JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.70.2.16

40.70.2.16 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.70.2.16

Whois 40.70.2.16

IP Abuse Reports for 40.70.2.16:

This IP address has been reported a total of 248 times from 154 distinct sources. 40.70.2.16 was first reported on June 4th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-06-18 12:21:19 (2 days ago)	Jun 18 14:19:52 odin postfix/submission/smtpd[31002]: warning: unknown[40.70.2.16]: SASL PLAIN authe ... show more Jun 18 14:19:52 odin postfix/submission/smtpd[31002]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: Jun 18 14:20:49 odin postfix/submission/smtpd[31002]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: Jun 18 14:21:19 odin postfix/submission/smtpd[31002]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: show less	Brute-Force
Anonymous	2026-06-18 01:03:19 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/-): 5 in the last 3600 secs; Por ... show more (smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-18 02:59:54 plain authenticator failed for H=(Windows-Web) [40.70.2.16]: 535 Incorrect authentication data ([email protected]) 2026-06-18 03:00:52 plain authenticator failed for H=(Windows-Web) [40.70.2.16]: 535 Incorrect authentication data ([email protected]) 2026-06-18 03:01:43 plain authenticator failed for H=(Windows-Web) [40.70.2.16]: 535 Incorrect authentication data ([email protected]) 2026-06-18 03:02:31 plain authenticator failed for H=(Windows-Web) [40.70.2.16]: 535 Incorrect authentication data ([email protected]) 2026-06-18 03:03:15 plain authenticator failed for H=(Windows-Web) [40.70.2.16]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇩🇪 netclix.gr	2026-06-18 01:01:37 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/-)	Brute-Force
🇩🇪 4server	2026-06-17 21:38:05 (3 days ago)	IP reached maximum auth failures	Brute-Force
🇧🇪 dbelm	2026-06-17 21:32:44 (3 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 mfilser	2026-06-17 21:30:37 (3 days ago)	2026-06-17T23:30:37.453132+02:00 mail postfix/submission/smtpd[112726]: warning: unknown[40.70.2.16] ... show more 2026-06-17T23:30:37.453132+02:00 mail postfix/submission/smtpd[112726]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-17T23:30:37.548708+02:00 mail postfix/submission/smtpd[112726]: disconnect from unknown[40.70.2.16] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇫🇷 Campus France	2026-06-17 18:40:19 (3 days ago)	2026-06-17T20:34:17.508058+02:00 server9 dovecot[776459]: submission-login: Disconnected: Connection ... show more 2026-06-17T20:34:17.508058+02:00 server9 dovecot[776459]: submission-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=40.70.2.16, lip=62.210.65.21, TLS: Connection closed, session=<xRiMTndUQ+0oRgIQ> 2026-06-17T20:35:29.521180+02:00 server9 dovecot[776459]: submission-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=40.70.2.16, lip=62.210.65.21, TLS: Connection closed, session=<Y/bWUndUxOAoRgIQ> 2026-06-17T20:36:11.427783+02:00 server9 dovecot[776459]: submission-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=40.70.2.16, lip=62.210.65.21, TLS: Connection closed, session=<p59OVXdUC9ooRgIQ> 2026-06-17T20:36:49.478539+02:00 server9 dovecot[776459]: submission-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<raparicio@ra ... show less	Brute-Force Exploited Host
🇳🇱 e.fierstra	2026-06-17 18:40:14 (3 days ago)	Failed SMTP logins	Brute-Force
🇦🇺 AWW-Admin	2026-06-17 18:36:19 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/-)	Brute-Force
Anonymous	2026-06-17 15:38:11 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/-)	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-17 15:36:47 (3 days ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch US/United States/-	Web App Attack
🇷🇴 EasyNet Consulting	2026-06-17 04:41:43 (3 days ago)	2026-06-17T07:36:45.076016+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40 ... show more 2026-06-17T07:36:45.076016+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-17T07:37:37.032309+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-17T07:38:10.204986+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-17T07:38:43.255913+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-17T07:39:16.345345+03:00 EmailStorage postfix/submission/smtpd[1329344]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026- ... show less	Brute-Force SSH
Anonymous	2026-06-17 04:39:19 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/Virginia/Boydton/-/[redacted])	Brute-Force
🇫🇷 asemen	2026-06-17 04:38:16 (3 days ago)	Jun 17 06:36:57 mbox postfix/submission/smtpd[3675278]: warning: unknown[40.70.2.16]: SASL PLAIN aut ... show more Jun 17 06:36:57 mbox postfix/submission/smtpd[3675278]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: Jun 17 06:37:43 mbox postfix/submission/smtpd[3675278]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: Jun 17 06:38:15 mbox postfix/submission/smtpd[3675278]: warning: unknown[40.70.2.16]: SASL PLAIN authentication failed: ... show less	Port Scan Brute-Force SSH
🇩🇪 DEV-DNS	2026-06-17 01:47:36 (4 days ago)	(smtpauth) Failed SMTP AUTH login from 40.70.2.16 (US/United States/Virginia/Boydton/-/[redacted])	Brute-Force

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 102.64.46.106

🇺🇸 97.107.141.150

🇭🇰 47.82.75.232

🇺🇸 44.200.217.98

🇭🇰 43.154.140.188

🇬🇧 35.203.211.254

🇬🇧 35.203.211.83

🇨🇳 14.103.84.166

🇹🇭 202.29.225.158

🇮🇹 188.152.238.126

🇭🇺 185.111.209.32

🇬🇧 178.62.13.188

🇫🇷 163.172.143.147

🇫🇮 147.185.133.19

🇺🇸 146.190.134.221

🇿🇦 102.64.39.217

🇨🇳 101.71.210.23

🇩🇪 69.5.169.141

🇺🇸 64.62.156.117

🇺🇸 2607:f8b0:4001:c32::129