JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.102.59.162

Neutral Activity

Abuse Confidence Score

0% Low Risk

4 reports

3 reporters · latest 4 years ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.102.59.162 has been reported 4 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

4 from 3 distinct reporters

First reported

January 13th 2022

Most recent report

4 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bastii717	2022-01-18 00:00:43 UTC · (4 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-01-13 09:40:38 UTC · (4 years ago)	Lines containing failures of 20.102.59.162 (max 1000) Jan 13 15:38:49 srv sshd[13247]: error: Received disconnect from 20.102.59.162 port 1216:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 13 15:38:49 srv sshd[13247]: Disconnected from au ... show more Lines containing failures of 20.102.59.162 (max 1000) Jan 13 15:38:49 srv sshd[13247]: error: Received disconnect from 20.102.59.162 port 1216:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 13 15:38:49 srv sshd[13247]: Disconnected from authenticating user backup 20.102.59.162 port 1216 [preauth] Jan 13 15:38:50 srv sshd[13249]: error: Received disconnect from 20.102.59.162 port 1088:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 13 15:38:50 srv sshd[13249]: Disconnected from authenticating user bin 20.102.59.162 port 1088 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=20.102.59.162 show less	FTP Brute-Force Hacking
🇩🇪 bastii717	2022-01-13 09:39:11 UTC · (4 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 rd1742	2022-01-13 08:08:44 UTC · (4 years ago)	2022-01-13 13:08:39,347 quad proftpd[617259] quad (20.102.59.162[20.102.59.162]): USER backup: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 2022-01-13 13:08:40,646 quad proftpd[617260] quad (20.102.59.162[20.102.59.162]): U ... show more 2022-01-13 13:08:39,347 quad proftpd[617259] quad (20.102.59.162[20.102.59.162]): USER backup: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 2022-01-13 13:08:40,646 quad proftpd[617260] quad (20.102.59.162[20.102.59.162]): USER bin: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 2022-01-13 13:08:41,569 quad proftpd[617261] quad (20.102.59.162[20.102.59.162]): USER office: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 2022-01-13 13:08:42,444 quad proftpd[617262] quad (20.102.59.162[20.102.59.162]): USER lab: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 2022-01-13 13:08:43,692 quad proftpd[617263] quad (20.102.59.162[20.102.59.162]): USER operator: no such user found from 20.102.59.162 [20.102.59.162] to 2.56.97.107:22 show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.126

🇩🇪 69.5.169.224

🇺🇸 18.205.127.11

🇰🇷 221.156.126.1

🇺🇸 216.25.90.101

🇲🇦 196.115.140.233

🇺🇸 195.184.76.96

🇷🇴 193.32.162.84

🇧🇷 186.192.180.116

🇺🇸 172.245.135.89

🇧🇷 170.80.86.72

🇬🇧 143.58.132.70

🇹🇭 118.194.250.22

🇯🇵 118.194.236.142

🇨🇳 106.14.123.114

🇳🇱 89.21.67.182

🇺🇸 51.8.102.56

🇺🇸 23.229.63.38

🇫🇷 2a02:8440:e50a:6d73:1d6d:3a85:60b2:a6d4

🇺🇸 209.139.63.34