JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.115.5.48

Neutral Activity

Abuse confidence score ?

0% Low Risk

551 reports

257 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.115.5.48 has been reported 551 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.115.5.48

This IP address has been reported a total of 551 times from 257 distinct sources. 20.115.5.48 was first reported on December 8th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 saima.info	2023-01-17 15:00:00 (3 years ago)	Failed password for user root ssh2	Brute-Force Exploited Host SSH
🇩🇪 formality	2022-12-18 02:58:08 (3 years ago)	Invalid user technical from 20.115.5.48 port 48878	Brute-Force SSH
🇩🇪 vereinshosting	2022-12-18 00:45:20 (3 years ago)	Invalid user sk from 20.115.5.48 port 52496	Brute-Force SSH
🇩🇪 formality	2022-12-17 22:51:38 (3 years ago)	Invalid user ubuntu from 20.115.5.48 port 39240	Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇰🇷 MU-star.net	2022-12-17 21:30:57 (3 years ago)	Invalid user technical from 20.115.5.48 port 34892	Port Scan Brute-Force SSH
🇩🇪 formality	2022-12-17 18:16:36 (3 years ago)	Invalid user drupal from 20.115.5.48 port 41034	Brute-Force SSH
🇩🇪 pr0vieh	2022-12-17 16:11:55 (3 years ago)	Dec 17 20:57:26 Linux03 sshd[3018372]: Failed password for invalid user technical from 20.115.5.48 p ... show more Dec 17 20:57:26 Linux03 sshd[3018372]: Failed password for invalid user technical from 20.115.5.48 port 56780 ssh2 Dec 17 21:00:09 Linux03 sshd[3032297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.115.5.48 user=root Dec 17 21:00:11 Linux03 sshd[3032297]: Failed password for root from 20.115.5.48 port 58308 ssh2 Dec 17 21:03:01 Linux03 sshd[3046965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.115.5.48 user=root Dec 17 21:03:04 Linux03 sshd[3046965]: Failed password for root from 20.115.5.48 port 57686 ssh2 Dec 17 21:06:01 Linux03 sshd[3062093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.115.5.48 user=root Dec 17 21:06:02 Linux03 sshd[3062093]: Failed password for root from 20.115.5.48 port 35418 ssh2 Dec 17 21:08:55 Linux03 sshd[3077033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.115.5.48 user ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2022-12-17 15:49:53 (3 years ago)	20.115.5.48 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs ... show more 20.115.5.48 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 17 14:49:39 15479 sshd[8668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.88.197 user=root Dec 17 14:40:58 15479 sshd[8049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.115.5.48 user=root Dec 17 14:41:00 15479 sshd[8049]: Failed password for root from 20.115.5.48 port 38550 ssh2 Dec 17 14:43:40 15479 sshd[8251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.108.170 user=root Dec 17 14:43:42 15479 sshd[8251]: Failed password for root from 178.128.108.170 port 37354 ssh2 IP Addresses Blocked: 139.59.88.197 (IN/India/-) show less	Brute-Force SSH
🇩🇪 OiledAmoeba	2022-12-17 15:18:38 (3 years ago)	Dec 17 21:18:37 mout sshd[24720]: Invalid user grid from 20.115.5.48 port 47096	Brute-Force SSH

Showing 1 to 15 of 551 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:303:967c::1

🇺🇸 205.169.39.5

🇺🇸 65.111.14.75

🇫🇷 54.38.109.115

🇺🇸 40.119.42.102

🇦🇷 38.52.86.113

🇺🇸 20.51.186.93

🇮🇳 2a02:4780:12:829a::1

🇧🇷 205.210.31.205

🇳🇱 204.76.203.44

🇺🇸 204.8.96.105

🇺🇸 172.216.252.23

🇫🇷 147.135.252.182

🇩🇪 139.19.117.197

🇫🇷 85.217.140.29

🇺🇸 65.111.12.65

🇺🇸 34.123.170.104

🇺🇸 34.72.176.129

🇺🇸 205.210.31.37

🇳🇱 195.178.110.242