4.255.114.104

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
64% Elevated
17 reports
16 reporters · latest 1 week ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 2 🇳🇱 Netherlands 2
Most common categories Brute-Force 13 Web App Attack 4 Hacking 4 Port Scan 2 Email Spam 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
2026-10-30: one_time_code. Observed against Billease APIs; source blocked. Datacenter IP (Microsoft Corporation), no legitimate customer traffic. Automated report.
Brute-Force Web App Attack
🇺🇸 NXTwoThou
POP3
Brute-Force
🇳🇱 maxxsense
4.255.114.104 (US/United States/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇩🇪 Hazzard
*Port Scan* detected from 4.255.114.104 (US/United States/Virginia/Dulles/-/[redacted]).
Port Scan
🇺🇸 Zestysoft
Brute-Force
🇳🇴 Fredrik_2015
Email login Brute force
Hacking Brute-Force
🇸🇪 KIDOS
malicious activity
Web App Attack
🇩🇪 LRob
Web exploit attempt | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
Hacking Web App Attack
🇨🇳 Zhengka.net
zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=4.255.114.104
Port Scan Web App Attack
🇫🇷 basing
2026-10-28 12:22:15 pzb SASL PLAIN auth failed: rhost=4.255.114.104...
Brute-Force
🇿🇦 maximonline.co.za
Brute Force IMAP AUTH Attack
Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 49 unsolicited messages (dating spam). Observed 2026-10-27T17:45:07-04:00 to 2026-10-27T19:18:33-04:00.
Email Spam Hacking Brute-Force
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 49 unsolicited messages (dating spam). Observed 2026-10-27T17:45:07-04:00 to 2026-10-27T19:18:33-04:00.
Email Spam Hacking Brute-Force
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 167.94.146.52
🇺🇸 66.132.159.118
🇺🇸 35.202.16.77
🇧🇪 198.235.24.233
🇺🇸 172.202.114.251
🇫🇷 169.40.142.134
🇷🇺 46.147.195.11
🇺🇸 216.16.60.51
🇳🇱 195.178.110.94
🇨🇱 152.173.22.67
🇫🇮 147.185.133.147
🇬🇧 45.133.173.125
🇰🇷 220.76.91.28
🇬🇧 217.146.80.107
🇲🇽 187.190.255.217
🇸🇪 172.68.183.32
🇳🇱 51.158.206.80
🇰🇷 20.214.165.240
🇺🇸 193.202.12.210
🇲🇽 189.219.97.15
feedback