AbuseIPDB » 20.79.166.214

20.79.166.214 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 60%: ?

60%
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡ฉ๐Ÿ‡ช Germany
City Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 20.79.166.214:

This IP address has been reported a total of 98 times from 30 distinct sources. 20.79.166.214 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ง๐Ÿ‡ท gabzin
[06:53:44] TCP Connection from 20.79.166.214:58130 to *****:3389.
Port Scan
๐Ÿ‡ง๐Ÿ‡ท gabzin
[20:02:49] TCP Connection from 20.79.166.214:49464 to *****:3389.
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: RDP (113 total hits)
Brute-Force
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: RDP (99 total hits)
Brute-Force
๐Ÿ‡ง๐Ÿ‡ท gabzin
[20:03:51] TCP Connection from 20.79.166.214:59086 to *****:3389.
Port Scan
๐Ÿ‡ง๐Ÿ‡ท gabzin
[19:29:50] TCP Connection from 20.79.166.214:52637 to *****:3389.
Port Scan
๐Ÿ‡จ๐Ÿ‡ฆ bazter.pro
RDP Brute Force: 3 attempts detected by custom Fail2Ban script.
Brute-Force
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: RDP (82 total hits)
Brute-Force
๐Ÿ‡ง๐Ÿ‡ท gabzin
[19:08:13] TCP Connection from 20.79.166.214:56640 to *****:3389.
Port Scan
๐Ÿ‡ง๐Ÿ‡ท gabzin
[17:36:45] TCP Connection from 20.79.166.214:53925 to *****:3389.
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น CTK
Customer Site (WELS SM)
Brute-Force
๐Ÿ‡จ๐Ÿ‡ฆ Luhte
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/windows-bf-slow-high.
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช _ArminS_
SP-Scan 65135:3389 detected 2026.07.22 12:33:25 blocked until 2026.09.10 05:36:12
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ knock
Knock-Knock honeypot brute-force: RDP (252 total hits)
Brute-Force

Showing 1 to 15 of 98 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฎ๐Ÿ‡ฉ 182.8.227.155
๐Ÿ‡บ๐Ÿ‡ธ 172.253.214.112
๐Ÿ‡บ๐Ÿ‡ธ 162.217.100.36
๐Ÿ‡น๐Ÿ‡ท 94.154.43.188
๐Ÿ‡ฆ๐Ÿ‡ช 92.97.45.172
๐Ÿ‡บ๐Ÿ‡ธ 43.173.75.131
๐Ÿ‡ฎ๐Ÿ‡น 34.154.55.226
๐Ÿ‡น๐Ÿ‡ผ 34.81.169.130
๐Ÿ‡ฎ๐Ÿ‡ณ 27.59.25.225
๐Ÿ‡บ๐Ÿ‡ธ 24.18.132.135
๐Ÿ‡ฐ๐Ÿ‡ช 196.207.154.180
๐Ÿ‡ท๐Ÿ‡ด 193.46.255.86
๐Ÿ‡ง๐Ÿ‡ท 191.6.50.179
๐Ÿ‡ง๐Ÿ‡ท 187.36.218.156
๐Ÿ‡ง๐Ÿ‡พ 178.120.52.124
๐Ÿ‡บ๐Ÿ‡ธ 172.237.136.213
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.223
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.7
๐Ÿ‡จ๐Ÿ‡ณ 122.242.8.127