JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.244.120.67

104.244.120.67 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	InMotion Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22611
Hostname(s)	mail.winterbuilding.com
Domain Name	inmotionhosting.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.244.120.67

Whois 104.244.120.67

IP Abuse Reports for 104.244.120.67:

This IP address has been reported a total of 22 times from 21 distinct sources. 104.244.120.67 was first reported on September 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 moretrix	2026-09-17 15:46:00 (1 day ago)	2026-09-17T17:45:59.118854+02:00 ieyasu.moretrix.com postfix/smtpd[982893]: NOQUEUE: reject: RCPT fr ... show more 2026-09-17T17:45:59.118854+02:00 ieyasu.moretrix.com postfix/smtpd[982893]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 554 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> 2026-09-17T17:45:59.132658+02:00 ieyasu.moretrix.com postfix/smtpd[982894]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 554 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> 2026-09-17T17:45:59.182589+02:00 ieyasu.moretrix.com postfix/smtpd[982896]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 554 5.5.2 <TINY-A32BCEC6>: Helo command rejected: need fully-qualified hostname; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> ... show less	Brute-Force
🇫🇷 geot	2026-09-17 14:53:38 (1 day ago)	Probing email addresses (from=<> ... helo=<TINY-A32BCEC6>)	Phishing Email Spam Hacking
🇫🇷 Touzeau	2026-09-17 11:34:17 (1 day ago)		Email Spam
🇪🇸 librebit	2026-09-17 05:54:33 (1 day ago)	Postfix: IP Address black-listed by anti-spam (blocked)	Email Spam
🇩🇪 FD-IX	2026-09-17 05:07:09 (1 day ago)	SMTP connection rejected due to combined.mail.abusix.zone listing.	Email Spam
🇳🇱 taivas.nl	2026-09-17 01:30:07 (1 day ago)	Spam_report	Email Spam
🇩🇪 NewGastroline	2026-09-17 00:55:19 (1 day ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-09-16 23:46:10 (1 day ago)	IP Address black-listed by anti-spam (blocked).	Email Spam
🇺🇸 shaunc	2026-09-16 20:46:03 (1 day ago)	Sep 16 15:46:00 mailman postfix/smtpd[30789]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104 ... show more Sep 16 15:46:00 mailman postfix/smtpd[30789]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 554 5.7.1 Service unavailable; Client host [104.244.120.67] blocked using sbl-xbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/104.244.120.67; from=<> to=<gollum-verify-ozpjzw47oz81[at][redacted]> proto=SMTP helo=<TINY-A32BCEC6> Sep 16 15:46:00 mailman postfix/smtpd[30789]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 554 5.7.1 Service unavailable; Client host [104.244.120.67] blocked using sbl-xbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/104.244.120.67; from=<> to=<[redacted][at][redacted]> proto=SMTP helo=<TINY-A32BCEC6> show less	Email Spam
🇩🇪 Viveronese	2026-09-16 18:25:26 (2 days ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 LRob	2026-09-16 16:14:08 (2 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-16 16:14 UTC show less	Bad Web Bot
🇩🇪 moretrix	2026-09-16 12:12:17 (2 days ago)	2026-09-16T13:04:45.861842+02:00 ieyasu.moretrix.com postfix/postscreen[651145]: NOQUEUE: reject: RC ... show more 2026-09-16T13:04:45.861842+02:00 ieyasu.moretrix.com postfix/postscreen[651145]: NOQUEUE: reject: RCPT from [104.244.120.67]:58696: 550 5.7.1 Service unavailable; client [104.244.120.67] blocked using zen.spamhaus.org; from=<>, to=<[email protected]>, proto=SMTP, helo=<TINY-A32BCEC6> 2026-09-16T13:04:46.055233+02:00 ieyasu.moretrix.com postfix/postscreen[651145]: NOQUEUE: reject: RCPT from [104.244.120.67]:58696: 550 5.7.1 Service unavailable; client [104.244.120.67] blocked using zen.spamhaus.org; from=<>, to=<[email protected]>, proto=SMTP, helo=<TINY-A32BCEC6> 2026-09-16T14:12:16.364241+02:00 ieyasu.moretrix.com postfix/postscreen[656766]: NOQUEUE: reject: RCPT from [104.244.120.67]:37960: 550 5.7.1 Service unavailable; client [104.244.120.67] blocked using zen.spamhaus.org; from=<>, to=<[email protected]>, proto=SMTP, helo=<TINY-A32BCEC6> ... show less	Brute-Force
🇷🇴 SpamStopper	2026-09-16 08:45:55 (2 days ago)	Fail2Ban - POSTFIX DNSBL listed sender	Email Spam
🇩🇪 filstal.org	2026-09-16 08:26:02 (2 days ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 initsol	2026-09-16 06:47:31 (2 days ago)	2026-09-16T06:26:24.552122+02:00 phoenix postfix/smtpd[803908]: NOQUEUE: reject: RCPT from mail.wint ... show more 2026-09-16T06:26:24.552122+02:00 phoenix postfix/smtpd[803908]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 504 5.5.2 <TINY-A32BCEC6>: Helo command rejected: need fully-qualified hostname; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> 2026-09-16T06:26:24.734923+02:00 phoenix postfix/smtpd[803908]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 504 5.5.2 <TINY-A32BCEC6>: Helo command rejected: need fully-qualified hostname; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> 2026-09-16T08:47:30.923056+02:00 phoenix postfix/smtpd[806761]: NOQUEUE: reject: RCPT from mail.winterbuilding.com[104.244.120.67]: 504 5.5.2 <TINY-A32BCEC6>: Helo command rejected: need fully-qualified hostname; from=<> to=<[email protected]> proto=SMTP helo=<TINY-A32BCEC6> ... show less	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇺🇸 184.105.247.234

🇻🇳 171.244.39.95

🇻🇳 103.176.20.115

🇫🇷 91.196.152.193

🇺🇸 71.86.57.25

🇧🇾 178.122.73.113

🇮🇳 103.85.244.25

🇺🇸 66.132.195.114

🇰🇷 58.236.58.231

🇹🇭 49.229.102.187

🇺🇸 184.105.139.113

🇧🇷 179.191.231.146

🇺🇸 144.172.99.108

🇵🇰 59.103.97.200

🇳🇱 45.148.10.152

🇧🇷 187.95.47.211

🇺🇦 185.200.112.244

🇨🇳 182.242.168.22

🇻🇳 103.216.119.46