JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.253.160.20

185.253.160.20 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 29%: ?

29%

ISP	M247 LTD Armenia Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.253.160.20

Whois 185.253.160.20

IP Abuse Reports for 185.253.160.20:

This IP address has been reported a total of 55 times from 34 distinct sources. 185.253.160.20 was first reported on May 17th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇪 McHoneypot	2026-06-08 10:41:57 (1 week ago)	Minecraft server scanning dectected on port 25565	Port Scan
🇫🇷 evvsk	2026-06-08 10:37:52 (1 week ago)	31723/tcp	Port Scan
🇺🇸 cpxducky	2026-06-08 10:34:55 (1 week ago)	2026-06-08 10:34:54: Minecraft server scan detected from 185.253.160.20 on port 25565 of mail.cpxduc ... show more 2026-06-08 10:34:54: Minecraft server scan detected from 185.253.160.20 on port 25565 of mail.cpxducky.com show less	Port Scan
🇩🇪 Duggy_Tuxy🧱	2026-06-01 18:29:11 (2 weeks ago)	[SW01-SRV01-DE] Blocked by SysWarden Firewall (Traffic from Malicious Hoster (ASN))	Port Scan
🇩🇪 derLoosi	2026-05-16 15:34:27 (1 month ago)	HV1.1 Blocked by UFW	Port Scan
🇨🇿 lp	2026-05-14 13:53:56 (1 month ago)	Email account brute force: 1 attempts were recorded from 185.253.160.20 2026-05-14T14:23:34+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 185.253.160.20 2026-05-14T14:23:34+02:00 warning: unknown[185.253.160.20]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 xmission.com	2026-04-17 19:46:46 (2 months ago)	Blocked by UFW (TCP on 5060) Source port: 6345 TTL: 236 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5060) Source port: 6345 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 185.253.160.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 formality	2026-04-17 19:43:15 (2 months ago)	Invalid user nullscope from 185.253.160.20 port 61071	Brute-Force SSH
🇩🇪 ksol-hostmaster	2026-03-28 00:22:13 (2 months ago)	Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: warning: unknown[185.253.160.20]:26412: S ... show more Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: warning: unknown[185.253.160.20]:26412: SASL LOGIN authentication failed: (reason unavailable), [email protected] Mar 28 01:22:12 ksol postfix/submissions-465/smtpd[92105]: disconnect from unknown[185.253.160.20]:26412 ehlo=1 auth=0/1 quit=1 commands=2/3 ... show less	Email Spam
🇹🇷 rtbh.com.tr	2026-03-27 20:12:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-26 20:12:16 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ksol-hostmaster	2026-03-25 17:27:28 (2 months ago)	Mar 25 18:27:28 ksol dovecot[13733]: auth-worker(98868): conn unix:auth-worker (uid=143): auth-worke ... show more Mar 25 18:27:28 ksol dovecot[13733]: auth-worker(98868): conn unix:auth-worker (uid=143): auth-worker<1>: sql(anonymized@email,185.253.160.20): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇮🇹 VHosting	2026-03-10 22:22:48 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇳🇱 ReporTR	2026-01-31 10:15:28 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-postfix'. TCP connection completed. IP ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-postfix'. TCP connection completed. IP banned. show less	Email Spam Brute-Force
🇫🇷 Dampen59	2026-01-29 13:51:33 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 185.253.160.20 (AM/Armenia/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 185.253.160.20 (AM/Armenia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-29 13:50:57 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:41684: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:03 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:51210: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:13 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:41654: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:29 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:29975: 535 Incorrect authentication data ([email protected]) 2026-01-29 13:51:29 dovecot_login authenticator failed for H=(ADMIN) [185.253.160.20]:54355: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.56.238.174

🇧🇷 45.227.195.196

🇺🇸 40.112.183.29

🇬🇧 217.146.80.123

🇬🇧 191.96.110.39

🇩🇪 172.217.33.157

🇪🇸 158.158.104.28

🇰🇷 221.156.126.1

🇺🇸 172.253.210.87

🇳🇱 104.23.166.163

🇸🇬 103.189.234.96

🇿🇦 102.33.32.116

🇫🇮 65.109.182.217

🇺🇸 45.79.115.134

🇮🇳 122.187.229.129

🇺🇸 100.28.153.226

🇳🇱 88.151.32.22

🇷🇴 80.94.92.187

🇷🇴 80.94.92.184

🇳🇱 45.198.224.244