JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.253.160.20

185.253.160.20 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 29%: ?

29%

ISP	M247 LTD Armenia Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.253.160.20

Whois 185.253.160.20

IP Abuse Reports for 185.253.160.20:

This IP address has been reported a total of 55 times from 34 distinct sources. 185.253.160.20 was first reported on May 17th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇪 McHoneypot	2026-06-08 10:41:57 (1 week ago)	Minecraft server scanning dectected on port 25565	Port Scan
🇫🇷 evvsk	2026-06-08 10:37:52 (1 week ago)	31723/tcp	Port Scan
🇺🇸 cpxducky	2026-06-08 10:34:55 (1 week ago)	2026-06-08 10:34:54: Minecraft server scan detected from 185.253.160.20 on port 25565 of mail.cpxduc ... show more 2026-06-08 10:34:54: Minecraft server scan detected from 185.253.160.20 on port 25565 of mail.cpxducky.com show less	Port Scan
🇩🇪 Duggy_Tuxy🧱	2026-06-01 18:29:11 (2 weeks ago)	[SW01-SRV01-DE] Blocked by SysWarden Firewall (Traffic from Malicious Hoster (ASN))	Port Scan
🇩🇪 derLoosi	2026-05-16 15:34:27 (1 month ago)	HV1.1 Blocked by UFW	Port Scan
🇨🇿 lp	2026-05-14 13:53:56 (1 month ago)	Email account brute force: 1 attempts were recorded from 185.253.160.20 2026-05-14T14:23:34+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 185.253.160.20 2026-05-14T14:23:34+02:00 warning: unknown[185.253.160.20]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 xmission.com	2026-04-17 19:46:46 (1 month ago)	Blocked by UFW (TCP on 5060) Source port: 6345 TTL: 236 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5060) Source port: 6345 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 185.253.160.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 formality	2026-04-17 19:43:15 (1 month ago)	Invalid user nullscope from 185.253.160.20 port 61071	Brute-Force SSH
🇩🇪 ksol-hostmaster	2026-03-28 00:22:13 (2 months ago)	Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: warning: unknown[185.253.160.20]:26412: S ... show more Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: warning: unknown[185.253.160.20]:26412: SASL LOGIN authentication failed: (reason unavailable), [email protected] Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: disconnect from unknown[185.253.160.20]:26412 ehlo=1 auth=0/1 quit=1 commands=2/3 ... show less	Email Spam
🇹🇷 rtbh.com.tr	2026-03-27 20:12:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-26 20:12:16 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ksol-hostmaster	2026-03-25 17:27:28 (2 months ago)	Mar 25 18:27:28 ksol dovecot[13733]: auth-worker(98868): conn unix:auth-worker (uid=143): auth-worke ... show more Mar 25 18:27:28 ksol dovecot[13733]: auth-worker(98868): conn unix:auth-worker (uid=143): auth-worker<1>: sql(anonymized@email,185.253.160.20): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇮🇹 VHosting	2026-03-10 22:22:48 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇳🇱 ReporTR	2026-01-31 10:15:28 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-postfix'. TCP connection completed. IP ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-postfix'. TCP connection completed. IP banned. show less	Email Spam Brute-Force
🇫🇷 Dampen59	2026-01-29 13:51:33 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 185.253.160.20 (AM/Armenia/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 185.253.160.20 (AM/Armenia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-29 13:50:57 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:41684: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:03 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:51210: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:13 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:41654: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:29 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:29975: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:29 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:54355: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.91.96.115

🇺🇸 162.216.149.108

🇰🇷 121.141.243.81

🇺🇸 104.181.233.178

🇺🇸 100.29.192.122

🇺🇸 45.8.19.104

🇷🇺 31.40.122.244

🇺🇸 20.12.202.181

🇺🇸 194.187.179.235

🇺🇸 146.19.78.73

🇩🇪 138.68.82.23

🇨🇳 115.230.147.153

🇨🇳 103.44.237.71

🇺🇸 96.245.202.58

🇳🇱 91.92.40.204

🇫🇷 85.217.140.40

🇺🇸 34.73.180.234

🇸🇦 31.166.98.56

🇺🇸 18.212.111.102

🇺🇸 188.213.202.28