JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.5.48.219

20.5.48.219 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.5.48.219

Whois 20.5.48.219

IP Abuse Reports for 20.5.48.219:

This IP address has been reported a total of 32 times from 22 distinct sources. 20.5.48.219 was first reported on January 20th 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-01-28 05:26:41 (6 months ago)	recidive - IP: 20.5.48.219 - 2026-01-21 06:22:15,207 fail2ban.actions [3396062]: NOTICE [plesk-post ... show more recidive - IP: 20.5.48.219 - 2026-01-21 06:22:15,207 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 2026-01-21 06:42:35,712 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 2026-01-21 07:00:17,584 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 show less	Web App Attack
🇺🇸 agenciahypelab.com.br	2026-01-23 01:57:35 (7 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2026-01-22 17:41:58 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-)	Brute-Force
🇺🇸 FABIO EGAS	2026-01-22 17:39:37 (7 months ago)	(PERMBLOCK) 20.5.48.219 (AU/Australia/-) has had more than 4 temp blocks	Hacking
🇵🇹 WebTejo	2026-01-22 17:17:13 (7 months ago)	Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 2 ... show more Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 20.5.48.219 on [PT] Tucano Node. show less	Brute-Force SSH
🇫🇷 vhnmn	2026-01-22 16:31:13 (7 months ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
🇬🇧 openstrike.co.uk	2026-01-22 08:58:58 (7 months ago)	8 packets to port 465	Brute-Force
🇩🇪 marcelhalls	2026-01-22 03:00:09 (7 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇺🇸 FABIO EGAS	2026-01-21 20:06:48 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-)	Brute-Force
🇺🇸 mind5t0rm	2026-01-21 09:19:41 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jan 21 15:44:34 ptr postfix/smtpd[1329678]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 16:01:59 ptr postfix/smtpd[1379523]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 16:19:38 ptr postfix/smtpd[1436174]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
🇺🇸 mind5t0rm	2026-01-21 07:34:11 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jan 21 13:59:44 ptr postfix/smtpd[985460]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 14:17:16 ptr postfix/smtpd[1060068]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 14:34:10 ptr postfix/smtpd[1103461]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
🇨🇭 Origon	2026-01-21 06:00:18 (7 months ago)	recidive - IP: 20.5.48.219 - 2026-01-21 06:22:15,207 fail2ban.actions [3396062]: NOTICE [plesk-post ... show more recidive - IP: 20.5.48.219 - 2026-01-21 06:22:15,207 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 2026-01-21 06:42:35,712 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 2026-01-21 07:00:17,584 fail2ban.actions [3396062]: NOTICE [plesk-postfix] Ban 20.5.48.219 show less	Web App Attack
🇺🇸 mind5t0rm	2026-01-21 05:49:17 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jan 21 11:55:24 ptr postfix/smtpd[525034]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 12:30:38 ptr postfix/smtpd[669435]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 21 12:49:16 ptr postfix/smtpd[757377]: warning: unknown[20.5.48.219]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
🇺🇸 bigscoots.com	2026-01-21 03:46:54 (7 months ago)	(PERMBLOCK) 20.5.48.219 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 20.5.48.219 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-21 03:19:00 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 20.5.48.219 (AU/Australia/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-20 21:43:02 dovecot_login authenticator failed for H=(ADMIN) [20.5.48.219]:36336: 535 Incorrect authentication data ([email protected]) 2026-01-20 21:50:19 dovecot_login authenticator failed for H=(ADMIN) [20.5.48.219]:46142: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:11:30 dovecot_login authenticator failed for H=(ADMIN) [20.5.48.219]:45356: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:16:43 dovecot_login authenticator failed for H=(ADMIN) [20.5.48.219]:55304: 535 Incorrect authentication data ([email protected]) 2026-01-20 22:18:56 dovecot_login authenticator failed for H=(ADMIN) [20.5.48.219]:35044: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.176.200.149

🇲🇽 201.141.8.57

🇳🇱 193.176.31.225

🇩🇪 193.124.20.245

🇺🇸 192.198.94.253

🇩🇪 178.105.255.79

🇺🇸 172.253.196.147

🇨🇳 171.213.202.150

🇺🇸 162.216.149.124

🇮🇳 139.59.80.46

🇳🇱 81.19.216.111

🇷🇺 78.138.168.46

🇩🇪 69.5.169.228

🇩🇪 69.5.169.166

🇺🇸 52.20.198.190

🇦🇲 46.162.203.74

🇺🇸 45.156.129.62

🇦🇷 179.238.47.198

🇺🇸 172.86.114.38

🇹🇷 159.146.73.84