JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.102.46.152

Neutral Activity

Abuse Confidence Score

0% Low Risk

38 reports

24 reporters · latest 4 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.102.46.152 has been reported 38 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

38 from 24 distinct reporters

First reported

June 1st 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 greenhost.com.au	2026-06-17 22:00:05 UTC · (4 months ago)	Automated report: 2166 attacks in 24h targeting privacymate via SSH. SSH/brute_force: 1995 on privacymate; SSH/invalid_user: 171 on privacymate	Brute-Force SSH
🇸🇬 itachi1706	2026-06-17 02:23:02 UTC · (4 months ago)	2026-06-17T10:23:00.568439+08:00 vmi996132.contaboserver.net sshd[2793321]: Connection reset by 20.102.46.152 port 2305 [preauth] ...	Brute-Force SSH
🇸🇬 digitalsekuriti.id	2026-06-17 01:28:28 UTC · (4 months ago)	2026-06-17T08:01:19.941399 scm.getih.net sshd[3261282]: Invalid user r00t from 20.102.46.152 port 2307 2026-06-17T08:04:14.996791 scm.getih.net sshd[3264303]: Invalid user r00t from 20.102.46.152 port 2304 2026-06-17T08:28:27.053339 scm.getih.net ssh ... show more 2026-06-17T08:01:19.941399 scm.getih.net sshd[3261282]: Invalid user r00t from 20.102.46.152 port 2307 2026-06-17T08:04:14.996791 scm.getih.net sshd[3264303]: Invalid user r00t from 20.102.46.152 port 2304 2026-06-17T08:28:27.053339 scm.getih.net sshd[3293187]: Invalid user r00t from 20.102.46.152 port 2304 ... show less	Brute-Force SSH
🇯🇵 Indexyz	2026-06-17 00:21:39 UTC · (4 months ago)	2026-06-17T08:21:22.259425+08:00 hostname sshd-session[372928]: Connection from 20.102.46.152 port 2308 on 103.169.217.64 port 22 rdomain "" 2026-06-17T08:21:25.210331+08:00 hostname sshd-session[372928]: error: PAM: Authentication failure for ro ... show more 2026-06-17T08:21:22.259425+08:00 hostname sshd-session[372928]: Connection from 20.102.46.152 port 2308 on 103.169.217.64 port 22 rdomain "" 2026-06-17T08:21:25.210331+08:00 hostname sshd-session[372928]: error: PAM: Authentication failure for root from 20.102.46.152 2026-06-17T08:21:25.210676+08:00 hostname sshd-session[372928]: Failed keyboard-interactive/pam for root from 20.102.46.152 port 2308 ssh2 2026-06-17T08:21:34.649052+08:00 hostname sshd-session[372942]: Connection from 20.102.46.152 port 2307 on 103.169.217.64 port 22 rdomain "" 2026-06-17T08:21:37.951563+08:00 hostname sshd-session[372942]: error: PAM: Authentication failure for root from 20.102.46.152 show less	Brute-Force SSH
🇸🇬 itachi1706	2026-06-16 23:16:18 UTC · (4 months ago)	2026-06-17T07:16:17.130358+08:00 vmi996132.contaboserver.net sshd[2782364]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-17T07:16:17.130487+08:00 vmi996132.contaboserver.net sshd[2782364]: Connection reset by 20.102.46.1 ... show more 2026-06-17T07:16:17.130358+08:00 vmi996132.contaboserver.net sshd[2782364]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-17T07:16:17.130487+08:00 vmi996132.contaboserver.net sshd[2782364]: Connection reset by 20.102.46.152 port 2304 ... show less	Brute-Force SSH
🇫🇷 Vincent6785_0	2026-06-16 23:03:07 UTC · (4 months ago)	Observed automated SSH brute-force activity. Attempts: 20 \| Failed password: 19 \| Invalid user: 1 First seen: 2026-06-16 20:43:29 UTC Last seen: 2026-06-16 23:03:07 UTC Source: Linux OpenSSH journalctl telemetry from OVH-hosted Debian server.	Brute-Force SSH
🇸🇬 itachi1706	2026-06-16 21:53:21 UTC · (4 months ago)	2026-06-17T05:53:19.861504+08:00 vmi996132.contaboserver.net sshd[2775621]: Connection reset by 20.102.46.152 port 2305 [preauth] ...	Brute-Force SSH
🇦🇺 specializedtom	2026-06-16 21:10:52 UTC · (4 months ago)	Fail2Ban triggered a ban on 20.102.46.152 for postfix-sasl	Phishing Email Spam Spoofing
🇦🇺 greenhost.com.au	2026-06-16 21:00:09 UTC · (4 months ago)	Automated report: 214 attacks in 24h targeting privacymate via FAIL2BAN-736, SSH. SSH/brute_force: 200 on privacymate; SSH/invalid_user: 13 on privacymate; FAIL2BAN-736/banned: 1 on privacymate	Brute-Force SSH
🇸🇬 itachi1706	2026-06-16 20:57:31 UTC · (4 months ago)	2026-06-17T04:57:24.839347+08:00 vmi996132.contaboserver.net sshd[2770844]: Connection reset by 20.102.46.152 port 2304 2026-06-17T04:57:27.693737+08:00 vmi996132.contaboserver.net sshd[2770845]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2026-06-17T04:57:24.839347+08:00 vmi996132.contaboserver.net sshd[2770844]: Connection reset by 20.102.46.152 port 2304 2026-06-17T04:57:27.693737+08:00 vmi996132.contaboserver.net sshd[2770845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.102.46.152 user=root 2026-06-17T04:57:29.669219+08:00 vmi996132.contaboserver.net sshd[2770845]: Failed password for root from 20.102.46.152 port 2305 ssh2 ... show less	Brute-Force SSH
🇸🇬 itachi1706	2026-06-16 20:39:48 UTC · (4 months ago)	2026-06-17T04:39:41.440677+08:00 vmi996132.contaboserver.net sshd[2768854]: Connection closed by authenticating user root 20.102.46.152 port 2307 [preauth] 2026-06-17T04:39:44.326247+08:00 vmi996132.contaboserver.net sshd[2768856]: pam_unix(sshd:auth ... show more 2026-06-17T04:39:41.440677+08:00 vmi996132.contaboserver.net sshd[2768854]: Connection closed by authenticating user root 20.102.46.152 port 2307 [preauth] 2026-06-17T04:39:44.326247+08:00 vmi996132.contaboserver.net sshd[2768856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.102.46.152 user=root 2026-06-17T04:39:46.703480+08:00 vmi996132.contaboserver.net sshd[2768856]: Failed password for root from 20.102.46.152 port 2304 ssh2 ... show less	Brute-Force SSH
🇨🇭 Elysium Security	2026-06-16 20:33:37 UTC · (4 months ago)	Mass port scanning on a whole network	Port Scan
Anonymous	2026-06-09 14:25:01 UTC · (5 months ago)	suspicious request in access.log	Web App Attack
🇦🇺 dyln	2026-06-09 14:11:20 UTC · (5 months ago)	Dyls honeypot brute-force: proto8 (19 total hits)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-09 13:23:42 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 20.102.46.152 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:23:38.243689 2026] [security2:error] [pid 30352:tid 30352] [client 20.102.46.152:43928] M ... show more (mod_security) mod_security (id:210492) triggered by 20.102.46.152 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:23:38.243689 2026] [security2:error] [pid 30352:tid 30352] [client 20.102.46.152:43928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.20"] [uri "/.git/HEAD"] [unique_id "aigT2nM2tWiRiX85PIb_iAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.114

🇫🇷 85.217.140.32

🇰🇷 49.246.3.236

🇧🇪 35.210.246.75

🇳🇱 213.209.159.228

🇲🇽 206.135.37.75

🇳🇱 192.253.248.226

🇩🇪 151.243.11.43

🇹🇭 106.0.166.123

🇸🇪 104.23.223.154

🇫🇷 92.113.26.77

🇺🇸 65.49.1.13

🇮🇶 37.239.104.57

🇮🇩 180.246.110.197

🇦🇷 179.49.107.170

🇺🇸 162.216.149.243

🇺🇸 147.185.132.28

🇺🇸 66.132.159.104

🇺🇸 52.248.43.160

🇬🇧 35.242.182.102