JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.211.37.254

104.211.37.254

Neutral Activity

149 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.211.37.254 has been reported 149 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.211.37.254:

This IP address has been reported a total of 149 times from 29 distinct sources. 104.211.37.254 was first reported on December 3rd 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Inaxas AG	2022-03-21 23:17:59 (4 years ago)	Inaxas Security for Asterisk banned IP after brute force register on Port 5060. Ilegitimate regist ... show more Inaxas Security for Asterisk banned IP after brute force register on Port 5060. Ilegitimate register attempt: 2 times between: 24/12/2021 - 22:38 and 24/12/2021 - 22:38. show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-03-04 12:54:14 (4 years ago)	[2022-03-04 18:44:25] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-04 18:44:25] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-04T18:44:25.664+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f872c1e6820",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/60563",Challenge="661392f7",ReceivedChallenge="661392f7",ReceivedHash="b72a48e6ab424d01aaaa365c41d852e7" [2022-03-04 18:47:41] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-04T18:47:41.623+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="401",SessionID="0x7f872c129da0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/57149",Challenge="2839b925",ReceivedChallenge="2839b925",ReceivedHash="80c43fec4518bef923e65449edaa438d" [2022-03-04 18:50:58] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-04T18:50:58.511+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="101 ... show less	Fraud VoIP Brute-Force
🇩🇪 lewisakura	2022-03-03 13:04:41 (4 years ago)	[Mar 3 17:33:18] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed f ... show more [Mar 3 17:33:18] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:57146' - Wrong password [Mar 3 17:36:35] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:50528' - Wrong password [Mar 3 17:38:04] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:62232' - Wrong password [Mar 3 17:40:30] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:52074' - Wrong password [Mar 3 17:44:23] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:65058' - Wrong password [Mar 3 17:48:26] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:64066' - Wrong password [Mar 3 17:52:28] NOTICE[1370] chan_sip.c: Registration from '<sip:[email protected]>' failed for '104.211.37.254:52266' - Wrong password [Mar 3 17:56:31] NOTICE[1370] chan_sip.c: Registration show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-03-03 12:41:38 (4 years ago)	[2022-03-03 18:32:33] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-03 18:32:33] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-03T18:32:33.281+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="024359332",SessionID="0x7f872c1c6eb0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/55082",Challenge="3c2dc4aa",ReceivedChallenge="3c2dc4aa",ReceivedHash="9642cd22603763230f2c8b438b2675ac" [2022-03-03 18:37:43] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-03T18:37:43.032+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="1002",SessionID="0x7f872c0ca320",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/54118",Challenge="2cdf5ac3",ReceivedChallenge="2cdf5ac3",ReceivedHash="bbb7837eb79dea7f41387394f9db5eaa" [2022-03-03 18:39:24] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-03T18:39:24.067+0100",Severity="Error",Service="SIP",EventVersion="2",Account ... show less	Fraud VoIP Brute-Force
🇨🇭 Inaxas AG	2022-03-01 15:20:50 (4 years ago)	Inaxas Security for Asterisk banned IP after brute force register on Port 5060. Ilegitimate regist ... show more Inaxas Security for Asterisk banned IP after brute force register on Port 5060. Ilegitimate register attempt: 2 times between: 24/12/2021 - 22:38 and 24/12/2021 - 22:38. show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-02-26 07:37:37 (4 years ago)	[2022-02-26 13:27:39] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-02-26 13:27:39] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-26T13:27:39.144+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="270",SessionID="0x7f872c0ac970",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/56087",Challenge="674ca3fc",ReceivedChallenge="674ca3fc",ReceivedHash="aebdf6468b9927d6be5b5fa5d081722c" [2022-02-26 13:30:59] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-26T13:30:59.254+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="280",SessionID="0x7f872c109290",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/56010",Challenge="4b0d01d7",ReceivedChallenge="4b0d01d7",ReceivedHash="7256f841ed3808d9f4bcae5a2dabe918" [2022-02-26 13:34:18] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-26T13:34:18.814+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="290 ... show less	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-02-26 07:07:04 (4 years ago)	SIP Brute Force (SUA)	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-02-25 07:26:50 (4 years ago)	[2022-02-25 13:16:59] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-02-25 13:16:59] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-25T13:16:59.289+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="6900",SessionID="0x7f872c1f9e10",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/51770",Challenge="437174ea",ReceivedChallenge="437174ea",ReceivedHash="1b5af68909a677c1a97669499983604f" [2022-02-25 13:20:15] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-25T13:20:15.148+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="7100",SessionID="0x7f872c2d0c60",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/60233",Challenge="7c053125",ReceivedChallenge="7c053125",ReceivedHash="3fab4581598fd80a379f610ac984183a" [2022-02-25 13:23:34] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-25T13:23:34.033+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="7 ... show less	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-02-25 06:53:06 (4 years ago)	SIP Brute Force (ADL)	Fraud VoIP Brute-Force
🇳🇱 ipoac.nl	2022-02-24 08:01:59 (4 years ago)	[Feb 24 14:01:58] SECURITY[52919] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-02-24T ... show more [Feb 24 14:01:58] SECURITY[52919] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-02-24T14:01:58.358+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="anonymous",SessionID="1835796546-379299065-1817978257",LocalAddress="IPV4/UDP/45.95.239.192/5060",RemoteAddress="IPV4/UDP/104.211.37.254/62703",ACLName="registrar_attempt_without_configured_aors" show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-02-24 07:14:19 (4 years ago)	[2022-02-24 13:04:31] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-02-24 13:04:31] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-24T13:04:31.541+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="804",SessionID="0x7f872c0ac970",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/58057",Challenge="3ff88ee2",ReceivedChallenge="3ff88ee2",ReceivedHash="b61251f51a4ffedd4ecbf9998e29339b" [2022-02-24 13:07:49] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-24T13:07:49.497+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="904",SessionID="0x7f872c0e0510",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/64654",Challenge="1cffa19c",ReceivedChallenge="1cffa19c",ReceivedHash="47b5b54cb8d98ace223ca14457eef035" [2022-02-24 13:11:03] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-24T13:11:03.872+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="200 ... show less	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-02-24 06:57:03 (4 years ago)	SIP Brute Force (SUA)	Fraud VoIP Brute-Force
🇫🇷 DiLenaTech	2022-02-24 06:42:10 (4 years ago)	2022-02-22 11:40:16,656 fail2ban.actions [1059]: NOTICE [asterisk-challenge] Ban 104.211.37. ... show more 2022-02-22 11:40:16,656 fail2ban.actions [1059]: NOTICE [asterisk-challenge] Ban 104.211.37.254 2022-02-23 11:40:56,343 fail2ban.actions [1059]: NOTICE [asterisk-challenge] Ban 104.211.37.254 2022-02-24 11:42:10,154 fail2ban.actions [1059]: NOTICE [asterisk-challenge] Ban 104.211.37.254 ... show less	Brute-Force SSH
🇵🇱 6GNet.pl	2022-02-23 07:04:09 (4 years ago)	[2022-02-23 12:54:11] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-02-23 12:54:11] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-23T12:54:11.282+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="740",SessionID="0x7f872c1cc5a0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/65175",Challenge="77003354",ReceivedChallenge="77003354",ReceivedHash="2bca38928992ecc91d132b3dbadd4acb" [2022-02-23 12:57:29] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-23T12:57:29.608+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="750",SessionID="0x7f872c273c10",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/104.211.37.254/58091",Challenge="682975f5",ReceivedChallenge="682975f5",ReceivedHash="935113c111c530dfeae63abf4c9cd1a0" [2022-02-23 13:00:50] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-02-23T13:00:50.299+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="760 ... show less	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-02-23 06:51:11 (4 years ago)	SIP Brute Force (SUA)	Fraud VoIP Brute-Force

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:550:9005:2000::1a

🇰🇷 210.204.125.148

🇸🇬 194.61.40.8

🇬🇧 193.32.209.249

🇫🇮 147.185.133.176

🇭🇰 103.117.145.130

🇫🇷 91.196.152.37

🇨🇦 85.217.149.47

🇺🇸 52.248.42.67

🇮🇩 36.64.131.68

🇨🇦 35.203.89.138

🇻🇳 2402:800:62e3:9f4:a1ef:6f62:b478:79cb

🇬🇧 193.163.125.149

🇺🇸 162.216.149.49

🇺🇸 135.119.19.18

🇨🇳 111.55.214.178

🇳🇱 91.92.47.172

🇮🇳 45.10.194.165

🇬🇧 35.203.210.231

🇮🇳 3.109.20.145