JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.192.5.254

20.192.5.254 was found in our database!

This IP was reported 2,943 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.192.5.254

Whois 20.192.5.254

IP Abuse Reports for 20.192.5.254:

This IP address has been reported a total of 2,943 times from 686 distinct sources. 20.192.5.254 was first reported on July 18th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-09-01 07:12:07 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 ghostwarriors	2026-08-28 07:22:04 (5 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇧🇷 helix	2026-08-27 06:17:22 (6 days ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 Deltron3030	2026-08-26 04:17:58 (1 week ago)	SSH brute-force attempt from 20.192.5.254 blocked by Atlanta2. 2026-08-02 13:10:45,549 fail2ban.acti ... show more SSH brute-force attempt from 20.192.5.254 blocked by Atlanta2. 2026-08-02 13:10:45,549 fail2ban.actions [750]: NOTICE [sshd] Ban 20.192.5.254 2026-08-04 01:30:30,821 fail2ban.actions [750]: NOTICE [sshd] Ban 20.192.5.254 show less	Brute-Force SSH
🇺🇸 Deltron3030	2026-08-23 03:29:52 (1 week ago)	SSH brute-force attempt from 20.192.5.254 blocked by Atlanta2. 2026-08-02 13:10:45,549 fail2ban.acti ... show more SSH brute-force attempt from 20.192.5.254 blocked by Atlanta2. 2026-08-02 13:10:45,549 fail2ban.actions [750]: NOTICE [sshd] Ban 20.192.5.254 2026-08-04 01:30:30,821 fail2ban.actions [750]: NOTICE [sshd] Ban 20.192.5.254 show less	Brute-Force SSH
🇧🇷 helix	2026-08-23 03:04:54 (1 week ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 helix	2026-08-21 14:36:31 (1 week ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇧🇷 helix	2026-08-19 01:15:40 (2 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 Deltron3030	2026-08-18 05:15:14 (2 weeks ago)	SSH brute-force attempt from 20.192.5.254 blocked by LA1. 2026-08-03 09:18:51,375 fail2ban.actions ... show more SSH brute-force attempt from 20.192.5.254 blocked by LA1. 2026-08-03 09:18:51,375 fail2ban.actions [887]: NOTICE [sshd] Ban 20.192.5.254 2026-08-03 09:56:56,599 fail2ban.actions [887]: NOTICE [sshd] Ban 20.192.5.254 show less	Brute-Force SSH
🇧🇷 helix	2026-08-13 20:46:24 (2 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇧🇷 helix	2026-08-12 06:23:43 (3 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-08-11 07:38:45 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇧🇷 helix	2026-08-11 03:28:29 (3 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 NetGuard	2026-08-11 03:14:01 (3 weeks ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-08-04T03:07:41.751+00:00 Attacker IP: 20.192.5.254 \| Port: N/A \| Country: India Honeypot: cowrie \| Attack: ssh_telnet_probe Commands: df -h \| head -n 2 \| awk 'FNR == 2 {print $2;}'; lscpu \| grep Model; whoami Files dropped: 09a3e612f8cad156..., afd0dd76c8d59e41... Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇸🇬 sh97	2026-08-11 00:39:21 (3 weeks ago)	rooted: SSH Brute Force from 20.192.5.254 at 2026-08-11 06:09:21 IST	Brute-Force SSH

Showing 1 to 15 of 2943 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.26

🇵🇰 39.59.64.151

🇺🇸 35.174.141.243

🇺🇸 20.65.179.70

🇺🇸 216.224.112.120

🇰🇷 210.222.26.181

🇧🇷 204.157.100.22

🇸🇪 157.22.73.30

🇧🇷 131.196.46.212

🇫🇮 130.49.10.62

🇮🇳 122.187.227.198

🇮🇳 122.177.244.98

🇺🇸 91.230.168.136

🇺🇸 65.49.1.78

🇺🇸 34.105.31.83

🇺🇸 20.150.195.233

🇸🇬 8.219.9.44

🇺🇸 2604:a880:400:d1:0:4:e8eb:3001

🇷🇴 185.193.52.180

🇨🇳 180.76.243.197