JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.55.243.20

Recent Activity

Abuse Confidence Score

50% Elevated

108 reports

83 reporters · latest 6 days ago

ISP: Layer7 Networks GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS35042
Hostname(s): mail.inass.site
Domain Name: layer7.net
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

108 from 83 distinct reporters

First reported

April 2nd 2026

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇫🇷 France 1

Most common categories Web App Attack 6 Hacking 5 Bad Web Bot 2 SQL Injection 1 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-11-07 06:42:32 UTC · (6 days ago)	Secret file probe \| method: GET \| path: /.vscode/extensions.json \| ua: h1-misconfig-sensor/1 \| 2026-11-07 06:42 UTC	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-05 23:01:16 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.	Web App Attack SSH Hacking
🇩🇪 webanyone	2026-11-05 19:43:42 UTC · (1 week ago)	Secret file probe \| method: GET \| path: /.vscode/extensions.json \| ua: h1-misconfig-sensor/1	Hacking Web App Attack
🇬🇧 AvonleaConsulting	2026-11-04 20:34:53 UTC · (1 week ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 19:29:48 UTC · (1 week ago)	(mod_security) mod_security (id:210730) triggered by 185.55.243.20 (mail.inass.site): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:29:40.923994 2026] [security2:error] [pid 432:tid 432] [client 185.55.243.2 ... show more (mod_security) mod_security (id:210730) triggered by 185.55.243.20 (mail.inass.site): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:29:40.923994 2026] [security2:error] [pid 432:tid 432] [client 185.55.243.20:47914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|precisionk-9.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "precisionk-9.com"] [uri "/server.key"] [unique_id "auo2JMLjCXi9CRQhok1kOwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-11-03 18:26:52 UTC · (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 Secure Gateway®️	2026-11-02 22:00:30 UTC · (1 week ago)	Report By Secure Gateway Security Team: Unsolicited Connection Attempt	SQL Injection
🇺🇸 ALSCO®️	2026-11-02 22:00:30 UTC · (1 week ago)	Report By ALSCO Security Team: Brute Force Login Attempt	Hacking
🇮🇳 evicky2002	2026-04-30 13:04:10 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 helix	2026-04-09 06:20:47 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇮🇳 Parth Maniar	2026-04-07 08:25:10 UTC · (7 months ago)	This IP address carried out 26 SSH credential attack (attempts) on 06-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇩🇪 kipfel★	2026-04-06 14:52:06 UTC · (7 months ago)	2026-04-06T16:47:26.044385+02:00 saltyfish-vm-e1mini-fra sshd-session[1631082]: Invalid user ftpuser from 185.55.243.20 port 41746 2026-04-06T16:50:35.978274+02:00 saltyfish-vm-e1mini-fra sshd-session[1631200]: Invalid user steam from 185.55.243.20 p ... show more 2026-04-06T16:47:26.044385+02:00 saltyfish-vm-e1mini-fra sshd-session[1631082]: Invalid user ftpuser from 185.55.243.20 port 41746 2026-04-06T16:50:35.978274+02:00 saltyfish-vm-e1mini-fra sshd-session[1631200]: Invalid user steam from 185.55.243.20 port 38560 2026-04-06T16:52:05.414510+02:00 saltyfish-vm-e1mini-fra sshd-session[1631246]: Invalid user test from 185.55.243.20 port 34372 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-06 14:08:15 UTC · (7 months ago)	(sshd) Failed SSH login from 185.55.243.20 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 6 09:02:07 13087 sshd[30640]: Invalid user test from 185.55.243.20 port 51812 Apr 6 09:02:10 13087 sshd[30640]: ... show more (sshd) Failed SSH login from 185.55.243.20 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 6 09:02:07 13087 sshd[30640]: Invalid user test from 185.55.243.20 port 51812 Apr 6 09:02:10 13087 sshd[30640]: Failed password for invalid user test from 185.55.243.20 port 51812 ssh2 Apr 6 09:06:21 13087 sshd[31367]: Invalid user admin from 185.55.243.20 port 46920 Apr 6 09:06:23 13087 sshd[31367]: Failed password for invalid user admin from 185.55.243.20 port 46920 ssh2 Apr 6 09:07:59 13087 sshd[31615]: Invalid user vpn from 185.55.243.20 port 33550 show less	Brute-Force SSH
🇫🇷 adlp.org	2026-04-06 14:08:05 UTC · (7 months ago)	Apr 6 16:02:29 ouranos sshd[1889846]: Invalid user test from 185.55.243.20 port 38552 Apr 6 16:06:29 ouranos sshd[1890634]: Invalid user admin from 185.55.243.20 port 43866 Apr 6 16:08:05 ouranos sshd[1891033]: Invalid user vpn from 185.55.243.20 ... show more Apr 6 16:02:29 ouranos sshd[1889846]: Invalid user test from 185.55.243.20 port 38552 Apr 6 16:06:29 ouranos sshd[1890634]: Invalid user admin from 185.55.243.20 port 43866 Apr 6 16:08:05 ouranos sshd[1891033]: Invalid user vpn from 185.55.243.20 port 58476 ... show less	Brute-Force SSH
🇩🇪 Henriks9	2026-04-06 14:07:00 UTC · (7 months ago)	2026-04-06T15:04:07.090471+01:00 ns3136794 sshd[1626798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.55.243.20 2026-04-06T15:04:09.176025+01:00 ns3136794 sshd[1626798]: Failed password for invalid user ... show more 2026-04-06T15:04:07.090471+01:00 ns3136794 sshd[1626798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.55.243.20 2026-04-06T15:04:09.176025+01:00 ns3136794 sshd[1626798]: Failed password for invalid user test from 185.55.243.20 port 34900 ssh2 2026-04-06T15:06:59.818863+01:00 ns3136794 sshd[1630012]: Invalid user admin from 185.55.243.20 port 54682 ... show less	Brute-Force SSH

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a02:4780:2d:9563::1

🇬🇧 193.163.125.166

🇳🇱 185.218.86.31

🇺🇸 162.216.150.145

🇺🇦 80.73.14.224

🇺🇸 24.94.68.156

🇺🇸 20.46.234.238

🇳🇱 185.218.86.23

🇩🇪 167.94.145.28

🇧🇷 154.80.128.231

🇺🇸 148.153.188.246

🇸🇬 139.59.99.210

🇳🇱 93.123.109.12

🇸🇪 89.160.102.76

🇩🇪 84.200.193.140

🇳🇱 77.239.124.47

🇬🇧 35.203.211.192

🇰🇷 218.238.5.110

🇲🇾 195.86.192.66

🇨🇳 116.179.33.75