JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.57.130.185

Neutral Activity

Abuse confidence score ?

0% Low Risk

14 reports

11 reporters · latest 9 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.57.130.185 has been reported 14 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.57.130.185

Export CSV

This IP address has been reported a total of 14 times from 11 distinct sources. 20.57.130.185 was first reported on December 20th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-21 04:30:11 (9 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 FABIO EGAS	2025-12-21 01:57:41 (9 months ago)	(PERMBLOCK) 20.57.130.185 (US/United States/-) has had more than 4 temp blocks	Hacking
🇫🇷 ✨	2025-12-21 01:54:11 (9 months ago)	Rule : SMTP 12/20/25 22:51:58 2132 20.57.130.185 *hidden-privacy* ESMTP MailEnable Service, V ... show more Rule : SMTP 12/20/25 22:51:58 2132 20.57.130.185 *hidden-privacy* ESMTP MailEnable Service, Version: 10.52-- ready at 12/20/25 22:51:58 94 0 12/20/25 22:51:58 2132 20.57.130.185 EHLO EHLO ADMIN *hidden-privacy* [20.57.130.185], this server offers 5 extensions 242 12 12/20/25 22:51:58 2132 20.57.130.185 AUTH AUTH LOGIN 334 VXNlcm5hbWU6 18 12 12/20/25 22:51:58 2132 20.57.130.185 AUTH {blank} 334 UGFzc3dvcmQ6 18 22 [email protected] 12/20/25 22:51:59 2132 20.57.130.185 AUTH {blank} 535 Invalid Username or Password 34 14 [email protected] show less	Email Spam Port Scan Spoofing
🇫🇷 ✨	2025-12-21 00:49:15 (9 months ago)	Rule : SMTP 12/21/25 00:47:54 2528 20.57.130.185 *hidden-privacy* ESMTP MailEnable Service, V ... show more Rule : SMTP 12/21/25 00:47:54 2528 20.57.130.185 *hidden-privacy* ESMTP MailEnable Service, Version: 10.53-10.53- ready at 12/21/25 00:47:54 97 0 12/21/25 00:47:55 2528 20.57.130.185 EHLO EHLO ADMIN *hidden-privacy* [20.57.130.185], this server offers 5 extensions 253 12 12/21/25 00:47:55 2528 20.57.130.185 AUTH AUTH LOGIN 334 VXNlcm5hbWU6 18 12 12/21/25 00:47:55 2528 20.57.130.185 AUTH {blank} 334 UGFzc3dvcmQ6 18 42 [email protected] 12/21/25 00:47:55 2528 20.57.130.185 AUTH {blank} 535 Invalid Username or Password 34 22 [email protected] show less	Email Spam Port Scan Spoofing
🇬🇧 noise.agency	2025-12-20 20:28:45 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-)	Brute-Force
🇧🇷 SvrAdmin	2025-12-20 20:22:37 (9 months ago)	[315] (smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-): 5 in the last 3600 ... show more [315] (smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 20 16:25:52 cwp01 postfix/smtpd[10519]: warning: unknown[20.57.130.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 16:41:01 cwp01 postfix/smtpd[11242]: warning: unknown[20.57.130.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 16:54:43 cwp01 postfix/smtpd[11712]: warning: unknown[20.57.130.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 17:08:41 cwp01 postfix/smtpd[12419]: warning: unknown[20.57.130.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 20 17:22:36 cwp01 postfix/smtpd[12842]: warning: unknown[20.57.130.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2025-12-20 20:19:55 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-)	Brute-Force
🇫🇷 vhnmn	2025-12-20 20:17:15 (9 months ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
🇺🇸 FABIO EGAS	2025-12-20 19:48:23 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-)	Brute-Force
🇺🇸 MojoBlock	2025-12-20 19:30:47 (9 months ago)	2025-12-20 13:10:13 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:48784: 535 Inco ... show more 2025-12-20 13:10:13 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:48784: 535 Incorrect authentication data ([email protected]) 2025-12-20 13:12:57 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:34756: 535 Incorrect authentication data ([email protected]) 2025-12-20 13:30:44 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:48790: 535 Incorrect authentication data ([email protected]) ... show less	Email Spam Brute-Force
🇧🇷 hostseries	2025-12-20 19:26:32 (9 months ago)	Trigger: LF_SMTPAUTH	Brute-Force
Anonymous	2025-12-20 19:21:02 (9 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇧🇷 LM Security	2025-12-20 19:00:04 (9 months ago)	2025-12-20 15:48:58 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:47312: 535 Inco ... show more 2025-12-20 15:48:58 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:47312: 535 Incorrect authentication data (set_id=morgana.rocha@[redacted]company.com.br) 2025-12-20 15:24:56 dovecot_login authenticator failed for H=(ADMIN) [20.57.130.185]:58414: 535 Incorrect authentication data (set_id=mkt@[redacted].com.br) show less	Brute-Force
🇧🇷 SvrAdmin	2025-12-20 17:59:26 (9 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-): 5 in the last 3600 ... show more [101] (smtpauth) Failed SMTP AUTH login from 20.57.130.185 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-20 14:49:03 dovecot_login authenticator failed for (ADMIN) [20.57.130.185]:45338: 535 Incorrect authentication data ([email protected]) 2025-12-20 14:51:36 dovecot_login authenticator failed for (ADMIN) [20.57.130.185]:50972: 535 Incorrect authentication data ([email protected]) 2025-12-20 14:54:11 dovecot_login authenticator failed for (ADMIN) [20.57.130.185]:57952: 535 Incorrect authentication data ([email protected]) 2025-12-20 14:56:41 dovecot_login authenticator failed for (ADMIN) [20.57.130.185]:39338: 535 Incorrect authentication data ([email protected]) 2025-12-20 14:59:21 dovecot_login authenticator failed for (ADMIN) [20.57.130.185]:47982: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.34.128.202

🇲🇽 189.178.96.213

🇰🇷 106.244.120.37

🇭🇰 104.208.73.227

🇫🇮 82.22.249.189

🇺🇸 66.132.195.70

🇧🇬 95.181.236.38

🇸🇬 85.203.21.115

🇺🇸 64.23.236.168

🇹🇼 60.250.246.239

🇳🇱 45.148.10.157

🇨🇳 27.155.172.170

🇺🇸 216.73.216.78

🇨🇳 182.43.76.120

🇵🇰 153.117.50.164

🇫🇷 91.196.152.100

🇧🇬 82.147.142.205

🇺🇸 66.132.172.177

🇺🇸 192.177.105.147

🇮🇳 103.113.32.50