JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.76.245.76

20.76.245.76 was found in our database!

This IP was reported 906 times. Confidence of Abuse is 11%: ?

11%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.76.245.76

Whois 20.76.245.76

IP Abuse Reports for 20.76.245.76:

This IP address has been reported a total of 906 times from 208 distinct sources. 20.76.245.76 was first reported on December 15th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-09-12 05:20:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TAY	2026-09-12 03:37:01 (2 weeks ago)	20.76.245.76 - - [12/Sep/2026:11:35:44 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 476 "-" "Mozilla ... show more 20.76.245.76 - - [12/Sep/2026:11:35:44 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 20.76.245.76 - - [12/Sep/2026:11:35:51 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 20.76.245.76 - - [12/Sep/2026:11:36:02 +0800] "GET /wp-config.php~ HTTP/1.1" 301 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 20.76.245.76 - - [12/Sep/2026:11:36:11 +0800] "GET /wp-config.php~ HTTP/1.1" 404 72147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 20.76.245.76 - - [12/Sep/2026:11:36:18 +0800] "GET /wp-config.php.save HTTP/1.1" 301 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr ... show less	Brute-Force
🇨🇦 QSC-Sentinel	2026-07-19 02:49:13 (2 months ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-20 21:35:11 (4 months ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇮🇳 evicky2002	2026-04-29 18:28:29 (5 months ago)	Confirmed malicious by STILWaters CTI (score=100)	Hacking Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-04-09 10:14:31 (5 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇫🇮 KnightIndustries	2026-04-09 10:06:29 (5 months ago)	2026-04-09T12:06:20.939751+02:00 milkyway sshd[3226193]: pam_unix(sshd:auth): authentication failure ... show more 2026-04-09T12:06:20.939751+02:00 milkyway sshd[3226193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 2026-04-09T12:06:23.394100+02:00 milkyway sshd[3226193]: Failed password for invalid user fawcettcomputerservices from 20.76.245.76 port 57997 ssh2 2026-04-09T12:06:29.199732+02:00 milkyway sshd[3226208]: Invalid user fawcettcomputerservices from 20.76.245.76 port 58005 ... show less	Brute-Force SSH
🇩🇪 remo	2026-04-09 10:00:18 (5 months ago)	Apr 9 12:00:13 dev0-dcde-rnet sshd[15575]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Apr 9 12:00:13 dev0-dcde-rnet sshd[15575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 Apr 9 12:00:14 dev0-dcde-rnet sshd[15575]: Failed password for invalid user v22018116653376520 from 20.76.245.76 port 15808 ssh2 Apr 9 12:00:17 dev0-dcde-rnet sshd[15577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 show less	Brute-Force SSH
🇨🇦 zXero	2026-04-09 10:00:13 (5 months ago)	Fail2Ban automatic report - jail: geoip-ssh	Brute-Force SSH DDoS Attack
🇺🇸 MSchienle	2026-04-09 09:56:11 (5 months ago)	2026-04-09 04:54:02.796126-0500 localhost sshd-session[69142]: Failed password for invalid user rev ... show more 2026-04-09 04:54:02.796126-0500 localhost sshd-session[69142]: Failed password for invalid user reverendrhonda from 20.76.245.76 port 18309 ssh2 show less	Brute-Force
🇫🇷 SimonB	2026-04-09 09:55:36 (5 months ago)	SSH bruteforce attempt	Brute-Force SSH
🇩🇪 Tha_14	2026-04-09 09:50:19 (5 months ago)	Apr 9 11:50:15 hosting sshd[495922]: Invalid user asteriorg from 20.76.245.76 port 27731 Apr 9 11: ... show more Apr 9 11:50:15 hosting sshd[495922]: Invalid user asteriorg from 20.76.245.76 port 27731 Apr 9 11:50:16 hosting sshd[495922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 Apr 9 11:50:18 hosting sshd[495922]: Failed password for invalid user asteriorg from 20.76.245.76 port 27731 ssh2 show less	SSH Brute-Force
🇩🇪 Sequell.de	2026-04-09 09:49:41 (5 months ago)	SSH brute-force attempt (Username: sequell)	Brute-Force SSH
🇳🇱 Godert Jan van Manen	2026-04-09 09:43:56 (5 months ago)	Apr 9 11:43:48 odin sshd[8023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Apr 9 11:43:48 odin sshd[8023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 Apr 9 11:43:50 odin sshd[8023]: Failed password for invalid user wedwinkels from 20.76.245.76 port 57994 ssh2 Apr 9 11:43:55 odin sshd[8026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 show less	Brute-Force SSH
🇳🇱 Godert Jan van Manen	2026-04-08 18:49:35 (5 months ago)	Apr 8 20:49:12 odin sshd[6858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Apr 8 20:49:12 odin sshd[6858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 Apr 8 20:49:14 odin sshd[6858]: Failed password for invalid user judy from 20.76.245.76 port 34572 ssh2 Apr 8 20:49:33 odin sshd[6877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.76.245.76 show less	Brute-Force SSH

Showing 1 to 15 of 906 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.170

🇭🇰 42.200.158.230

🇮🇩 202.148.31.43

🇧🇪 198.235.24.227

🇺🇸 143.42.164.97

🇳🇱 104.23.166.90

🇧🇩 103.113.153.50

🇸🇬 101.32.240.31

🇷🇺 77.244.64.60

🇻🇪 38.25.226.114

🇧🇪 35.187.36.114

🇳🇱 2400:cb00:996:1000:f0c8:cca4:fa25:481b

🇸🇾 205.209.65.19

🇫🇷 195.154.107.115

🇺🇸 185.102.113.90

🇵🇪 161.132.54.218

🇳🇱 104.23.166.91

🇳🇬 102.140.97.134

🇪🇸 95.127.194.146

🇰🇿 87.255.214.150