JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.5.85.204

20.5.85.204 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.5.85.204

Whois 20.5.85.204

IP Abuse Reports for 20.5.85.204:

This IP address has been reported a total of 31 times from 24 distinct sources. 20.5.85.204 was first reported on July 13th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 maik	2026-07-17 08:58:02 (11 hours ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇦🇹 CTK	2026-07-16 20:58:08 (23 hours ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇨🇦 maik	2026-07-16 08:57:42 (1 day ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇫🇷 COMAITE	2026-07-15 15:03:57 (2 days ago)	Honeypot login success	Brute-Force
🇫🇷 tecnicorioja	2026-07-15 10:45:31 (2 days ago)	Failed password for root Jul 15 12:05:46 port 57978	Brute-Force SSH
🇩🇪 senkodev	2026-07-15 09:53:39 (2 days ago)	2026-07-15T11:53:36.839532+02:00 vm1386.de.snk.wtf sshd[109610]: Failed password for root from 20.5. ... show more 2026-07-15T11:53:36.839532+02:00 vm1386.de.snk.wtf sshd[109610]: Failed password for root from 20.5.85.204 port 59468 ssh2 2026-07-15T11:53:38.845099+02:00 vm1386.de.snk.wtf sshd[109610]: Connection closed by authenticating user root 20.5.85.204 port 59468 [preauth] ... show less	Brute-Force SSH
🇨🇦 maik	2026-07-15 08:57:35 (2 days ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇫🇷 hghosting	2026-07-15 08:02:24 (2 days ago)	CrowdSec auto-report: crowdsecurity/ssh-bf — 6 events	Brute-Force SSH
🇺🇸 HamSammich	2026-07-15 03:39:26 (2 days ago)	Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-15T03:39Z). Usernames ... show more Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-15T03:39Z). Usernames tried: root. show less	Brute-Force SSH
🇵🇱 ntxg	2026-07-15 01:25:39 (2 days ago)	2026-07-15T03:25:36.626006+02:00 serverftp sshd[3072892]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-15T03:25:36.626006+02:00 serverftp sshd[3072892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.5.85.204 user=root 2026-07-15T03:25:38.364565+02:00 serverftp sshd[3072892]: Failed password for root from 20.5.85.204 port 49186 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-07-15 00:57:49 (2 days ago)	2026-07-14T20:57:48.372789-04:00 debian sshd[1764226]: Failed password for root from 20.5.85.204 por ... show more 2026-07-14T20:57:48.372789-04:00 debian sshd[1764226]: Failed password for root from 20.5.85.204 port 50642 ssh2 2026-07-14T20:57:46.035589-04:00 debian sshd[1764228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.5.85.204 user=root 2026-07-14T20:57:48.375181-04:00 debian sshd[1764228]: Failed password for root from 20.5.85.204 port 48852 ssh2 2026-07-14T20:57:46.039932-04:00 debian sshd[1764229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.5.85.204 user=root 2026-07-14T20:57:48.379343-04:00 debian sshd[1764229]: Failed password for root from 20.5.85.204 port 45100 ssh2 ... show less	Brute-Force SSH
🇩🇪 DocNetzwerk	2026-07-14 23:02:41 (2 days ago)	(PERMBLOCK) 20.5.85.204 (AU/Australia/-) has had more than 3 temp blocks	Hacking
🇺🇸 dondessert.com	2026-07-14 19:25:22 (3 days ago)	2026-07-14T15:25:22.038199mail.dondessert.com sshd[656670]: Failed password for root from 20.5.85.20 ... show more 2026-07-14T15:25:22.038199mail.dondessert.com sshd[656670]: Failed password for root from 20.5.85.204 port 53894 ssh2 2026-07-14T15:25:22.473642mail.dondessert.com sshd[656670]: Connection closed by authenticating user root 20.5.85.204 port 53894 [preauth] ... show less	Brute-Force SSH
🇺🇸 rjdefrancisco	2026-07-14 12:57:22 (3 days ago)	Unwanted traffic detected by honeypot on July 13, 2026: brute force and hacking attacks (2 over ssh) ... show more Unwanted traffic detected by honeypot on July 13, 2026: brute force and hacking attacks (2 over ssh). show less	Port Scan Brute-Force SSH
🇺🇸 johuang92	2026-07-14 08:48:35 (3 days ago)	Cowrie SSH honeypot: session 93b9462fe485 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 23.27.225.173

🇺🇸 162.216.150.141

🇸🇬 159.223.93.39

🇺🇸 155.103.69.40

🇸🇳 154.124.239.186

🇨🇳 118.145.247.242

🇧🇷 45.164.39.253

🇺🇸 20.14.87.238

🇺🇸 18.216.176.135

🇮🇹 151.33.87.179

🇻🇳 103.90.233.75

🇵🇭 103.60.170.6

🇺🇸 34.174.58.154

🇬🇧 217.154.38.181

🇱🇻 213.232.204.130

🇯🇵 212.32.76.21

🇷🇺 188.187.99.187

🇲🇽 187.148.132.63

🇨🇦 172.69.214.14

🇺🇸 162.216.149.125