20.5.136.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
90% Critical
27 reports
17 reporters · latest 6 hours ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇦🇺 Australia
City
Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
27 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 7 🇺🇸 United States of America 7 🇧🇷 Brazil 6
Most common categories Brute-Force 26 Email Spam 13 Hacking 3 SSH 3 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 marcelhalls
SMTP brute-force detected by Fail2Ban in plesk-postfix jail
Email Spam Brute-Force
🇫🇷 GabrielJST
(smtpauth) Failed SMTP AUTH login from 20.5.136.248 (AU/Australia/-)
Brute-Force
🇫🇷 ricardosantis
Brute-Force Email Spam
🇫🇷 ricardosantis
Brute-Force Email Spam
🇫🇷 ricardosantis
Brute-Force Email Spam
🇫🇷 ricardosantis
Brute-Force Email Spam
🇺🇸 hostmach
Brute-Force SSH
🇧🇷 tiwanetbr
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SMTP/Mail, failed attempts: 5).
Brute-Force Hacking
🇧🇷 SvrAdmin
Port Scan Hacking Brute-Force Exploited Host
🇫🇷 ricardosantis
Brute-Force Email Spam
Anonymous
(smtpauth) Failed SMTP AUTH login from 20.5.136.248 (AU/Australia/New South Wales/Sydney/-/[redacted])
Brute-Force
🇺🇸 hostmach
Brute-Force SSH
🇺🇸 brianbgv
Dovecot mail abuse detected by Fail2Ban
Port Scan Hacking SSH
🇧🇷 govfacil.app
Brute-Force
🇧🇷 Host One
Attack blocked by firewall: SMTP authentication brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 25, 465, 587 (SMTP). Automated report.
Email Spam Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 223.134.89.104
🇨🇳 221.195.114.14
🇸🇬 212.73.148.36
🇺🇸 193.202.8.89
🇺🇸 162.216.149.153
🇫🇷 141.94.121.165
🇮🇱 84.111.136.210
🇳🇱 64.205.72.12
🇳🇱 45.148.10.152
🇺🇸 35.229.28.102
🇧🇪 35.210.82.144
🇫🇮 193.142.36.17
🇳🇱 193.47.62.69
🇨🇳 183.232.212.207
🇺🇸 107.170.36.208
🇬🇧 81.110.21.238
🇧🇪 35.210.71.149
🇩🇪 2400:cb00:472:1000:487:8b3c:9de0:2fc4
🇪🇨 190.110.46.37
🇷🇺 178.176.84.247
feedback