JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.100.185.199

20.100.185.199 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.100.185.199

Whois 20.100.185.199

IP Abuse Reports for 20.100.185.199:

This IP address has been reported a total of 16 times from 4 distinct sources. 20.100.185.199 was first reported on March 13th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2023-03-19 03:57:29 (3 years ago)	(PERMBLOCK) 20.100.185.199 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 20.100.185.199 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-16 08:35:41 (3 years ago)	(PERMBLOCK) 20.100.185.199 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 20.100.185.199 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-16 07:24:56 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2023-03-16 02:29:31 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:36310: 535 Incorrect authentication data ([email protected]) 2023-03-16 02:42:31 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:47290: 535 Incorrect authentication data ([email protected]) 2023-03-16 02:56:45 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:35674: 535 Incorrect authentication data ([email protected]) 2023-03-16 03:10:37 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:51528: 535 Incorrect authentication data ([email protected]) 2023-03-16 03:24:53 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:37172: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-16 06:16:22 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2023-03-16 01:21:18 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:51422: 535 Incorrect authentication data ([email protected]) 2023-03-16 01:34:59 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:59334: 535 Incorrect authentication data ([email protected]) 2023-03-16 01:48:29 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:38454: 535 Incorrect authentication data ([email protected]) 2023-03-16 02:02:05 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:35330: 535 Incorrect authentication data ([email protected]) 2023-03-16 02:16:17 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:41546: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-16 05:07:08 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2023-03-16 00:12:10 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:55784: 535 Incorrect authentication data ([email protected]) 2023-03-16 00:25:51 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:54914: 535 Incorrect authentication data ([email protected]) 2023-03-16 00:38:49 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:32850: 535 Incorrect authentication data ([email protected]) 2023-03-16 00:52:31 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:34214: 535 Incorrect authentication data ([email protected]) 2023-03-16 01:07:03 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:58306: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇧🇷 SvrAdmin	2023-03-16 03:34:25 (3 years ago)	[STX CWP] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 se ... show more [STX CWP] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Mar 16 00:06:18 cwp01 postfix/smtpd[23575]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 00:11:08 cwp01 postfix/smtpd[23689]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 00:20:02 cwp01 postfix/smtpd[23852]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 00:26:32 cwp01 postfix/smtpd[29939]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 00:34:23 cwp01 postfix/smtpd[30131]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 bigscoots.com	2023-03-16 03:30:52 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2023-03-15 22:40:10 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:56126: 535 Incorrect authentication data ([email protected]) 2023-03-15 22:49:53 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:46126: 535 Incorrect authentication data ([email protected]) 2023-03-15 23:03:16 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:47766: 535 Incorrect authentication data ([email protected]) 2023-03-15 23:17:21 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:54536: 535 Incorrect authentication data ([email protected]) 2023-03-15 23:30:50 dovecot_login authenticator failed for (ADMIN) [20.100.185.199]:53106: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇪🇸 10dencehispahard SL	2023-03-16 02:24:33 (3 years ago)	Unauthorized login attempts [ postfix-sasl]	Brute-Force
🇩🇪 LFD	2023-03-13 23:21:08 (3 years ago)		DDoS Attack FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇩🇪 LFD	2023-03-13 21:38:02 (3 years ago)	Mar 13 18:19:08 marte postfix/smtpd[2648118]: warning: unknown[20.100.185.199]: SASL LOGIN authentic ... show more Mar 13 18:19:08 marte postfix/smtpd[2648118]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 18:19:09 marte postfix/smtpd[2648118]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 18:28:57 marte postfix/smtpd[2649259]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 18:28:57 marte postfix/smtpd[2649259]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 18:37:58 marte postfix/smtpd[2649999]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure show less	DDoS Attack FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇩🇪 LFD	2023-03-13 19:56:10 (3 years ago)	Mar 13 16:38:36 marte postfix/smtpd[2636343]: warning: unknown[20.100.185.199]: SASL LOGIN authentic ... show more Mar 13 16:38:36 marte postfix/smtpd[2636343]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 16:38:36 marte postfix/smtpd[2636343]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 16:47:12 marte postfix/smtpd[2637102]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 16:47:12 marte postfix/smtpd[2637102]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 16:56:08 marte postfix/smtpd[2638267]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure show less	DDoS Attack FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇩🇪 LFD	2023-03-13 18:13:49 (3 years ago)	Mar 13 14:54:21 marte postfix/smtpd[2623708]: warning: unknown[20.100.185.199]: SASL LOGIN authentic ... show more Mar 13 14:54:21 marte postfix/smtpd[2623708]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 14:54:21 marte postfix/smtpd[2623708]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 15:04:13 marte postfix/smtpd[2625124]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 15:04:13 marte postfix/smtpd[2625124]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 15:13:44 marte postfix/smtpd[2626200]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure show less	DDoS Attack FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇧🇷 SvrAdmin	2023-03-13 16:26:25 (3 years ago)	[Aportt] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 sec ... show more [Aportt] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Mar 13 12:49:56 painel postfix/smtpd[13372]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 12:59:00 painel postfix/smtpd[19319]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 13:08:33 painel postfix/smtpd[27101]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 13:17:43 painel postfix/smtpd[1020]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 13:26:20 painel postfix/smtpd[7265]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇩🇪 LFD	2023-03-13 16:25:53 (3 years ago)	Mar 13 13:06:03 marte postfix/smtpd[2610938]: warning: unknown[20.100.185.199]: SASL LOGIN authentic ... show more Mar 13 13:06:03 marte postfix/smtpd[2610938]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 13:06:03 marte postfix/smtpd[2610938]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 13:16:16 marte postfix/smtpd[2612264]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure Mar 13 13:16:17 marte postfix/smtpd[2612264]: disconnect from unknown[20.100.185.199] ehlo=1 auth=0/1 quit=1 commands=2/3 Mar 13 13:25:51 marte postfix/smtpd[2613390]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: authentication failure show less	DDoS Attack FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇧🇷 SvrAdmin	2023-03-13 15:50:42 (3 years ago)	[Dintec CWP] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 ... show more [Dintec CWP] (smtpauth) Failed SMTP AUTH login from 20.100.185.199 (NO/Norway/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Mar 13 12:12:38 cwp01 postfix/smtpd[11176]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 12:24:59 cwp01 postfix/smtpd[12877]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 12:44:37 cwp01 postfix/smtpd[14499]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 12:49:17 cwp01 postfix/smtpd[15709]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 13 12:50:41 cwp01 postfix/smtpd[15709]: warning: unknown[20.100.185.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.68

🇺🇸 172.172.170.199

🇫🇮 147.185.133.236

🇺🇸 20.127.210.132

🇫🇷 185.177.72.17

🇰🇷 175.118.127.138

🇺🇸 172.171.233.230

🇮🇩 157.15.67.253

🇰🇷 152.32.139.228

🇧🇩 151.158.44.55

🇻🇳 103.189.208.13

🇳🇴 93.184.126.233

🇫🇷 4.211.84.189

🇹🇼 198.235.24.36

🇨🇳 49.115.217.146

🇭🇰 45.202.199.94

🇮🇳 45.123.110.70

🇺🇸 40.74.212.136

🇷🇴 2.57.122.150

🇦🇷 200.112.155.185