AbuseIPDB » 68.221.170.247

68.221.170.247 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 25%: ?

25%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 68.221.170.247

Whois 68.221.170.247

IP Abuse Reports for 68.221.170.247:

This IP address has been reported a total of 13 times from 9 distinct sources. 68.221.170.247 was first reported on December 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bigscoots.com	2024-12-09 13:37:42 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; Ports: ... show more(smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-12-09 08:26:51 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:55833: 535 Incorrect authentication data ([email protected]) 2024-12-09 08:31:53 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:64106: 535 Incorrect authentication data ([email protected]) 2024-12-09 08:33:56 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:63930: 535 Incorrect authentication data ([email protected]) 2024-12-09 08:35:45 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:64313: 535 Incorrect authentication data ([email protected]) 2024-12-09 08:37:41 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:61018: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
rtbh.com.tr	2024-12-08 20:52:50 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-12-07 20:52:50 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-12-06 16:50:05 (1 month ago)	8x Postfix SASL LOGIN authentication failed	Brute-Force
Anonymous	2024-12-06 16:30:06 (1 month ago)	Failed login attempt detected by Fail2Ban in postfix-failedauth jail	DDoS Attack
SvrAdmin	2024-12-04 21:22:37 (1 month ago)	[272] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; P ... show more[272] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 4 17:24:40 cwp01 postfix/smtpd[31120]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 18:18:35 cwp01 postfix/smtpd[6084]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 18:20:21 cwp01 postfix/smtpd[6084]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 18:21:22 cwp01 postfix/smtpd[6084]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 18:22:33 cwp01 postfix/smtpd[6084]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
SvrAdmin	2024-12-04 13:12:55 (1 month ago)	[4252] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; ... show more[4252] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-12-04 10:01:40 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:64542: 535 Incorrect authentication data ([email protected]) 2024-12-04 10:05:49 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:50871: 535 Incorrect authentication data ([email protected]) 2024-12-04 10:08:37 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:61991: 535 Incorrect authentication data ([email protected]) 2024-12-04 10:10:45 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:65394: 535 Incorrect authentication data ([email protected]) 2024-12-04 10:12:53 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:49183: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2024-12-03 16:07:42 (1 month ago)	(PERMBLOCK) 68.221.170.247 (US/United States/-) has had more than 4 temp blocks in the last 86400 se ... show more(PERMBLOCK) 68.221.170.247 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; IP: 68.221.170.247; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Email Spam Brute-Force
SvrAdmin	2024-12-03 14:23:57 (1 month ago)	[293] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; P ... show more[293] (smtpauth) Failed SMTP AUTH login from 68.221.170.247 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 3 11:12:14 cwp01 postfix/smtpd[29702]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 11:16:52 cwp01 postfix/smtpd[30121]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 11:18:52 cwp01 postfix/smtpd[30241]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 11:21:20 cwp01 postfix/smtpd[30755]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 3 11:23:54 cwp01 postfix/smtpd[32027]: warning: unknown[68.221.170.247]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
Julio Covolato	2024-12-03 13:15:01 (1 month ago)	Imap or Submission login brute-force attacks.	Brute-Force
LM Security	2024-12-03 11:30:05 (1 month ago)	2024-12-03 08:20:54 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:50639: 535 Incor ... show more2024-12-03 08:20:54 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:50639: 535 Incorrect authentication data (set_id=bruna.silva@[redacted].com.br) 2024-12-03 08:03:04 dovecot_login authenticator failed for (ADMIN) [68.221.170.247]:53004: 535 Incorrect authentication data (set_id=cristiane@[redacted].com.br) show less	Brute-Force
Anonymous	2024-12-03 11:22:40 (1 month ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 68.221.170.247, Reason:[(zimbra-mta) Failed login fro ... show moreCluster member 10.170.91.37 (-) said, TEMPDENY 68.221.170.247, Reason:[(zimbra-mta) Failed login from 68.221.170.247 (US/United States/-): 30 in the last 3600 secs]; IP: 68.221.170.247; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
Anonymous	2024-12-03 11:10:27 (1 month ago)	BruteForce IMAP/POP3	Brute-Force