.228.21.102]: SAS ... show more FL May 1 21:18:22 server01 postfix/submission/smtpd[3633872]: warning: unknown[140.228.21.102]: SASL PLAIN authentication failed: (reason unavailable), [email protected] May 1 21:18:28 server01 postfix/submission/smtpd[3633872]: warning: unknown[140.228.21.102]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 1 21:18:35 server01 postfix/smtps/smtpd[3633873]: warning: unknown[140.228.21.102]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Email Spam Brute-Force
🇮🇩 xveil	2026-05-01 18:01:52 (1 month ago)	2026-05-02T01:01:49.725984 mail-honeypot postfix/submission/smtpd[21296]: warning: unknown[140.228.2 ... show more 2026-05-02T01:01:49.725984 mail-honeypot postfix/submission/smtpd[21296]: warning: unknown[140.228.21.102]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 Campus France	2026-05-01 16:33:35 (1 month ago)	2026-05-01T18:30:25.223144+02:00 server9 dovecot[1642]: submission-login: Disconnected: Aborted logi ... show more 2026-05-01T18:30:25.223144+02:00 server9 dovecot[1642]: submission-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 9 secs): user=<[email protected]>, method=LOGIN, rip=140.228.21.102, lip=62.210.65.21, TLS, session=<rHaSGMRQ2qyM5BVm> 2026-05-01T18:30:36.420465+02:00 server9 dovecot[1642]: submission-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 16 secs): user=<[email protected]>, method=LOGIN, rip=140.228.21.102, lip=62.210.65.21, TLS, session=<oiTLGMRQq0eM5BVm> 2026-05-01T18:30:36.420720+02:00 server9 dovecot[1642]: submission-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 16 secs): user=<[email protected]>, method=LOGIN, rip=140.228.21.102, lip=62.210.65.21, TLS, session=<lXrVGMRQ10KM5BVm> 2026-05-01T18:30:50.156214+02:00 server9 dovecot[1642]: submission-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 4 secs): user=<gchantepie@radiocampu ... show less	Brute-Force Exploited Host
🇺🇸 bigscoots.com	2026-05-01 02:41:57 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 140.228.21.102 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-30 22:41:14 dovecot_plain authenticator failed for H=([10.3.18.161]) [140.228.21.102]:37348: 535 Incorrect authentication data ([email protected]) 2026-04-30 22:41:20 dovecot_login authenticator failed for H=([10.3.18.161]) [140.228.21.102]:37348: 535 Incorrect authentication data ([email protected]) 2026-04-30 22:41:30 dovecot_plain authenticator failed for H=([10.3.18.161]) [140.228.21.102]:5827: 535 Incorrect authentication data ([email protected]) 2026-04-30 22:41:32 dovecot_login authenticator failed for H=([10.3.18.161]) [140.228.21.102]:5827: 535 Incorrect authentication data ([email protected]) 2026-04-30 22:41:54 dovecot_plain authenticator failed for H=([10.3.18.161]) [140.228.21.102]:1998: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 WeekendWeb	2026-05-01 02:15:03 (1 month ago)	smtp/pop Bruteforce	Web App Attack
🇩🇪 Nerdscave Hosting	2026-04-30 12:13:23 (1 month ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
🇭🇺 Lacika555	2026-04-30 12:09:46 (1 month ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 202.71.181.130

🇸🇪 171.25.158.68

🇻🇳 113.190.213.180

🇰🇷 112.171.133.147

🇰🇷 110.44.240.198

🇸🇬 103.189.234.244

🇫🇷 88.124.253.129

🇳🇱 45.156.87.127

🇮🇹 4.232.80.255

🇺🇸 2601:586:c987:f830:2d:61f5:e040:86a9

🇨🇳 2400:7fc0:8f0d:e500:8cc1:4ace:4374:8b4

🇧🇷 191.242.195.89

🇮🇳 163.61.39.89

🇧🇬 79.124.40.130

🇺🇸 69.164.215.134

🇺🇸 13.222.117.55

🇵🇱 2a02:2a40:a8fa:2c00:9d77:fe03:82ed:3c68

🇸🇬 216.67.230.82

🇧🇪 198.235.24.236

🇳🇵 113.199.139.212