JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.221.72.240

20.221.72.240 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 86%: ?

86%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.221.72.240

Whois 20.221.72.240

IP Abuse Reports for 20.221.72.240:

This IP address has been reported a total of 20 times from 15 distinct sources. 20.221.72.240 was first reported on June 14th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-15 21:03:38 (4 minutes ago)	(smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-15 16:45:02 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:59064: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:47:02 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:46384: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:54:21 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:57426: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:56:31 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:44404: 535 Incorrect authentication data ([email protected]) 2026-06-15 17:03:37 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:47946: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-15 20:37:41 (30 minutes ago)	(smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-15 15:50:07 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:50796: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:26:21 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:37228: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:28:09 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:45578: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:35:32 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:60434: 535 Incorrect authentication data ([email protected]) 2026-06-15 16:37:39 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:47492: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-06-15 20:32:01 (35 minutes ago)	...	Brute-Force
🇩🇪 samba.org	2026-06-15 20:30:22 (37 minutes ago)	spam (f2b h2)	Brute-Force
🇺🇸 welm	2026-06-15 14:53:59 (6 hours ago)	(PERMBLOCK) 20.221.72.240 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 20.221.72.240 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇧🇷 dominioz	2026-06-15 10:08:55 (10 hours ago)	20.221.72.240 [01D0] 07:03:50 Authentication [SMTP] - Result=0, [email protected], Metho ... show more 20.221.72.240 [01D0] 07:03:50 Authentication [SMTP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
Anonymous	2026-06-15 04:32:14 (16 hours ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇧🇷 dominioz	2026-06-15 02:09:05 (18 hours ago)	20.221.72.240 [0B28] 23:03:39 Authentication [SMTP] - Result=0, [email protected], Me ... show more 20.221.72.240 [0B28] 23:03:39 Authentication [SMTP] - Result=0, [email protected], Method=0 20.221.72.240 [08D4] 23:06:24 Authentication [SMTP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇺🇸 hostmach	2026-06-15 01:31:15 (19 hours ago)	(smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-15 00:47:14 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:37118: 535 Incorrect authentication data ([email protected]) 2026-06-15 00:58:13 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:45842: 535 Incorrect authentication data ([email protected]) 2026-06-15 01:09:18 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:56372: 535 Incorrect authentication data ([email protected]) 2026-06-15 01:20:18 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:33832: 535 Incorrect authentication data ([email protected]) 2026-06-15 01:31:10 dovecot_login authenticator failed for H=(ADMIN) [20.221.72.240]:37230: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇳🇱 GabrielJST	2026-06-15 00:29:13 (20 hours ago)	(smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-)	Brute-Force
🇧🇷 SvrAdmin	2026-06-15 00:23:55 (20 hours ago)	[319] (smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 ... show more [319] (smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jun 14 20:30:21 cwp01 postfix/smtpd[26088]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 20:51:36 cwp01 postfix/smtpd[27547]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 21:02:31 cwp01 postfix/smtpd[28324]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 21:13:09 cwp01 postfix/smtpd[29064]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 21:23:53 cwp01 postfix/smtpd[29795]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇬🇧 Aetherweb Ark	2026-06-15 00:14:38 (20 hours ago)	20.221.72.240 (US/United States/-), N distributed smtpauth attacks on account in the last X secs	Brute-Force
Anonymous	2026-06-15 00:03:29 (21 hours ago)	(smtpauth) Failed SMTP AUTH login from 20.221.72.240 (US/United States/Iowa/Des Moines/-/[redacted])	Brute-Force
Anonymous	2026-06-14 23:55:50 (21 hours ago)	2026-06-14T18:04:55.248026-03:00 web postfix/submissions/smtpd[43325]: warning: unknown[20.221.72.24 ... show more 2026-06-14T18:04:55.248026-03:00 web postfix/submissions/smtpd[43325]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-14T20:44:29.372483-03:00 web postfix/submissions/smtpd[199085]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-14T20:55:50.343900-03:00 web postfix/submissions/smtpd[201852]: warning: unknown[20.221.72.240]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Phishing Web Spam Email Spam Hacking Spoofing Brute-Force Bad Web Bot
🇵🇹 WebTejo	2026-06-14 23:52:33 (21 hours ago)	Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 2 ... show more Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 20.221.72.240 on [PT] Tucano Node. show less	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 95.214.53.157

🇨🇳 43.138.68.113

🇺🇸 209.217.225.18

🇨🇳 203.76.241.18

🇬🇧 194.50.235.139

🇬🇹 190.151.130.5

🇩🇪 167.94.146.33

🇩🇪 167.94.145.28

🇧🇷 131.196.171.102

🇮🇳 45.115.107.21

🇬🇧 31.171.130.70

🇵🇦 190.32.246.14

🇮🇳 103.190.7.203

🇸🇮 102.220.160.129

🇩🇪 69.5.169.155

🇺🇸 63.46.42.51

🇺🇸 45.56.111.60

🇺🇸 34.105.80.104

🇷🇺 5.142.209.120

🇳🇱 5.132.69.157