JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.164.0.196

20.164.0.196 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.164.0.196

Whois 20.164.0.196

IP Abuse Reports for 20.164.0.196:

This IP address has been reported a total of 17 times from 14 distinct sources. 20.164.0.196 was first reported on January 13th 2026, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-01-21 04:11:07 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 FABIO EGAS	2026-01-13 20:52:40 (8 months ago)	(PERMBLOCK) 20.164.0.196 (ZA/South Africa/-) has had more than 4 temp blocks	Hacking
Anonymous	2026-01-13 16:30:14 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 FABIO EGAS	2026-01-13 14:36:56 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-)	Brute-Force
🇧🇷 LM Security	2026-01-13 14:30:02 (8 months ago)	2026-01-13 11:25:37 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:35500: 535 Incor ... show more 2026-01-13 11:25:37 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:35500: 535 Incorrect authentication data (set_id=rh@[redacted].com.br) 2026-01-13 11:18:28 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:46638: 535 Incorrect authentication data (set_id=rh@[redacted].com.br) show less	Brute-Force
Anonymous	2026-01-13 14:15:49 (8 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇧🇷 SvrAdmin	2026-01-13 13:59:14 (8 months ago)	[315] (smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-): 5 in the last 3600 se ... show more [315] (smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jan 13 10:10:34 cwp01 postfix/smtpd[16409]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 13 10:44:20 cwp01 postfix/smtpd[19105]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 13 10:52:00 cwp01 postfix/smtpd[21648]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 13 10:58:54 cwp01 postfix/smtpd[21649]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 13 10:59:11 cwp01 postfix/smtpd[21649]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 MojoBlock	2026-01-13 13:57:09 (8 months ago)	2026-01-13 07:43:04 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:40718: 535 Incor ... show more 2026-01-13 07:43:04 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:40718: 535 Incorrect authentication data ([email protected]) 2026-01-13 07:50:37 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:32982: 535 Incorrect authentication data ([email protected]) 2026-01-13 07:57:03 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:43998: 535 Incorrect authentication data ([email protected]) ... show less	Email Spam Brute-Force
🇦🇺 AWW-Admin	2026-01-13 13:56:38 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-)	Brute-Force
🇳🇱 Slartibartfast	2026-01-13 13:30:36 (8 months ago)	SMTP Brute Force	Brute-Force
🇩🇪 chris_yooo	2026-01-13 03:49:42 (8 months ago)	Jan 13 04:39:59 isp postfix/smtps/smtpd[652438]: warning: unknown[20.164.0.196]: SASL LOGIN authenti ... show more Jan 13 04:39:59 isp postfix/smtps/smtpd[652438]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jan 13 04:39:59 isp postfix/smtps/smtpd[652438]: disconnect from unknown[20.164.0.196] ehlo=1 auth=0/1 quit=1 commands=2/3 Jan 13 04:49:42 isp postfix/smtps/smtpd[656254]: warning: unknown[20.164.0.196]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Spoofing Brute-Force
🇮🇹 VHosting	2026-01-13 03:45:10 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-01-13 03:45:02 (8 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇧🇷 hostseries	2026-01-13 03:42:03 (8 months ago)	Trigger: LF_SMTPAUTH	Brute-Force
🇺🇸 bigscoots.com	2026-01-13 03:31:10 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 20.164.0.196 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-12 21:43:03 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:58852: 535 Incorrect authentication data ([email protected]) 2026-01-12 21:49:03 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:55264: 535 Incorrect authentication data ([email protected]) 2026-01-12 22:18:29 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:34016: 535 Incorrect authentication data ([email protected]) 2026-01-12 22:29:28 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:54010: 535 Incorrect authentication data ([email protected]) 2026-01-12 22:31:07 dovecot_login authenticator failed for H=(ADMIN) [20.164.0.196]:42038: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a13:f43:af1b:6c31:fe58:4a21:6d2e:9422

🇸🇨 2a12:f544:fd6b:56f7:83b1:39f6:d6ed:284d

🇸🇬 2a12:f541:8c6e:e3a7:ef89:f532:e04d:a121

🇺🇸 2a01:f2c2:fc1:6890:88f3:e82a:ad72:444b

🇵🇭 2405:8d40:4894:5cc5:5c50:6a7d:3884:8852

🇪🇸 194.164.169.12

🇧🇷 186.205.27.92

🇮🇳 122.166.208.238

🇦🇺 115.64.68.95

🇺🇸 104.152.52.140

🇺🇦 94.131.240.137

🇨🇦 85.217.149.37

🇫🇷 82.65.245.254

🇮🇪 54.229.54.30

🇺🇸 46.110.132.186

🇳🇱 45.148.10.141

🇫🇷 2a13:f42:96cd:7c94:ea0:174e:6a37:af72

🇸🇬 2a12:f541:a3de:e4b4:df38:158b:510b:1d1

🇨🇦 159.89.113.99

🇺🇸 142.111.152.134