20.79.152.89

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
64 reports
56 reporters · latest 6 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.79.152.89 has been reported 64 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
64 from 56 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇧🇷 helix
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
Brute-Force SSH
🇩🇪 sh97
Auto-Install-Ubuntu-Server-24: SSH Brute Force from 20.79.152.89 at 2026-04-10 20:59:19 IST
Brute-Force SSH
🇮🇱 spd.co.il
Unauthorized access attempts on ports: 22
Brute-Force SSH
🇫🇷 Franck MEYER
SSH login attempts with user root.
Brute-Force SSH
Anonymous
sshd
Brute-Force SSH
🇺🇸 cbz
Brute-Force SSH
🇵🇱 Wepted
Brute-Force SSH
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇬🇧 Deveroonie
2026-04-06T00:26:01.535419+00:00 instance-20241019-1127 sshd[2093876]: Connection closed by authenticating user root 20.79.152.89 port 50642 [preauth] ...
Hacking Brute-Force SSH
Anonymous
Automatic Reporting - Brute Force Attempts
Brute-Force SSH Web App Attack
🇰🇷 Woodie
Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.79.152.89
SSH
Anonymous
Port Scanner
Port Scan
🇷🇺 sdore
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 85.203.15.9
🇨🇳 175.161.222.216
🇨🇳 123.129.25.230
🇲🇾 120.141.26.142
🇳🇱 109.160.32.118
🇺🇸 68.183.106.7
🇳🇱 64.205.72.42
🇧🇪 34.38.88.176
🇺🇸 208.102.149.137
🇻🇳 203.119.64.27
🇮🇳 182.73.109.194
🇨🇳 112.46.213.197
🇳🇱 109.160.32.136
🇧🇬 78.128.112.74
🇵🇱 46.149.210.91
🇳🇱 45.148.10.157
🇴🇲 5.36.69.76
🇲🇽 189.131.60.201
🇧🇷 154.80.128.177
🇸🇬 152.42.242.30
feedback