JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.118.221.163

20.118.221.163 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 89%: ?

89%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.118.221.163

Whois 20.118.221.163

IP Abuse Reports for 20.118.221.163:

This IP address has been reported a total of 24 times from 22 distinct sources. 20.118.221.163 was first reported on August 1st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-08-22 22:45:00 (5 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Viveronese	2026-08-22 02:55:43 (6 days ago)	SSH brute force attacks	Brute-Force SSH
🇩🇪 sbajic	2026-08-22 02:06:24 (6 days ago)	Aug 22 04:06:20 proteus sshd-session[2499550]: User root from 20.118.221.163 not allowed because non ... show more Aug 22 04:06:20 proteus sshd-session[2499550]: User root from 20.118.221.163 not allowed because none of user's groups are listed in AllowGroups Aug 22 04:06:23 proteus sshd-session[2499550]: error: PAM: Authentication failure for illegal user root from 20.118.221.163 Aug 22 04:06:23 proteus sshd-session[2499550]: Failed keyboard-interactive/pam for invalid user root from 20.118.221.163 port 55322 ssh2 ... show less	Brute-Force SSH
🇫🇮 Phish.gg	2026-08-22 02:04:25 (6 days ago)	Aug 22 02:04:24 obsidian sshd[2468213]: Failed password for root from 20.118.221.163 port 55322 ssh2 ... show more Aug 22 02:04:24 obsidian sshd[2468213]: Failed password for root from 20.118.221.163 port 55322 ssh2 Aug 22 02:04:23 obsidian sshd[2468216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.118.221.163 user=root Aug 22 02:04:24 obsidian sshd[2468216]: Failed password for root from 20.118.221.163 port 55322 ssh2 ... show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-08-22 02:02:31 (6 days ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-08-22 01:52:36 (6 days ago)	20.118.221.163 (US/United States/-), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH
Anonymous	2026-08-22 01:09:56 (6 days ago)	SSH login attempts with user root	Brute-Force
🇫🇷 sthoyer.de	2026-08-22 01:04:11 (6 days ago)	Aug 22 03:04:10 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 22 03:04:10 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.118.221.163 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=40187 DF PROTO=TCP SPT=55320 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 sbajic	2026-08-22 00:52:02 (6 days ago)	Aug 22 02:51:59 proteus sshd-session[2467961]: User root from 20.118.221.163 not allowed because non ... show more Aug 22 02:51:59 proteus sshd-session[2467961]: User root from 20.118.221.163 not allowed because none of user's groups are listed in AllowGroups Aug 22 02:52:01 proteus sshd-session[2467961]: error: PAM: Authentication failure for illegal user root from 20.118.221.163 Aug 22 02:52:01 proteus sshd-session[2467961]: Failed keyboard-interactive/pam for invalid user root from 20.118.221.163 port 55322 ssh2 ... show less	Brute-Force SSH
🇫🇷 maxxsense	2026-08-22 00:41:12 (6 days ago)	(sshd) Failed SSH login from 20.118.221.163 (US/United States/-)	Brute-Force SSH
🇫🇷 EvoX	2026-08-22 00:25:58 (6 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:root • ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:root • Number of login attempts: 1 • Client: SSH-2.0-paramiko_5.0.0 show less	SSH
Anonymous	2026-08-21 23:45:48 (6 days ago)	Brute-force on known port 22	Port Scan Brute-Force
🇩🇪 Robbie	2026-08-21 22:45:54 (6 days ago)	Aug 21 22:45:53 Ubuntu-2204-jammy-amd64-base sshd[1621946]: User root from 20.118.221.163 not allowe ... show more Aug 21 22:45:53 Ubuntu-2204-jammy-amd64-base sshd[1621946]: User root from 20.118.221.163 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 HamSammich	2026-08-21 22:27:48 (6 days ago)	Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-21T22:27Z). Usernames ... show more Automated sensor: 5 SSH brute-force attempts over the last 24h (latest 2026-08-21T22:27Z). Usernames tried: root. show less	Brute-Force SSH
🇺🇸 GreekCity	2026-08-04 06:07:21 (3 weeks ago)	[Tue Aug 04 01:07:20.788376 2026] [proxy_fcgi:error] [pid 3570730:tid 3570730] [client 20.118.221.16 ... show more [Tue Aug 04 01:07:20.788376 2026] [proxy_fcgi:error] [pid 3570730:tid 3570730] [client 20.118.221.163:10841] AH01071: Got error 'Primary script unknown' ... show less	Hacking

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 213.199.42.227

🇫🇷 176.186.3.190

🇬🇧 151.225.212.1

🇺🇸 104.152.52.130

🇺🇸 104.152.52.102

🇸🇪 78.66.44.23

🇮🇳 49.206.27.37

🇳🇱 213.176.24.162

🇦🇷 201.190.231.132

🇧🇪 198.235.24.215

🇺🇸 195.184.76.116

🇧🇾 178.125.101.154

🇺🇸 173.254.224.15

🇸🇬 103.253.27.227

🇷🇴 92.118.39.14

🇺🇸 52.167.144.139

🇺🇸 35.227.41.134

🇺🇸 2604:a940:301:225:0:12::

🇰🇷 219.250.188.143

🇨🇳 218.0.63.25