JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.235.35.74

20.235.35.74 was found in our database!

This IP was reported 806 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Chennai, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.235.35.74

Whois 20.235.35.74

IP Abuse Reports for 20.235.35.74:

This IP address has been reported a total of 806 times from 357 distinct sources. 20.235.35.74 was first reported on September 10th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 22:08:50 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:09:11 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx03]	Brute-Force SSH
🇺🇸 sh97	2025-09-26 11:57:09 (8 months ago)	US02-RN-LAX: SSH Brute Force from 20.235.35.74 at 2025-09-26 17:27:09 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-20 20:08:55 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-19 22:26:20 (8 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/20.235.35.74	SSH
🇩🇪 NetShield-DE	2025-09-19 22:15:58 (8 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2025-09-20T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2025-09-20T00:14:34+0200. Last: 2025-09-20T00:14:34+0200. Samples: - 2025-09-15 05:39:25,660 fail2ban.actions [1787939]: NOTICE [abuseipdb] Ban 20.235.35.74 show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-19 20:08:53 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-19 08:12:18 (8 months ago)	This IP address carried out 124 SSH credential attack (attempts) on 18-09-2025. For more information ... show more This IP address carried out 124 SSH credential attack (attempts) on 18-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇨🇿 plzenskypruvodce.cz	2025-09-19 07:33:39 (8 months ago)	2025-09-19T09:33:38.817313+02:00 eproxy sshd[324489]: User root not allowed because account is locke ... show more 2025-09-19T09:33:38.817313+02:00 eproxy sshd[324489]: User root not allowed because account is locked 2025-09-19T09:33:39.016907+02:00 eproxy sshd[324489]: Received disconnect from 20.235.35.74 port 35588:11: Bye Bye [preauth] ... show less	Web App Attack
🇨🇿 plzenskypruvodce.cz	2025-09-19 07:09:11 (8 months ago)	2025-09-19T09:09:10.139636+02:00 eproxy sshd[323799]: User root not allowed because account is locke ... show more 2025-09-19T09:09:10.139636+02:00 eproxy sshd[323799]: User root not allowed because account is locked 2025-09-19T09:09:10.339361+02:00 eproxy sshd[323799]: Received disconnect from 20.235.35.74 port 58214:11: Bye Bye [preauth] ... show less	Web App Attack
🇺🇸 bigscoots.com	2025-09-19 07:07:50 (8 months ago)	20.235.35.74 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 20.235.35.74 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 19 02:05:27 15624 sshd[16888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.19.175 user=root Sep 19 02:05:28 15624 sshd[16888]: Failed password for root from 154.92.19.175 port 55964 ssh2 Sep 19 02:07:29 15624 sshd[17463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.235.35.74 user=root Sep 19 02:06:33 15624 sshd[17255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.10 user=root Sep 19 02:06:35 15624 sshd[17255]: Failed password for root from 187.49.152.10 port 54954 ssh2 IP Addresses Blocked: 154.92.19.175 (HK/Hong Kong/-) show less	Brute-Force SSH
🇺🇸 drodrig	2025-09-19 07:03:02 (8 months ago)	CrowdSec triggered: %!s(*string=0xc005180bb0) (0 events)	Brute-Force
🇺🇸 kipfel★	2025-09-19 06:41:45 (8 months ago)	2025-09-19T01:21:48.243406-05:00 nocix-dedi-bf2421-mci sshd[1875320]: Invalid user amoly from 20.235 ... show more 2025-09-19T01:21:48.243406-05:00 nocix-dedi-bf2421-mci sshd[1875320]: Invalid user amoly from 20.235.35.74 port 40802 2025-09-19T01:32:29.884364-05:00 nocix-dedi-bf2421-mci sshd[1876069]: Invalid user titu from 20.235.35.74 port 34936 2025-09-19T01:41:44.852950-05:00 nocix-dedi-bf2421-mci sshd[1876723]: Invalid user server from 20.235.35.74 port 46376 ... show less	Brute-Force SSH
🇭🇺 sRichy	2025-09-19 06:17:24 (8 months ago)	Sep 19 08:11:43 racetecweb sshd[1137111]: User root from 20.235.35.74 not allowed because not listed ... show more Sep 19 08:11:43 racetecweb sshd[1137111]: User root from 20.235.35.74 not allowed because not listed in AllowUsers Sep 19 08:16:04 racetecweb sshd[1137128]: User root from 20.235.35.74 not allowed because not listed in AllowUsers Sep 19 08:17:23 racetecweb sshd[1137142]: User root from 20.235.35.74 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-19 06:15:51 (8 months ago)	20.235.35.74 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 20.235.35.74 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 19 01:15:27 16262 sshd[29191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.188.168.53 user=root Sep 19 01:11:34 16262 sshd[28874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.208.52.110 user=root Sep 19 01:11:37 16262 sshd[28874]: Failed password for root from 172.208.52.110 port 37502 ssh2 Sep 19 01:12:06 16262 sshd[28944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.235.35.74 user=root Sep 19 01:12:07 16262 sshd[28944]: Failed password for root from 20.235.35.74 port 45216 ssh2 IP Addresses Blocked: 119.188.168.53 (CN/China/-) 172.208.52.110 (US/United States/-) show less	Brute-Force SSH

Showing 1 to 15 of 806 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 188.93.112.20

🇲🇽 187.230.115.212

🇳🇱 160.119.71.12

🇨🇳 116.228.233.93

🇰🇷 112.164.253.71

🇮🇹 87.8.126.98

🇺🇸 66.132.186.215

🇳🇱 45.148.10.141

🇧🇷 45.140.193.156

🇰🇿 45.66.52.41

🇧🇷 191.243.6.16

🇺🇸 157.55.39.192

🇦🇪 139.185.55.154

🇫🇷 85.204.70.98

🇺🇸 71.6.232.28

🇳🇱 45.198.224.18

🇺🇸 198.58.100.99

🇨🇳 123.171.32.71

🇨🇳 120.48.153.92

🇮🇩 103.67.80.61