AbuseIPDB » 102.37.218.28
102.37.218.28
This IP was reported 6 times. Confidence of
Abuse
is 21% : ?
ISP
Microsoft (S.A.) (Proprietary) Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.37.218.28 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
102.37.218.28 was first reported on
June 1st 2026 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇷
SvrAdmin
2026-06-03 17:16:32
(2 weeks ago)
[272] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 s ...
show more
[272] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jun 3 13:16:44 cwp01 postfix/smtpd[14613]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 3 13:32:32 cwp01 postfix/smtpd[16930]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 3 13:47:04 cwp01 postfix/smtpd[19538]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 3 14:00:48 cwp01 postfix/smtpd[22697]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 3 14:16:26 cwp01 postfix/smtpd[26870]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇺🇸
welm
2026-06-03 02:52:01
(2 weeks ago)
(PERMBLOCK) 102.37.218.28 (ZA/South Africa/-) has had more than 4 temp blocks in the last 86400 secs ...
show more
(PERMBLOCK) 102.37.218.28 (ZA/South Africa/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇧🇷
SvrAdmin
2026-06-02 18:20:02
(2 weeks ago)
[293] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 s ...
show more
[293] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jun 2 14:20:02 cwp01 postfix/smtpd[21863]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 2 14:20:21 cwp01 postfix/smtpd[21863]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 2 14:50:04 cwp01 postfix/smtpd[28277]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 2 15:18:08 cwp01 postfix/smtpd[1900]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 2 15:20:00 cwp01 postfix/smtpd[2095]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
2026-06-01 22:13:32
(2 weeks ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇧🇷
SvrAdmin
2026-06-01 20:45:44
(2 weeks ago)
[315] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 s ...
show more
[315] (smtpauth) Failed SMTP AUTH login from 102.37.218.28 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jun 1 17:00:51 cwp01 postfix/smtpd[9220]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 1 17:00:51 cwp01 postfix/smtpd[9298]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 1 17:33:56 cwp01 postfix/smtpd[14777]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 1 17:43:00 cwp01 postfix/smtpd[17447]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 1 17:45:42 cwp01 postfix/smtpd[18763]: warning: unknown[102.37.218.28]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇨🇦
Julio Covolato
2026-06-01 20:05:02
(2 weeks ago)
Imap or Submission login brute-force attacks.
Brute-Force
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: