AbuseIPDB » 104.215.48.170

104.215.48.170 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 22%: ?

22%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.215.48.170

Whois 104.215.48.170

IP Abuse Reports for 104.215.48.170:

This IP address has been reported a total of 13 times from 8 distinct sources. 104.215.48.170 was first reported on December 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bigscoots.com	2024-12-08 01:29:19 (1 month ago)	(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Port ... show more(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
bigscoots.com	2024-12-08 00:59:41 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: ... show more(smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-12-07 19:47:54 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:65302: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:50:45 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:50176: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:52:58 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:49389: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:55:12 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:53060: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:59:36 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:64644: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
bigscoots.com	2024-12-08 00:30:57 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: ... show more(smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-12-07 19:12:46 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:64854: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:20:20 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:56781: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:23:49 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:49543: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:27:35 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:57924: 535 Incorrect authentication data ([email protected]) 2024-12-07 19:30:57 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:52853: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2024-12-06 16:30:08 (1 month ago)	Failed login attempt detected by Fail2Ban in postfix-failedauth jail	DDoS Attack
SvrAdmin	2024-12-05 23:43:10 (1 month ago)	[272] (smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; P ... show more[272] (smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 5 19:48:20 cwp01 postfix/smtpd[24958]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 5 20:05:56 cwp01 postfix/smtpd[27125]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 5 20:19:35 cwp01 postfix/smtpd[28711]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 5 20:31:46 cwp01 postfix/smtpd[30182]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 5 20:43:06 cwp01 postfix/smtpd[31568]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
websync	2024-12-04 21:36:42 (1 month ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
bigscoots.com	2024-12-04 20:28:15 (1 month ago)	(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Port ... show more(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
Anonymous	2024-12-03 20:28:36 (1 month ago)	(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; IP: ... show more(PERMBLOCK) 104.215.48.170 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; IP: 104.215.48.170; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Email Spam Brute-Force
SvrAdmin	2024-12-03 20:15:17 (1 month ago)	[315] (smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; P ... show more[315] (smtpauth) Failed SMTP AUTH login from 104.215.48.170 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 3 16:56:46 cwp01 postfix/smtpd[23586]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 16:59:12 cwp01 postfix/smtpd[19817]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 17:07:10 cwp01 postfix/smtpd[28061]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 17:13:59 cwp01 postfix/smtpd[28061]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 17:15:14 cwp01 postfix/smtpd[28061]: warning: unknown[104.215.48.170]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
Julio Covolato	2024-12-03 18:35:02 (1 month ago)	Imap or Submission login brute-force attacks.	Brute-Force
LM Security	2024-12-03 15:45:02 (1 month ago)	2024-12-03 12:36:06 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:63543: 535 Incor ... show more2024-12-03 12:36:06 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:63543: 535 Incorrect authentication data (set_id=contatolpeshop@[redacted].com.br) 2024-12-03 11:09:13 dovecot_login authenticator failed for (ADMIN) [104.215.48.170]:54999: 535 Incorrect authentication data (set_id=grupo[redacted]@[redacted].com.br) show less	Brute-Force
Anonymous	2024-12-03 13:29:12 (1 month ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 104.215.48.170, Reason:[(zimbra-mta) Failed login fro ... show moreCluster member 10.170.91.37 (-) said, TEMPDENY 104.215.48.170, Reason:[(zimbra-mta) Failed login from 104.215.48.170 (JP/Japan/-): 30 in the last 3600 secs]; IP: 104.215.48.170; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
Anonymous	2024-12-03 13:00:29 (1 month ago)	BruteForce IMAP/POP3	Brute-Force