JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.221.118.222

4.221.118.222 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.221.118.222

Whois 4.221.118.222

IP Abuse Reports for 4.221.118.222:

This IP address has been reported a total of 72 times from 54 distinct sources. 4.221.118.222 was first reported on October 10th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-05-30 19:03:31 (2 months ago)	Port scan detected on multiple ports	Port Scan
🇹🇷 baku.hosting	2026-05-30 14:05:28 (2 months ago)	CSF Auto Report: (smtpauth) Failed SMTP AUTH login from 4.221.118.222 (ZA/South Africa/-): 4 in the ... show more CSF Auto Report: (smtpauth) Failed SMTP AUTH login from 4.221.118.222 (ZA/South Africa/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇪🇸 ofm-abuse	2026-05-30 14:05:08 (2 months ago)	MAIL SASL Dropped MX34 ...	Port Scan Brute-Force
🇬🇧 openstrike.co.uk	2026-05-30 09:41:30 (2 months ago)	48 packets to ports 465 587 2525	Brute-Force
🇳🇱 BlueWire Hosting	2026-05-29 17:50:47 (2 months ago)	SMTP brute force attempt	Brute-Force
🇺🇸 interbiznw.com	2026-05-29 05:52:00 (2 months ago)	smtp-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
🇺🇸 mnogoweb	2026-05-29 02:01:08 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 4.221.118.222 (ZA/South Africa/-): 5 in the last 3600 secs; P ... show more (smtpauth) Failed SMTP AUTH login from 4.221.118.222 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-05-28 20:00:12 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 20:00:19 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 20:00:32 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 20:00:33 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 20:01:06 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇳🇴 jlouisbiz	2026-05-29 02:00:37 (2 months ago)	2026-05-29T02:00:11.433097+00:00 comm.rcdrun.com auth[713840]: pam_unix(dovecot:auth): authenticatio ... show more 2026-05-29T02:00:11.433097+00:00 comm.rcdrun.com auth[713840]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=4.221.118.222 2026-05-29T02:00:36.581102+00:00 comm.rcdrun.com auth[713840]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=4.221.118.222 2026-05-29T02:00:37.142934+00:00 comm.rcdrun.com auth[713900]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=4.221.118.222 ... show less	Brute-Force
🇳🇱 Alboweb B.V.	2026-05-28 20:11:36 (2 months ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
🇩🇪 triple-web.net	2026-05-28 08:56:01 (2 months ago)	$f2bV_matches	Brute-Force
🇩🇪 icera-network.de	2026-05-28 01:07:47 (2 months ago)	May 28 03:07:00 mail postfix/submission/smtpd[3347100]: lost connection after AUTH from unknown[4.22 ... show more May 28 03:07:00 mail postfix/submission/smtpd[3347100]: lost connection after AUTH from unknown[4.221.118.222] May 28 03:07:00 mail postfix/submission/smtpd[3347100]: disconnect from unknown[4.221.118.222] ehlo=2 starttls=1 auth=0/1 commands=3/4 May 28 03:07:47 mail postfix/submission/smtpd[3347100]: warning: unknown[4.221.118.222]: SASL PLAIN authentication failed: (reason unavailable), [email protected] May 28 03:07:47 mail postfix/submission/smtpd[3347100]: lost connection after AUTH from unknown[4.221.118.222] May 28 03:07:47 mail postfix/submission/smtpd[3347100]: disconnect from unknown[4.221.118.222] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇫🇷 Lacrimosa99	2026-05-28 01:06:43 (2 months ago)	2026-05-28 03:06:32 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authen ... show more 2026-05-28 03:06:32 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 03:06:32 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) 2026-05-28 03:06:43 plain authenticator failed for (Appserver) [4.221.118.222]: 535 Incorrect authentication data ([email protected]) ... show less	Spoofing Brute-Force
🇨🇭 4server	2026-05-27 07:55:34 (2 months ago)	2026-05-2709:51:37dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:55832:535Incorre ... show more 2026-05-2709:51:37dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:55832:535Incorrectauthenticationdata$[email protected]$2026-05-2709:52:12dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:59100:535Incorrectauthenticationdata$[email protected]$2026-05-2709:52:27dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:60141:535Incorrectauthenticationdata$[email protected]$2026-05-2709:52:38dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:60792:535Incorrectauthenticationdata$[email protected]$2026-05-2709:54:03dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:54369:535Incorrectauthenticationdata$[email protected]$2026-05-2709:54:13dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:55224:535Incorrectauthenticationdata$[email protected]$2026-05-2709:54:15dovecot_plainauthenticatorfailedforH=$Appserver$[4.221.118.222]:55607:535In show less	Hacking Web App Attack
🇨🇭 Armando Savanesi	2026-05-27 07:54:42 (2 months ago)	IP reached maximum auth failures	Brute-Force
🇨🇿 Simpless Digital	2026-05-27 01:39:23 (2 months ago)	May 27 03:39:22 mail postfix/smtpd[59568]: lost connection after AUTH from unknown[4.221.118.222] Ma ... show more May 27 03:39:22 mail postfix/smtpd[59568]: lost connection after AUTH from unknown[4.221.118.222] May 27 03:39:22 mail postfix/smtpd[59704]: lost connection after AUTH from unknown[4.221.118.222] May 27 03:39:22 mail postfix/smtpd[59566]: lost connection after AUTH from unknown[4.221.118.222] May 27 03:39:22 mail postfix/smtpd[60127]: lost connection after AUTH from unknown[4.221.118.222] May 27 03:39:22 mail postfix/smtpd[59573]: lost connection after AUTH from unknown[4.221.118.222] ... show less	Port Scan

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.240.236.109

🇨🇿 212.102.39.84

🇸🇬 206.189.40.69

🇧🇷 187.87.82.50

🇺🇸 165.227.26.149

🇺🇸 108.30.84.231

🇨🇳 106.12.179.53

🇧🇪 198.235.24.172

🇲🇽 158.23.147.79

🇨🇳 106.113.112.111

🇮🇳 43.239.200.103

🇨🇦 37.120.205.150

🇧🇷 200.152.21.97

🇪🇨 186.68.83.105

🇺🇦 176.105.212.239

🇨🇳 120.48.104.158

🇵🇱 109.205.211.201

🇫🇷 104.164.118.83

🇬🇧 62.60.130.253

🇰🇿 37.208.46.131