AbuseIPDB » 20.199.96.61

20.199.96.61 was found in our database!

This IP was reported 480 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.199.96.61

Whois 20.199.96.61

IP Abuse Reports for 20.199.96.61:

This IP address has been reported a total of 480 times from 169 distinct sources. 20.199.96.61 was first reported on February 6th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	22 Mar 2023	Feb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user r ... show moreFeb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user root 20.199.96.61 port 57482 [preauth] Feb 6 11:32:55 guestgw-router01.remscheid.de sshd[2291057]: Disconnected from authenticating user root 20.199.96.61 port 58704 [preauth] Feb 6 11:34:08 guestgw-router01.remscheid.de sshd[2291244]: Disconnected from authenticating user root 20.199.96.61 port 52324 [preauth] Feb 6 11:35:27 guestgw-router01.remscheid.de sshd[2291363]: Disconnected from authenticating user root 20.199.96.61 port 34554 [preauth] Feb 6 11:36:53 guestgw-router01.remscheid.de sshd[2291485]: Disconnected from authenticating user root 20.199.96.61 port 37322 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user r ... show moreFeb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user root 20.199.96.61 port 57482 [preauth] Feb 6 11:32:55 guestgw-router01.remscheid.de sshd[2291057]: Disconnected from authenticating user root 20.199.96.61 port 58704 [preauth] Feb 6 11:34:08 guestgw-router01.remscheid.de sshd[2291244]: Disconnected from authenticating user root 20.199.96.61 port 52324 [preauth] Feb 6 11:35:27 guestgw-router01.remscheid.de sshd[2291363]: Disconnected from authenticating user root 20.199.96.61 port 34554 [preauth] Feb 6 11:36:53 guestgw-router01.remscheid.de sshd[2291485]: Disconnected from authenticating user root 20.199.96.61 port 37322 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user r ... show moreFeb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user root 20.199.96.61 port 57482 [preauth] Feb 6 11:32:55 guestgw-router01.remscheid.de sshd[2291057]: Disconnected from authenticating user root 20.199.96.61 port 58704 [preauth] Feb 6 11:34:08 guestgw-router01.remscheid.de sshd[2291244]: Disconnected from authenticating user root 20.199.96.61 port 52324 [preauth] Feb 6 11:35:27 guestgw-router01.remscheid.de sshd[2291363]: Disconnected from authenticating user root 20.199.96.61 port 34554 [preauth] Feb 6 11:36:53 guestgw-router01.remscheid.de sshd[2291485]: Disconnected from authenticating user root 20.199.96.61 port 37322 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user r ... show moreFeb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user root 20.199.96.61 port 57482 [preauth] Feb 6 11:32:55 guestgw-router01.remscheid.de sshd[2291057]: Disconnected from authenticating user root 20.199.96.61 port 58704 [preauth] Feb 6 11:34:08 guestgw-router01.remscheid.de sshd[2291244]: Disconnected from authenticating user root 20.199.96.61 port 52324 [preauth] Feb 6 11:35:27 guestgw-router01.remscheid.de sshd[2291363]: Disconnected from authenticating user root 20.199.96.61 port 34554 [preauth] Feb 6 11:36:53 guestgw-router01.remscheid.de sshd[2291485]: Disconnected from authenticating user root 20.199.96.61 port 37322 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user r ... show moreFeb 6 11:27:22 guestgw-router01.remscheid.de sshd[2290517]: Disconnected from authenticating user root 20.199.96.61 port 57482 [preauth] Feb 6 11:32:55 guestgw-router01.remscheid.de sshd[2291057]: Disconnected from authenticating user root 20.199.96.61 port 58704 [preauth] Feb 6 11:34:08 guestgw-router01.remscheid.de sshd[2291244]: Disconnected from authenticating user root 20.199.96.61 port 52324 [preauth] Feb 6 11:35:27 guestgw-router01.remscheid.de sshd[2291363]: Disconnected from authenticating user root 20.199.96.61 port 34554 [preauth] Feb 6 11:36:53 guestgw-router01.remscheid.de sshd[2291485]: Disconnected from authenticating user root 20.199.96.61 port 37322 [preauth] show less	Brute-Force
AdrianT	22 Mar 2023	SSH brute force	Brute-Force SSH
AdrianT	06 Mar 2023	SSH brute force	Brute-Force SSH
FreeSTAR	03 Mar 2023	Feb 14 07:46:33 DVSwitch-GM0WUR sshd[27200]: Failed password for root from 20.199.96.61 port 36376 s ... show moreFeb 14 07:46:33 DVSwitch-GM0WUR sshd[27200]: Failed password for root from 20.199.96.61 port 36376 ssh2 ... show less	Brute-Force SSH
Parth Maniar	01 Mar 2023	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show moreSSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
ThreatBook.io	22 Feb 2023	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.199.96.61	Brute-Force
Felipe Brunelli de Andrade	22 Feb 2023	Feb 22 07:27:48 dns1 sshd[14554]: Disconnected from authenticating user root 20.199.96.61 port 41544 ... show moreFeb 22 07:27:48 dns1 sshd[14554]: Disconnected from authenticating user root 20.199.96.61 port 41544 [preauth] Feb 22 07:31:31 dns1 sshd[14595]: Invalid user test from 20.199.96.61 port 35592 Feb 22 07:31:31 dns1 sshd[14595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.199.96.61 Feb 22 07:31:34 dns1 sshd[14595]: Failed password for invalid user test from 20.199.96.61 port 35592 ssh2 Feb 22 07:31:36 dns1 sshd[14595]: Disconnected from invalid user test 20.199.96.61 port 35592 [preauth] show less	Brute-Force SSH
Felipe Brunelli de Andrade	22 Feb 2023	Feb 22 07:10:47 dns1 sshd[14329]: Failed password for invalid user bob from 20.199.96.61 port 54664 ... show moreFeb 22 07:10:47 dns1 sshd[14329]: Failed password for invalid user bob from 20.199.96.61 port 54664 ssh2 Feb 22 07:10:48 dns1 sshd[14329]: Disconnected from invalid user bob 20.199.96.61 port 54664 [preauth] Feb 22 07:15:34 dns1 sshd[14353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.199.96.61 user=root Feb 22 07:15:35 dns1 sshd[14353]: Failed password for root from 20.199.96.61 port 51758 ssh2 Feb 22 07:15:36 dns1 sshd[14353]: Disconnected from authenticating user root 20.199.96.61 port 51758 [preauth] show less	Brute-Force SSH
Justin Catello	22 Feb 2023	20.199.96.61 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more20.199.96.61 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 22 04:13:55 13613 sshd[22893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.199.96.61 user=root Feb 22 03:56:30 13613 sshd[21762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.103.135 user=root Feb 22 03:28:08 13613 sshd[19904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.161.97 user=root Feb 22 03:26:55 13613 sshd[19785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.161.97 user=root Feb 22 03:26:56 13613 sshd[19785]: Failed password for root from 185.209.161.97 port 40932 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
MatStef132	22 Feb 2023	Feb 22 09:31:12 instance-20220119-1536 sshd[1809958]: Invalid user test2 from 20.199.96.61 port 3329 ... show moreFeb 22 09:31:12 instance-20220119-1536 sshd[1809958]: Invalid user test2 from 20.199.96.61 port 33290 Feb 22 09:31:12 instance-20220119-1536 sshd[1809958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.199.96.61 Feb 22 09:31:12 instance-20220119-1536 sshd[1809958]: Invalid user test2 from 20.199.96.61 port 33290 Feb 22 09:31:14 instance-20220119-1536 sshd[1809958]: Failed password for invalid user test2 from 20.199.96.61 port 33290 ssh2 Feb 22 09:34:54 instance-20220119-1536 sshd[1853895]: Invalid user testuser from 20.199.96.61 port 53096 show less	Brute-Force SSH
MatStef132	22 Feb 2023	Feb 22 09:12:30 instance-20220119-1536 sshd[1582657]: Failed password for root from 20.199.96.61 por ... show moreFeb 22 09:12:30 instance-20220119-1536 sshd[1582657]: Failed password for root from 20.199.96.61 port 45744 ssh2 Feb 22 09:16:07 instance-20220119-1536 sshd[1627644]: Invalid user test from 20.199.96.61 port 45208 Feb 22 09:16:07 instance-20220119-1536 sshd[1627644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.199.96.61 Feb 22 09:16:07 instance-20220119-1536 sshd[1627644]: Invalid user test from 20.199.96.61 port 45208 Feb 22 09:16:10 instance-20220119-1536 sshd[1627644]: Failed password for invalid user test from 20.199.96.61 port 45208 ssh2 show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩