This IP address has been reported a total of
87
times from
72 distinct
sources.
104.168.115.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Aug 22 20:10:14 postfix/smtpd[2722237]: disconnect from unknown[104.168.115.2] ehlo=1 mail=1 rcpt=0/ ...
show moreAug 22 20:10:14 postfix/smtpd[2722237]: disconnect from unknown[104.168.115.2] ehlo=1 mail=1 rcpt=0/1 commands=2/3
show less
Aug 22 21:53:11 v22016083778036931 postfix/smtpd[2995335]: warning: unknown[104.168.115.2]: SASL log ...
show moreAug 22 21:53:11 v22016083778036931 postfix/smtpd[2995335]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=noauth
Aug 22 21:53:19 v22016083778036931 postfix/smtpd[2995335]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=spam
Aug 22 21:53:30 v22016083778036931 postfix/smtpd[2995335]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=test
...
show less
Brute-Force
Anonymous
2026-08-22T19:52:52.204182+00:00 nbg01-02-mail postfix/smtpd[156247]: lost connection after CONNECT ...
show more2026-08-22T19:52:52.204182+00:00 nbg01-02-mail postfix/smtpd[156247]: lost connection after CONNECT from unknown[104.168.115.2]
2026-08-22T19:52:52.690659+00:00 nbg01-02-mail postfix/smtpd[156247]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-8OA3CCQAE4D>
2026-08-22T19:52:52.799641+00:00 nbg01-02-mail postfix/smtpd[156247]: lost connection after RCPT from unknown[104.168.115.2]
...
show less
Attack attempt against Interwebbi servers; (smtpauth) Failed SMTP AUTH login from 104.168.115.2 (US/ ...
show moreAttack attempt against Interwebbi servers; (smtpauth) Failed SMTP AUTH login from 104.168.115.2 (US/United States/104-168-115-2-host.colocrossing.com): 5 in the last 3600 secs; IP: 104.168.115.2; Ports: *; Direction: 0; Trigger: LF_SMTPAUTH;
show less
2026-08-22 21:30:24 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect ...
show more2026-08-22 21:30:24 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=noauth)
2026-08-22 21:30:33 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=spam)
2026-08-22 21:30:46 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=test)
...
show less
Spoofing
Brute-Force
Anonymous
2026-08-22T21:28:12.171856+02:00 postfix/smtpd[1191134]: NOQUEUE: reject: RCPT from unknown[104.168 ...
show more2026-08-22T21:28:12.171856+02:00 postfix/smtpd[1191134]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 504 5.5.2 <WIN-8OA3CCQAE4D>: Helo command rejected: need fully-qualified hostname; proto=ESMTP helo=<WIN-8OA3CCQAE4D>
show less
Aug 22 21:20:19 odin postfix/smtpd[239065]: warning: hostname 104-168-115-2-host.colocrossing.com do ...
show moreAug 22 21:20:19 odin postfix/smtpd[239065]: warning: hostname 104-168-115-2-host.colocrossing.com does not resolve to address 104.168.115.2
Aug 22 21:20:20 odin postfix/smtpd[239065]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 554 5.7.1 Service unavailable; Client host [104.168.115.2] blocked using allinone.bl.blocklist.de; Infected System (Service: mail, Last-Attack: 1787425738), see http://www.blocklist.de/en/view.html?ip=104.168.115.2; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-8OA3CCQAE4D>
Aug 22 21:20:20 odin postfix/smtpd[239065]: warning: hostname 104-168-115-2-host.colocrossing.com does not resolve to address 104.168.115.2
Aug 22 21:20:20 odin postfix/smtpd[239065]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 554 5.7.1 Service unavailable; Client host [104.168.115.2] blocked using allinone.bl.blocklist.de; Infected System (Service: mail, Last-Attack: 1787425738), see http://www.blocklist.de/en/view.html?ip=104.168.115.2; from=<info
...
show less