AbuseIPDB » 20.98.138.63
20.98.138.63
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Des Moines, Iowa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.98.138.63 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
20.98.138.63 was first reported on
April 12th 2026 , and the most recent report was
2 months ago
Old Reports:
The most recent abuse report for this IP address is from
2 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-04-13 04:30:37
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
2026-04-12 18:46:09
(2 months ago)
(smtpauth) Failed SMTP AUTH login from 20.98.138.63 (US/United States/-)
Brute-Force
🇧🇷
SvrAdmin
2026-04-12 18:32:01
(2 months ago)
[315] (smtpauth) Failed SMTP AUTH login from 20.98.138.63 (US/United States/-): 5 in the last 3600 s ...
show more
[315] (smtpauth) Failed SMTP AUTH login from 20.98.138.63 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Apr 12 14:46:20 cwp01 postfix/smtpd[10498]: warning: unknown[20.98.138.63]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 12 15:21:44 cwp01 postfix/smtpd[12142]: warning: unknown[20.98.138.63]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 12 15:22:34 cwp01 postfix/smtpd[12142]: warning: unknown[20.98.138.63]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 12 15:29:51 cwp01 postfix/smtpd[12437]: warning: unknown[20.98.138.63]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 12 15:31:56 cwp01 postfix/smtpd[12534]: warning: unknown[20.98.138.63]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇵🇹
WebTejo
2026-04-12 18:28:28
(2 months ago)
Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 2 ...
show more
Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 20.98.138.63 on [PT] Tucano Node.
show less
Brute-Force
SSH
🇺🇸
MojoBlock
2026-04-12 18:25:06
(2 months ago)
2026-04-12 13:09:23 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:60864: 535 Incor ...
show more
2026-04-12 13:09:23 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:60864: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:18:45 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:60430: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:25:01 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:46132: 535 Incorrect authentication data ([email protected] )
...
show less
Email Spam
Brute-Force
2026-04-12 18:22:02
(2 months ago)
...
Brute-Force
2026-04-12 18:13:03
(2 months ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇧🇷
hostseries
2026-04-12 17:26:34
(2 months ago)
Trigger: LF_SMTPAUTH
Brute-Force
🇧🇷
SvrAdmin
2026-04-12 16:19:12
(2 months ago)
[101] (smtpauth) Failed SMTP AUTH login from 20.98.138.63 (US/United States/-): 5 in the last 3600 s ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 20.98.138.63 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-12 13:00:14 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:54594: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:05:42 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:57446: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:17:59 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:47046: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:18:22 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:44838: 535 Incorrect authentication data ([email protected] )
2026-04-12 13:19:06 dovecot_login authenticator failed for H=(ADMIN) [20.98.138.63]:49302: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: