AbuseIPDB » 20.115.40.22

20.115.40.22 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 82%: ?

82%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.115.40.22

Whois 20.115.40.22

IP Abuse Reports for 20.115.40.22:

This IP address has been reported a total of 25 times from 21 distinct sources. 20.115.40.22 was first reported on August 14th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
NOC ST	2024-09-06 09:57:58 (1 day ago)	Sep 6 06:55:06 zimbramta01 postfix/submission/smtpd[2543]: warning: unknown[20.115.40.22]: SASL PLA ... show moreSep 6 06:55:06 zimbramta01 postfix/submission/smtpd[2543]: warning: unknown[20.115.40.22]: SASL PLAIN authentication failed: authentication failure Sep 6 06:55:06 zimbramta01 postfix/submission/smtpd[2543]: warning: unknown[20.115.40.22]: SASL LOGIN authentication failed: authentication failure Sep 6 06:57:57 zimbramta01 postfix/submission/smtpd[2532]: warning: unknown[20.115.40.22]: SASL PLAIN authentication failed: authentication failure Sep 6 06:57:57 zimbramta01 postfix/submission/smtpd[2532]: warning: unknown[20.115.40.22]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2024-09-06 06:18:33 (1 day ago)	Sep 6 06:18:32 m postfix/submission/smtpd[599691]: warning: unknown[20.115.40.22]: SASL PLAIN authe ... show moreSep 6 06:18:32 m postfix/submission/smtpd[599691]: warning: unknown[20.115.40.22]: SASL PLAIN authentication failed: authentication failure Sep 6 06:18:32 m postfix/submission/smtpd[599691]: warning: unknown[20.115.40.22]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2024-09-02 15:38:56 (5 days ago)	postfix-sasl	Brute-Force Web App Attack
ISPLtd	2024-09-02 01:21:50 (5 days ago)	Sep 1 19:21:46 SRC=20.115.40.22 PROTO=TCP SPT=53855 DPT=2096 SYN Sep 1 19:21:47 SRC=20.115.4 ... show moreSep 1 19:21:46 SRC=20.115.40.22 PROTO=TCP SPT=53855 DPT=2096 SYN Sep 1 19:21:47 SRC=20.115.40.22 PROTO=TCP SPT=53855 DPT=2096 SYN Sep 1 19:21:49 SRC=20.115.40.22 PROTO=TCP SPT=53855 ... show less	Port Scan
Sonar	2024-08-30 15:37:06 (1 week ago)	Bad_host	Brute-Force
Hobby Bob	2024-08-29 22:27:46 (1 week ago)	Aug 29 23:27:46 mail postfix/submission/smtpd[411838]: warning: unknown[20.115.40.22]: SASL PLAIN au ... show moreAug 29 23:27:46 mail postfix/submission/smtpd[411838]: warning: unknown[20.115.40.22]: SASL PLAIN authentication failed: show less	Hacking Brute-Force
syokadmin	2024-08-26 05:56:46 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 20.115.40.22 (US/United States/-): 2 in the last 3600 secs	Brute-Force
Anonymous	2024-08-25 02:47:44 (1 week ago)	This IP was involved in an brute force and password spray attack on	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2024-08-23 18:40:44 (2 weeks ago)	This IP was involved in an brute force and password spray attack on	Port Scan Brute-Force Exploited Host Web App Attack
LM Security	2024-08-23 02:00:05 (2 weeks ago)	2024-08-22 22:59:16 dovecot_login authenticator failed for (A.hg1zizvxkm2e5nt0uqlemfkqkg.bx.internal ... show more2024-08-22 22:59:16 dovecot_login authenticator failed for (A.hg1zizvxkm2e5nt0uqlemfkqkg.bx.internal.cloudapp.net) [20.115.40.22]:64073: 535 Incorrect authentication data (set_id=jorge.daros@[redacted].com.br) 2024-08-22 22:59:10 dovecot_plain authenticator failed for (A.hg1zizvxkm2e5nt0uqlemfkqkg.bx.internal.cloudapp.net) [20.115.40.22]:64073: 535 Incorrect authentication data (set_id=jorge.daros@[redacted].com.br) show less	Brute-Force
Anonymous	2024-08-22 15:15:33 (2 weeks ago)	BruteForce IMAP/POP3	Brute-Force
FABIO EGAS	2024-08-22 15:07:12 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 20.115.40.22 (US/United States/-)	Brute-Force
Tecnologia da Informação	2024-08-22 13:38:13 (2 weeks ago)	Aug 22 10:38:12 mail postfix/submission/smtpd\[4864\]: warning: unknown\[20.115.40.22\]: SASL CRAM-M ... show moreAug 22 10:38:12 mail postfix/submission/smtpd\[4864\]: warning: unknown\[20.115.40.22\]: SASL CRAM-MD5 authentication failed: authentication failureAug 22 10:38:12 mail postfix/submission/smtpd\[4864\]: warning: unknown\[20.115.40.22\]: SASL PLAIN authentication failed: authentication failureAug 22 10:38:12 mail postfix/submission/smtpd\[4864\]: warning: unknown\[20.115.40.22\]: SASL LOGIN authentication failed: authentication failure ... show less	Hacking Brute-Force
Mediashaker	2024-08-22 10:16:33 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 20.115.40.22 (US/United States/-)	Brute-Force
Anonymous	2024-08-22 09:29:30 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 20.115.40.22 (US/United States/Virginia/Washington/-/[redacte ... show more(smtpauth) Failed SMTP AUTH login from 20.115.40.22 (US/United States/Virginia/Washington/-/[redacted]) show less	Brute-Force