JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.243.120.253

20.243.120.253 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.243.120.253

Whois 20.243.120.253

IP Abuse Reports for 20.243.120.253:

This IP address has been reported a total of 64 times from 47 distinct sources. 20.243.120.253 was first reported on August 1st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 vftable	2026-09-14 10:34:03 (2 days ago)	2026-09-14T11:33:59.700675+01:00 naomi sshd[395264]: Connection closed by authenticating user root 2 ... show more 2026-09-14T11:33:59.700675+01:00 naomi sshd[395264]: Connection closed by authenticating user root 20.243.120.253 port 35196 [preauth] 2026-09-14T11:34:01.191867+01:00 naomi sshd[395266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root 2026-09-14T11:34:02.339707+01:00 naomi sshd[395266]: Failed password for root from 20.243.120.253 port 35204 ssh2 ... show less	Brute-Force SSH
🇩🇪 LRob	2026-09-13 16:33:49 (3 days ago)	Unauthorised SSH login attempts \| 2026-09-13 16:33 UTC	Brute-Force SSH
🇫🇷 Donovan	2026-09-12 20:11:09 (3 days ago)	SSH brute force blocked by fail2ban on commitshift.fr - 3 attempt(s)	Brute-Force SSH
🇬🇧 Mendip_Defender	2026-09-11 11:28:23 (5 days ago)	Sep 11 12:28:31 jackstringer sshd[2395286]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Sep 11 12:28:31 jackstringer sshd[2395286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root Sep 11 12:28:33 jackstringer sshd[2395286]: Failed password for root from 20.243.120.253 port 60514 ssh2 Sep 11 12:28:35 jackstringer sshd[2395290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root Sep 11 12:28:36 jackstringer sshd[2395290]: Failed password for root from 20.243.120.253 port 60524 ssh2 ... show less	Brute-Force SSH
🇩🇪 BanHammer99	2026-09-10 20:08:58 (5 days ago)	Reported by VPN-flk	Brute-Force SSH
🇺🇸 SentinalX by uzumaru	2026-09-07 02:08:26 (1 week ago)	SSH brute-force detected: 406 failed login attempts in the last 1 hour.	Brute-Force SSH
🇸🇬 itachi1706	2026-09-07 01:40:40 (1 week ago)	2026-09-07T09:40:37.749648+08:00 vmi996132.contaboserver.net sshd[4053957]: Connection closed by aut ... show more 2026-09-07T09:40:37.749648+08:00 vmi996132.contaboserver.net sshd[4053957]: Connection closed by authenticating user root 20.243.120.253 port 54856 [preauth] 2026-09-07T09:40:38.210461+08:00 vmi996132.contaboserver.net sshd[4053988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root 2026-09-07T09:40:39.732477+08:00 vmi996132.contaboserver.net sshd[4053988]: Failed password for root from 20.243.120.253 port 54866 ssh2 ... show less	Brute-Force SSH
🇺🇸 SentinalX by uzumaru	2026-09-07 01:08:25 (1 week ago)	SSH brute-force detected: 938 failed login attempts in the last 1 hour.	Brute-Force SSH
🇨🇭 ale	2026-09-06 18:30:16 (1 week ago)	SSH auth scanning - multiple failed logins	Brute-Force SSH
🇺🇸 Saber1	2026-09-06 12:27:01 (1 week ago)	Successful SSH login observed on Cowrie honeypot. Targeted username: root. Observed at: 2026-09-06T1 ... show more Successful SSH login observed on Cowrie honeypot. Targeted username: root. Observed at: 2026-09-06T12:26:33.387160Z. Session: 9d04197ada0b. show less	Brute-Force SSH
🇩🇪 tall1oN	2026-09-06 11:00:56 (1 week ago)	2026-09-06T13:00:44.713304+02:00 kenny sshd[1844741]: Failed password for root from 20.243.120.253 p ... show more 2026-09-06T13:00:44.713304+02:00 kenny sshd[1844741]: Failed password for root from 20.243.120.253 port 41712 ssh2 2026-09-06T13:00:46.887064+02:00 kenny sshd[1844745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root 2026-09-06T13:00:49.654995+02:00 kenny sshd[1844745]: Failed password for root from 20.243.120.253 port 60296 ssh2 2026-09-06T13:00:53.013445+02:00 kenny sshd[1844747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root 2026-09-06T13:00:54.742163+02:00 kenny sshd[1844747]: Failed password for root from 20.243.120.253 port 60298 ssh2 ... show less	Brute-Force SSH
🇳🇱 donarev419	2026-09-05 02:56:36 (1 week ago)	Port scan detected on port 10002 (connection without data transfer)	Port Scan
🇫🇷 antivirus_5846	2026-09-04 22:30:35 (1 week ago)	Sep 5 00:30:27 hestiacp-tunnel-ip sshd[4143847]: Failed password for root from 20.243.120.253 port ... show more Sep 5 00:30:27 hestiacp-tunnel-ip sshd[4143847]: Failed password for root from 20.243.120.253 port 37154 ssh2 Sep 5 00:30:29 hestiacp-tunnel-ip sshd[4143883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root Sep 5 00:30:31 hestiacp-tunnel-ip sshd[4143883]: Failed password for root from 20.243.120.253 port 32882 ssh2 Sep 5 00:30:33 hestiacp-tunnel-ip sshd[4144211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.243.120.253 user=root Sep 5 00:30:35 hestiacp-tunnel-ip sshd[4144211]: Failed password for root from 20.243.120.253 port 32888 ssh2 ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-09-04 21:27:06 (1 week ago)	[21:27] Attempted SSH login with credentials root:--***********---	Brute-Force SSH
🇩🇪 NetWatch	2026-09-04 13:57:30 (1 week ago)	The IP 20.243.120.253 tried multiple SSH_BRUTE_FORCE logins	Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.105.98.243

🇵🇪 200.106.94.195

🇺🇸 166.239.184.117

🇰🇪 105.161.19.255

🇳🇱 89.248.172.9

🇵🇭 58.69.56.44

🇳🇱 195.178.110.232

🇫🇷 185.144.27.10

🇸🇬 184.168.124.1

🇺🇸 147.185.132.242

🇺🇦 62.244.48.222

🇷🇺 62.217.186.22

🇮🇩 36.66.16.233

🇬🇧 31.14.254.80

🇩🇪 194.88.98.125

🇹🇭 180.183.19.223

🇨🇳 106.12.240.38

🇺🇸 103.143.11.150

🇻🇳 103.72.56.174

🇮🇪 54.78.39.69