JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

68.210.200.49

Neutral Activity

Abuse Confidence Score

0% Low Risk

30 reports

22 reporters · latest 9 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇦🇹 Austria
City: Vienna, Vienna

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

68.210.200.49 has been reported 30 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

30 from 22 distinct reporters

First reported

January 20th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-01-28 05:26:53 UTC · (9 months ago)	recidive - IP: 68.210.200.49 - 2026-01-21 06:40:57,984 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:10:55,648 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:55:57,361 fail2ban ... show more recidive - IP: 68.210.200.49 - 2026-01-21 06:40:57,984 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:10:55,648 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:55:57,361 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 show less	Web App Attack
🇬🇧 [email protected]	2026-01-22 00:55:59 UTC · (9 months ago)	...	Brute-Force SSH
🇺🇸 FABIO EGAS	2026-01-22 00:14:13 UTC · (9 months ago)	(PERMBLOCK) 68.210.200.49 (AT/Austria/-) has had more than 4 temp blocks	Hacking
🇹🇭 thaizone.com	2026-01-21 19:42:53 UTC · (9 months ago)	Mail credential brute-force attack (SM5) #1	Email Spam Brute-Force
🇧🇷 SvrAdmin	2026-01-21 19:18:05 UTC · (9 months ago)	[272] (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jan 21 15:32:30 cwp01 postfix/smtpd[31955]: warning: unknown[68.210.200.49]: SASL LOGIN authen ... show more [272] (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jan 21 15:32:30 cwp01 postfix/smtpd[31955]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 15:54:53 cwp01 postfix/smtpd[2893]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 16:02:43 cwp01 postfix/smtpd[3861]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 16:10:21 cwp01 postfix/smtpd[4587]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 16:18:00 cwp01 postfix/smtpd[5911]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 FABIO EGAS	2026-01-21 19:08:01 UTC · (9 months ago)	(smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-)	Brute-Force
🇺🇸 vandomatos	2026-01-21 19:07:41 UTC · (9 months ago)	Jan 21 09:57:58 servidor postfix/smtps/smtpd[369496]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 10:59:14 servidor postfix/smtps/smtpd[374917]: warning: unknown[68.210.200.49]: SASL LOGIN authentication fai ... show more Jan 21 09:57:58 servidor postfix/smtps/smtpd[369496]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 10:59:14 servidor postfix/smtps/smtpd[374917]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 11:07:39 servidor postfix/smtps/smtpd[376037]: warning: unknown[68.210.200.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Phishing Web Spam Email Spam Hacking Spoofing Brute-Force Bad Web Bot
🇨🇭 Origon	2026-01-21 06:55:58 UTC · (9 months ago)	recidive - IP: 68.210.200.49 - 2026-01-21 06:40:57,984 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:10:55,648 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:55:57,361 fail2ban ... show more recidive - IP: 68.210.200.49 - 2026-01-21 06:40:57,984 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:10:55,648 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 2026-01-21 07:55:57,361 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 68.210.200.49 show less	Web App Attack
🇳🇱 rroethof	2026-01-21 05:57:53 UTC · (9 months ago)	(smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 06:01:21 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authenticati ... show more (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 06:01:21 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:33:43 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:42:01 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:49:51 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:57:48 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) show less	Spoofing Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2026-01-21 05:48:00 UTC · (9 months ago)	Automated abuse report by SpeedIT Security Team	Brute-Force Exploited Host SSH
Anonymous	2026-01-21 05:34:05 UTC · (9 months ago)	(smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 06:13:05 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authenti ... show more (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 06:13:05 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:23:17 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:24:01 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:26:13 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) 2026-01-21 06:34:04 login authenticator failed for H=(ADMIN) [68.210.200.49]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 bigscoots.com	2026-01-21 04:01:01 UTC · (9 months ago)	(PERMBLOCK) 68.210.200.49 (AT/Austria/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-21 03:40:33 UTC · (9 months ago)	(smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-20 22:22:15 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:57716: 535 ... show more (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-20 22:22:15 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:57716: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:26:34 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:37660: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:36:48 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:46922: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:37:02 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:36878: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:40:31 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:59818: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 marcelhalls	2026-01-21 03:00:05 UTC · (9 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇺🇸 bigscoots.com	2026-01-21 02:59:22 UTC · (9 months ago)	(smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-20 21:48:02 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:48844: 535 ... show more (smtpauth) Failed SMTP AUTH login from 68.210.200.49 (AT/Austria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-20 21:48:02 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:48844: 535 Incorrect authentication data ([email protected]) 2026-01-20 21:48:31 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:39512: 535 Incorrect authentication data ([email protected]) 2026-01-20 21:50:54 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:53978: 535 Incorrect authentication data ([email protected]) 2026-01-20 21:57:11 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:48280: 535 Incorrect authentication data ([email protected]) 2026-01-20 21:59:20 dovecot_login authenticator failed for H=(ADMIN) [68.210.200.49]:60920: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.114

🇫🇷 85.217.140.32

🇰🇷 49.246.3.236

🇧🇪 35.210.246.75

🇳🇱 213.209.159.228

🇲🇽 206.135.37.75

🇳🇱 192.253.248.226

🇩🇪 151.243.11.43

🇹🇭 106.0.166.123

🇸🇪 104.23.223.154

🇫🇷 92.113.26.77

🇺🇸 65.49.1.13

🇮🇶 37.239.104.57

🇮🇩 180.246.110.197

🇦🇷 179.49.107.170

🇺🇸 162.216.149.243

🇺🇸 147.185.132.28

🇺🇸 66.132.159.104

🇺🇸 52.248.43.160

🇬🇧 35.242.182.102