This IP address has been reported a total of
24
times from
21 distinct
sources.
70.166.99.200 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(smtpauth) Failed SMTP AUTH login from 70.166.99.200 (US/United States/Arizona/Phoenix/-/[AS22773 Co ...
show more(smtpauth) Failed SMTP AUTH login from 70.166.99.200 (US/United States/Arizona/Phoenix/-/[AS22773 Cox Communications Inc.]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-16 15:30:38 dovecot_login authenticator failed for H=wsip-70-166-99-200.ph.ph.cox.net ([200.112.155.185]) [70.166.99.200]:35253: 535 Incorrect authentication data (set_id=info)
show less
Sep 14 12:55:22 mail postfix/submission/smtpd[1835543]: warning: wsip-70-166-99-200.ph.ph.cox.net[70 ...
show moreSep 14 12:55:22 mail postfix/submission/smtpd[1835543]: warning: wsip-70-166-99-200.ph.ph.cox.net[70.166.99.200]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 14 12:55:22 mail postfix/submission/smtpd[1835543]: lost connection after AUTH from wsip-70-166-99-200.ph.ph.cox.net[70.166.99.200]
...
show less
14 Sep 2026 12:30:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more14 Sep 2026 12:30:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 70.166.99.200
show less
Email account brute force: 1 attempts were recorded from 70.166.99.200
2026-09-14T10:17:58+02:00 war ...
show moreEmail account brute force: 1 attempts were recorded from 70.166.99.200
2026-09-14T10:17:58+02:00 warning: wsip-70-166-99-200.ph.ph.cox.net[70.166.99.200]: SASL LOGIN authentication failed: authentication failure, [email protected]show less
Brute-Force
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ