JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.200.170.6

20.200.170.6 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 61%: ?

61%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Busan, Busan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.200.170.6

Whois 20.200.170.6

IP Abuse Reports for 20.200.170.6:

This IP address has been reported a total of 15 times from 11 distinct sources. 20.200.170.6 was first reported on June 30th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 wHosts	2026-07-06 00:10:46 (3 days ago)	Blocked by Fail2Ban	Brute-Force Web App Attack
🇬🇧 iss-security-operations	2026-07-05 12:01:01 (3 days ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇬🇧 iss-security-operations	2026-07-04 12:01:00 (4 days ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
Anonymous	2026-07-03 18:50:02 (5 days ago)	...	Brute-Force
🇺🇸 bigscoots.com	2026-07-03 16:59:20 (5 days ago)	(PERMBLOCK) 20.200.170.6 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; ... show more (PERMBLOCK) 20.200.170.6 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-03 16:36:58 (5 days ago)	(smtpauth) Failed SMTP AUTH login from 20.200.170.6 (KR/South Korea/-): 5 in the last 3600 secs; Por ... show more (smtpauth) Failed SMTP AUTH login from 20.200.170.6 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-03 12:35:45 dovecot_login authenticator failed for H=(lI4mMgplaP) [20.200.170.6]:61148: 535 Incorrect authentication data (set_id=jim.etzkorn) 2026-07-03 12:35:56 dovecot_login authenticator failed for H=(dgqcy28) [20.200.170.6]:63197: 535 Incorrect authentication data (set_id=jim.etzkorn) 2026-07-03 12:36:11 dovecot_login authenticator failed for H=(zxKTS7rG) [20.200.170.6]:50165: 535 Incorrect authentication data (set_id=jim.etzkorn) 2026-07-03 12:36:33 dovecot_login authenticator failed for H=(tnMot2T) [20.200.170.6]:55973: 535 Incorrect authentication data (set_id=jim.etzkorn) 2026-07-03 12:36:56 dovecot_login authenticator failed for H=(dN51Xeg2Q) [20.200.170.6]:63507: 535 Incorrect authentication data (set_id=jim.etzkorn) show less	Brute-Force SSH
🇩🇪 Paul Smith	2026-07-03 15:11:07 (5 days ago)	Email Auth Brute force attack 5/1 in last day	Brute-Force
🇺🇸 bigscoots.com	2026-07-03 13:03:51 (5 days ago)	(smtpauth) Failed SMTP AUTH login from 20.200.170.6 (KR/South Korea/-): 5 in the last 3600 secs; Por ... show more (smtpauth) Failed SMTP AUTH login from 20.200.170.6 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-03 09:02:45 dovecot_login authenticator failed for H=(2FIiWwRwve) [20.200.170.6]:52350: 535 Incorrect authentication data ([email protected]) 2026-07-03 09:02:54 dovecot_login authenticator failed for H=(I59BfNDn) [20.200.170.6]:53281: 535 Incorrect authentication data ([email protected]) 2026-07-03 09:03:08 dovecot_login authenticator failed for H=(KKQblKkHyZ) [20.200.170.6]:61209: 535 Incorrect authentication data ([email protected]) 2026-07-03 09:03:28 dovecot_login authenticator failed for H=(P917cdf) [20.200.170.6]:58174: 535 Incorrect authentication data ([email protected]) 2026-07-03 09:03:48 dovecot_login authenticator failed for H=(PozaKRHX) [20.200.170.6]:49312: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 xmission.com	2026-07-03 10:08:05 (5 days ago)	Blocked by UFW (TCP on 587) Source port: 57587 TTL: 110 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 587) Source port: 57587 TTL: 110 Packet length: 52 TOS: 0x00 This report (for 20.200.170.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-03 06:03:43 (6 days ago)	Blocked by UFW (TCP on 587) Source port: 63417 TTL: 110 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 587) Source port: 63417 TTL: 110 Packet length: 52 TOS: 0x00 This report (for 20.200.170.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 openstrike.co.uk	2026-07-01 22:51:22 (1 week ago)	Email auth failures (120)	Brute-Force
🇩🇪 moretrix	2026-07-01 21:49:09 (1 week ago)	2026-07-01T23:49:08.551376+02:00 ieyasu.moretrix.com postfix/submission/smtpd[1444003]: warning: unk ... show more 2026-07-01T23:49:08.551376+02:00 ieyasu.moretrix.com postfix/submission/smtpd[1444003]: warning: unknown[20.200.170.6]: SASL LOGIN authentication failed: generic failure, [email protected] ... show less	Brute-Force
🇩🇪 samba.org	2026-07-01 21:43:35 (1 week ago)	spam (f2b h2)	Brute-Force
🇯🇵 gomasy	2026-07-01 06:15:33 (1 week ago)	2026-07-01T15:15:32.908401+09:00 ssv02 auth[2139587]: pam_unix(dovecot:auth): authentication failure ... show more 2026-07-01T15:15:32.908401+09:00 ssv02 auth[2139587]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=********** rhost=20.200.170.6 ... show less	Brute-Force
🇯🇵 ki3	2026-06-30 22:42:33 (1 week ago)	Fail2Ban: Postfix Attack 20.200.170.6 1782859352.0(JST)	Email Spam Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 163.61.39.40

🇵🇪 161.132.54.218

🇮🇩 110.35.80.116

🇺🇸 74.7.175.189

🇶🇦 34.153.65.24

🇨🇳 223.84.199.51

🇰🇷 211.223.107.86

🇰🇷 211.106.133.202

🇧🇪 198.235.24.205

🇳🇱 195.178.110.137

🇦🇺 158.178.141.16

🇪🇸 158.49.70.49

🇦🇷 143.105.136.136

🇹🇭 114.131.130.11

🇮🇩 103.67.244.133

🇺🇸 74.7.230.5

🇺🇸 45.91.81.111

🇬🇧 35.203.211.149

🇺🇸 20.12.41.6

🇳🇱 2.27.55.46