JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.198.76.213

Neutral Activity

Abuse confidence score ?

0% Low Risk

315 reports

184 reporters · latest 7 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.198.76.213 has been reported 315 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.198.76.213

Export CSV

This IP address has been reported a total of 315 times from 184 distinct sources. 20.198.76.213 was first reported on February 18th 2026, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-04 20:11:52 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-01 20:11:10 (7 months ago)	IP banned by Fail2Ban	Brute-Force SSH
🇳🇱 Site.eu	2026-02-28 01:32:26 (7 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-02-26 10:25:38 (7 months ago)	FortiWeb WAF: 14 attacks detected. Threat Score: 5400. Types: Client Management(7), Block IP List(7) ... show more FortiWeb WAF: 14 attacks detected. Threat Score: 5400. Types: Client Management(7), Block IP List(7). Origin: India. show less	Web App Attack
🇪🇸 librebit	2026-02-26 00:37:28 (7 months ago)	Brute force	Brute-Force
🇩🇪 Skyrider	2026-02-25 22:03:48 (7 months ago)	20.198.76.213 - - [25/Feb/2026:23:03:47 +0100] "GET /222.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Wind ... show more 20.198.76.213 - - [25/Feb/2026:23:03:47 +0100] "GET /222.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:23:03:47 +0100] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:23:03:48 +0100] "GET /adminfuns.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:23:03:48 +0100] "GET /class-t.api.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:23:03:48 +0100] "GET /edit.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 ps-center	2026-02-25 19:57:36 (7 months ago)	C1: Web Attack GET /admin.php	Web Spam Hacking Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-02-25 19:57:32 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇧🇾 lns.bz	2026-02-25 19:50:56 (7 months ago)	Too many 404 requests [BY]	Web App Attack
🇫🇮 Christopher Hughes	2026-02-25 19:48:13 (7 months ago)	[Wed Feb 25 19:48:12.766053 2026] [proxy_fcgi:error] [pid 445600:tid 139768332453440] [client 20.198 ... show more [Wed Feb 25 19:48:12.766053 2026] [proxy_fcgi:error] [pid 445600:tid 139768332453440] [client 20.198.76.213:56872] AH01071: Got error 'Primary script unknown' [Wed Feb 25 19:48:12.916677 2026] [proxy_fcgi:error] [pid 445600:tid 139768084026944] [client 20.198.76.213:56872] AH01071: Got error 'Primary script unknown' [Wed Feb 25 19:48:13.067497 2026] [proxy_fcgi:error] [pid 445600:tid 139767480047168] [client 20.198.76.213:56872] AH01071: Got error 'Primary script unknown' [Wed Feb 25 19:48:13.243591 2026] [proxy_fcgi:error] [pid 445600:tid 139767488439872] [client 20.198.76.213:56872] AH01071: Got error 'Primary script unknown' [Wed Feb 25 19:48:13.447463 2026] [proxy_fcgi:error] [pid 445600:tid 139766959961664] [client 20.198.76.213:56872] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇮🇩 zam	2026-02-25 18:43:20 (7 months ago)	20.198.76.213 - - [25/Feb/2026:18:43:12 +0000] "GET /222.php HTTP/1.1" 404 9110 20.198.76.213 - - [2 ... show more 20.198.76.213 - - [25/Feb/2026:18:43:12 +0000] "GET /222.php HTTP/1.1" 404 9110 20.198.76.213 - - [25/Feb/2026:18:43:13 +0000] "GET /admin.php HTTP/1.1" 404 9110 20.198.76.213 - - [25/Feb/2026:18:43:13 +0000] "GET /adminfuns.php HTTP/1.1" 404 9110 20.198.76.213 - - [25/Feb/2026:18:43:14 +0000] "GET /class-t.api.php HTTP/1.1" 404 9110 20.198.76.213 - - [25/Feb/2026:18:43:15 +0000] "GET /edit.php HTTP/1.1" 404 9110 {"log":"20.198.76.213 - - [25/Feb/2026:18:43:15 +0000] mushollaalhidayah.zam.we show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-02-25 16:34:23 (7 months ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
Anonymous	2026-02-25 15:52:33 (7 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 20. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 20.198.76.213 (IN/India/-) show less	Brute-Force
🇳🇱 CryptoYakari	2026-02-25 15:43:02 (7 months ago)	20.198.76.213 - - [25/Feb/2026:18:42:59 +0300] "GET /222.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Win ... show more 20.198.76.213 - - [25/Feb/2026:18:42:59 +0300] "GET /222.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:18:42:59 +0300] "GET /admin.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:18:42:59 +0300] "GET /adminfuns.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:18:42:59 +0300] "GET /class-t.api.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.76.213 - - [25/Feb/2026:18:43:00 +0300] "GET /edit.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
Anonymous	2026-02-25 14:29:39 (7 months ago)	20.198.76.213 - - [25/Feb/2026:14:29:38 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 14729 "-" "M ... show more 20.198.76.213 - - [25/Feb/2026:14:29:38 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 14729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 78.173.129.102

🇳🇱 2400:cb00:994:1000:113a:19:a5b1:7a00

🇹🇳 197.5.145.102

🇲🇽 189.167.233.34

🇩🇪 185.168.30.81

🇺🇸 136.108.194.149

🇮🇩 114.12.17.98

🇺🇸 76.8.100.18

🇺🇦 46.250.30.85

🇺🇸 20.65.202.19

🇩🇪 8.211.27.182

🇺🇸 216.244.66.237

🇸🇬 193.37.32.179

🇩🇪 130.12.180.42

🇮🇹 128.116.163.40

🇿🇦 102.66.144.236

🇺🇸 35.226.237.93

🇳🇱 34.7.93.49

🇬🇧 5.252.83.146

🇧🇪 198.235.24.195