JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.6.105.152

20.6.105.152 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 67%: ?

67%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.6.105.152

Whois 20.6.105.152

IP Abuse Reports for 20.6.105.152:

This IP address has been reported a total of 16 times from 11 distinct sources. 20.6.105.152 was first reported on July 27th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-28 17:35:20 (11 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'howard':b'howard' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'howard' : 'howard' show less	DDoS Attack
🇨🇦 Luhte	2026-07-28 15:54:55 (12 hours ago)	Unsolicited TCP connection from 20.6.105.152 to port 0 at 2026-07-28T15:54:55Z. Source IP completed ... show more Unsolicited TCP connection from 20.6.105.152 to port 0 at 2026-07-28T15:54:55Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 anycast_ac	2026-07-28 14:16:47 (14 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'rita':None Family fingerprint: proxy-scanner Commands captured: $ socks4 CONNECT -> 104.26.12.205:443 $ user_id: 'rita' show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-28 00:04:38 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials: b'kristopher':None Family fingerprint: proxy-scanner Commands captured: $ socks4a CONNECT -> api.ipify.org:443 $ user_id: 'kristopher' show less	DDoS Attack
🇯🇵 mkaraki	2026-07-27 20:12:58 (1 day ago)	1785183176 # Service_probe # SIGNATURE_SEND # source_ip:20.6.105.152 # dst_port:7000 ...	Port Scan
🇺🇸 bigscoots.com	2026-07-27 18:15:07 (1 day ago)	20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; ... show more 20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:55:17 15645 sshd[18818]: Failed password for invalid user ubuntu from 154.201.70.154 port 51471 ssh2 Jul 27 13:14:38 15645 sshd[29988]: Invalid user ubuntu from 219.109.219.42 port 63250 Jul 27 13:09:49 15645 sshd[27122]: Invalid user ubuntu from 20.6.105.152 port 37756 Jul 27 13:09:51 15645 sshd[27122]: Failed password for invalid user ubuntu from 20.6.105.152 port 37756 ssh2 Jul 27 12:55:14 15645 sshd[18818]: Invalid user ubuntu from 154.201.70.154 port 51471 IP Addresses Blocked: 154.201.70.154 (HK/Hong Kong/-) 219.109.219.42 (JP/Japan/219-109-219-42.dh-connect.net) show less	Brute-Force SSH
🇺🇸 mfilser	2026-07-27 17:44:42 (1 day ago)	2026-07-27T19:44:39.652282+02:00 my-vps sshd[2446379]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-27T19:44:39.652282+02:00 my-vps sshd[2446379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.6.105.152 2026-07-27T19:44:41.697558+02:00 my-vps sshd[2446379]: Failed password for invalid user ubuntu from 20.6.105.152 port 51856 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-07-27 17:08:47 (1 day ago)	The IP 20.6.105.152 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇺🇸 bigscoots.com	2026-07-27 16:16:58 (1 day ago)	20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; ... show more 20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:16:39 21154 sshd[11800]: Invalid user ubuntu from 20.6.105.152 port 57348 Jul 27 10:52:15 21154 sshd[5930]: Invalid user ubuntu from 197.248.233.55 port 59084 Jul 27 10:52:17 21154 sshd[5930]: Failed password for invalid user ubuntu from 197.248.233.55 port 59084 ssh2 Jul 27 11:11:50 21154 sshd[10581]: Invalid user ubuntu from 103.187.24.13 port 52106 Jul 27 11:11:53 21154 sshd[10581]: Failed password for invalid user ubuntu from 103.187.24.13 port 52106 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 16:13:05 (1 day ago)	Invalid user ubuntu from 20.6.105.152 port 58652	Brute-Force SSH
🇫🇷 edoram	2026-07-27 16:06:16 (1 day ago)	SSH brute-force from honeypot. 10 attempts in 24h, 1 unique usernames tried.	Brute-Force SSH
🇬🇧 NarcTix	2026-07-27 15:57:49 (1 day ago)	2026-07-27T15:57:48.432919+00:00 sshd[35316]: Invalid user ubuntu from 20.6.105.152 port 45258 ...	Brute-Force SSH
🇺🇸 GG UNLUCKI	2026-07-27 15:38:27 (1 day ago)	SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 13:30:03 (1 day ago)	20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 20.6.105.152 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 08:24:52 14278 sshd[17484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.176.21.84 user=root Jul 27 08:24:54 14278 sshd[17484]: Failed password for root from 103.176.21.84 port 52858 ssh2 Jul 27 08:19:51 14278 sshd[14976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.24.218.67 user=root Jul 27 08:29:51 14278 sshd[19997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.6.105.152 user=root Jul 27 08:19:52 14278 sshd[14976]: Failed password for root from 20.24.218.67 port 39714 ssh2 IP Addresses Blocked: 103.176.21.84 (VN/Vietnam/Gravity.hire.uk.com) 20.24.218.67 (HK/Hong Kong/-) show less	Brute-Force SSH
🇸🇮 basing	2026-07-27 11:33:19 (1 day ago)	2026-07-27 12:33:19 kb SASL PLAIN auth failed: rhost=20.6.105.152...	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇲 208.131.185.163

🇺🇸 144.172.95.197

🇳🇬 135.129.124.171

🇳🇴 51.120.79.193

🇺🇸 43.166.168.6

🇬🇧 35.203.211.172

🇺🇸 216.106.179.182

🇨🇳 175.30.48.84

🇬🇧 158.94.188.185

🇩🇪 152.53.148.66

🇨🇳 120.25.208.28

🇻🇳 103.190.80.120

🇮🇳 103.161.144.215

🇺🇸 74.125.179.26

🇨🇦 23.154.81.152

🇰🇿 2.135.105.210

🇺🇸 216.25.89.126

🇩🇪 213.209.159.228

🇦🇷 200.225.116.207

🇬🇵 199.101.189.136