JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.196.154.66

Neutral Activity

Abuse Confidence Score

0% Low Risk

9 reports

9 reporters · latest 2 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.196.154.66 has been reported 9 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

9 from 9 distinct reporters

First reported

September 6th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ServerGurus	2026-09-11 00:45:32 UTC · (2 months ago)	Banned by ServerGurus Fail2Ban on vs01 jail: sshd	Port Scan Exploited Host
🇳🇱 vanadrighem.eu	2026-09-11 00:39:00 UTC · (2 months ago)	Automatic Fail2ban report	Brute-Force SSH
🇺🇸 Leslie Alexander	2026-09-10 22:37:28 UTC · (2 months ago)	2026-09-10T18:37:23.704558-04:00 fdkeixxz.colocrossing.cloud sshd[829531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 user=root 2026-09-10T18:37:25.668434-04:00 fdkeixxz.colocrossing.cloud s ... show more 2026-09-10T18:37:23.704558-04:00 fdkeixxz.colocrossing.cloud sshd[829531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 user=root 2026-09-10T18:37:25.668434-04:00 fdkeixxz.colocrossing.cloud sshd[829531]: Failed password for root from 20.196.154.66 port 54484 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-10 20:50:25 UTC · (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-09-10 20:40:04 UTC · (2 months ago)	2026-09-10T16:31:24.082257 VOSTOK sshd[32427]: Invalid user student from 20.196.154.66 port 35636 2026-09-10T16:31:24.085872 VOSTOK sshd[32427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 202 ... show more 2026-09-10T16:31:24.082257 VOSTOK sshd[32427]: Invalid user student from 20.196.154.66 port 35636 2026-09-10T16:31:24.085872 VOSTOK sshd[32427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 2026-09-10T16:31:26.661264 VOSTOK sshd[32427]: Failed password for invalid user student from 20.196.154.66 port 35636 ssh2 2026-09-10T16:37:08.385407 VOSTOK sshd[2458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 user=root 2026-09-10T16:37:10.528918 VOSTOK sshd[2458]: Failed password for root from 20.196.154.66 port 50050 ssh2 ... show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-09-10 20:34:12 UTC · (2 months ago)	Sep 10 20:34:10 fail2ban sshd[4189473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 Sep 10 20:34:11 fail2ban sshd[4189473]: Failed password for invalid user student from 20.196.154.66 port 40 ... show more Sep 10 20:34:10 fail2ban sshd[4189473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.196.154.66 Sep 10 20:34:11 fail2ban sshd[4189473]: Failed password for invalid user student from 20.196.154.66 port 40242 ssh2 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-09-10 18:20:57 UTC · (2 months ago)	SSH bruteforce [BY]	SSH
🇺🇸 drewf.ink	2026-09-07 14:35:33 UTC · (2 months ago)	[14:35] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 11111:1***1	Open Proxy
🇩🇪 dispaisyenterprises	2026-09-06 18:46:09 UTC · (2 months ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (4 bytes of payload); 8090 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.188.185.241

🇹🇼 198.235.24.52

🇳🇱 195.178.110.149

🇨🇳 115.201.241.214

🇹🇼 111.70.11.237

🇰🇪 105.163.0.232

🇺🇸 104.28.152.143

🇷🇺 91.107.127.90

🇫🇷 82.102.18.188

🇳🇱 81.171.72.135

🇧🇬 79.124.40.114

🇷🇺 62.122.195.14

🇺🇸 54.241.114.171

🇺🇸 54.176.53.23

🇮🇳 45.112.50.36

🇸🇬 43.172.196.26

🇮🇱 20.217.194.65

🇺🇸 2001:470:1:c84::25

🇧🇷 205.210.31.143

🇺🇸 205.188.180.74