AbuseIPDB » 20.91.221.248

20.91.221.248 was found in our database!

This IP was reported 906 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Sweden
City	Gavle, Gavleborgs lan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.91.221.248

Whois 20.91.221.248

IP Abuse Reports for 20.91.221.248:

This IP address has been reported a total of 906 times from 334 distinct sources. 20.91.221.248 was first reported on April 21st 2022, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Seohyun-DC	12 minutes ago	Invalid user makino from 20.91.221.248 port 34886	Brute-Force SSH
Joaojunior	13 minutes ago	2022-08-12T15:45:26.849933-0300 [cowrie.ssh.factory.CowrieSSHFactory] New connection: 20.91.221.248: ... show more2022-08-12T15:45:26.849933-0300 [cowrie.ssh.factory.CowrieSSHFactory] New connection: 20.91.221.248:46206 (::ffff:177.23.168.20:2222) [session: a01d8af24c3e] ... show less	Brute-Force SSH
sid3windr	3 hours ago	sshd[10523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... show moresshd[10523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 sshd[10523]: Failed password for invalid user deb from 20.91.221.248 port 34712 ssh2 show less	Brute-Force SSH
FunyMails	11 hours ago	Aug 12 07:08:18 localhost sshd[2055527]: Disconnected from authenticating user root 20.91.221.248 po ... show moreAug 12 07:08:18 localhost sshd[2055527]: Disconnected from authenticating user root 20.91.221.248 port 48832 [preauth] Aug 12 07:15:43 localhost sshd[2055535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 user=root Aug 12 07:15:46 localhost sshd[2055535]: Failed password for root from 20.91.221.248 port 48996 ssh2 ... show less	Brute-Force SSH
dagasistemas-sl	15 hours ago	Aug 12 05:25:06 controldedominiosdg sshd[21569]: Invalid user pauline from 20.91.221.248 port 50620< ... show moreAug 12 05:25:06 controldedominiosdg sshd[21569]: Invalid user pauline from 20.91.221.248 port 50620 Aug 12 05:25:06 controldedominiosdg sshd[21569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 Aug 12 05:25:08 controldedominiosdg sshd[21569]: Failed password for invalid user pauline from 20.91.221.248 port 50620 ssh2 ... show less	Brute-Force SSH
tmiland	15 hours ago	20.91.221.248 (SE/Sweden/-), 5 distributed sshd attacks on account [root] in the last 3600 secs	Brute-Force SSH
kukki	17 hours ago	detected by Fail2Ban	Brute-Force SSH
OiledAmoeba	20 hours ago	Aug 12 00:43:53 fhem-rasp sshd[11918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreAug 12 00:43:53 fhem-rasp sshd[11918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 user=root Aug 12 00:43:54 fhem-rasp sshd[11918]: Failed password for root from 20.91.221.248 port 60886 ssh2 ... show less	Brute-Force SSH
OiledAmoeba	21 hours ago	Aug 11 23:42:54 fhem-rasp sshd[23484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreAug 11 23:42:54 fhem-rasp sshd[23484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 user=root Aug 11 23:42:56 fhem-rasp sshd[23484]: Failed password for root from 20.91.221.248 port 59942 ssh2 ... show less	Brute-Force SSH
tradenet	21 hours ago	2022-08-11T15:55:25.929660server2.ebullit.com sshd[14610]: Failed password for root from 20.91.221.2 ... show more2022-08-11T15:55:25.929660server2.ebullit.com sshd[14610]: Failed password for root from 20.91.221.248 port 39700 ssh2 2022-08-11T16:36:40.363473server2.ebullit.com sshd[4445]: Invalid user london from 20.91.221.248 port 40184 2022-08-11T16:36:40.368247server2.ebullit.com sshd[4445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 2022-08-11T16:36:40.363473server2.ebullit.com sshd[4445]: Invalid user london from 20.91.221.248 port 40184 2022-08-11T16:36:43.014466server2.ebullit.com sshd[4445]: Failed password for invalid user london from 20.91.221.248 port 40184 ssh2 ... show less	Brute-Force SSH
OiledAmoeba	21 hours ago	Aug 11 23:07:30 fhem-rasp sshd[10755]: Invalid user js from 20.91.221.248 port 59374 ...	Brute-Force SSH
IDnX	22 hours ago	Aug 12 03:48:14 hokage sshd[591318]: Invalid user user2 from 20.91.221.248 port 33868 Aug 12 0 ... show moreAug 12 03:48:14 hokage sshd[591318]: Invalid user user2 from 20.91.221.248 port 33868 Aug 12 03:48:16 hokage sshd[591318]: Failed password for invalid user user2 from 20.91.221.248 port 33868 ssh2 Aug 12 03:48:17 hokage sshd[591318]: Disconnected from invalid user user2 20.91.221.248 port 33868 [preauth] show less	Brute-Force SSH
OiledAmoeba	22 hours ago	Aug 11 22:48:11 fhem-rasp sshd[4274]: Invalid user user2 from 20.91.221.248 port 59032 ...	Brute-Force SSH
Bernhard Fürst	11 Aug 2022	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 20.91.221.248, Reason:[( ... show moreCluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 20.91.221.248, Reason:[(sshd) Failed SSH login from 20.91.221.248 (SE/Sweden/-): 5 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
shodanki	11 Aug 2022	Aug 11 18:56:47 Proxmox-VE sshd[3819569]: Failed password for root from 20.91.221.248 port 52008 ssh ... show moreAug 11 18:56:47 Proxmox-VE sshd[3819569]: Failed password for root from 20.91.221.248 port 52008 ssh2 Aug 11 19:00:32 Proxmox-VE sshd[3821807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.91.221.248 user=root Aug 11 19:00:34 Proxmox-VE sshd[3821807]: Failed password for root from 20.91.221.248 port 52072 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩