This IP address has been reported a total of
86
times from
67 distinct
sources.
104.218.62.166 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-09-18T06:27:39.468042+03:00 shell.l3.fi postfix/smtps/smtpd[1214094]: warning: h104-218-62-166. ...
show more2026-09-18T06:27:39.468042+03:00 shell.l3.fi postfix/smtps/smtpd[1214094]: warning: h104-218-62-166.ip4.unmetered.hosting[104.218.62.166]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=stone01
2026-09-18T06:27:39.468436+03:00 shell.l3.fi postfix/smtps/smtpd[1214094]: disconnect from h104-218-62-166.ip4.unmetered.hosting[104.218.62.166] ehlo=1 auth=0/1 commands=1/2
...
show less
Suspicious activity detected from IP 104.218.62.166 based on mailserver logs.
Sample logs:
2026-09-1 ...
show moreSuspicious activity detected from IP 104.218.62.166 based on mailserver logs.
Sample logs:
2026-09-18 09:25:09,233 INFO [qtp2102534528-454947] [name=**@*.id;ip=172.16.0.182;oip=104.218.62.166;oport=51178;oproto=smtp;port=46656;soapId=3665e96b;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invalid credentials
2026-09-18 09:25:09,233 INFO [qtp2102534528-454947] [name=**@*.id;ip=172.16.0.182;oip=104.218.62.166;oport=51178;oproto=smtp;port=46656;soapId=3665e96b;] soap - AuthRequest elapsed=2
2026-09-18 10:04:38,762 INFO [qtp2102534528-455185] [ip=172.16.0.182;oip=104.218.62.166;oport=60720;oproto=smtp;port=59210;soapId=3665ea05;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-09-18 10:04:38,762 INFO [qtp2102534528-455185] [ip=172.16.0.182;oip=104.218.62.166;oport=60720;oproto=smtp;port=59210;soapId=3665ea05;] SoapEngine - handler exception: authentication fail
show less
Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-16 22:30:15 ...
show moreAutomated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-09-16 22:30:15. Events: 1. Reported by ipdb-security/fitzgerald.eu
show less
Sep 18 01:40:14 mail postfix/smtps/smtpd[2329805]: warning: h104-218-62-166.ip4.unmetered.hosting[10 ...
show moreSep 18 01:40:14 mail postfix/smtps/smtpd[2329805]: warning: h104-218-62-166.ip4.unmetered.hosting[104.218.62.166]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Hacking
Brute-Force
Anonymous
2026-09-18T01:28:59.357590+01:00 [masked] postfix/smtps/smtpd[2940219]: warning: h104-218-62-166.ip4 ...
show more2026-09-18T01:28:59.357590+01:00 [masked] postfix/smtps/smtpd[2940219]: warning: h104-218-62-166.ip4.unmetered.hosting[104.218.62.166]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=plexapp.com@[masked]
...
show less
(smtpauth) Failed SMTP AUTH login from 104.218.62.166 (CA/Canada/-/-/h104-218-62-166.ip4.unmetered.h ...
show more(smtpauth) Failed SMTP AUTH login from 104.218.62.166 (CA/Canada/-/-/h104-218-62-166.ip4.unmetered.hosting/[redacted])
show less