JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.80.75.235

20.80.75.235 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.80.75.235

Whois 20.80.75.235

IP Abuse Reports for 20.80.75.235:

This IP address has been reported a total of 28 times from 23 distinct sources. 20.80.75.235 was first reported on July 22nd 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-28 00:04:36 (6 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'autumn':None Family fingerprint: proxy-scanner Commands captured: $ socks4a CONNECT -> api.ipify.org:443 $ user_id: 'autumn' show less	DDoS Attack
Anonymous	2026-07-27 17:50:17 (12 hours ago)	SSH brute force attempt. User: ubuntu, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 17:33:44 (12 hours ago)	20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 s ... show more 20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:23:58 14278 sshd[9125]: Failed password for invalid user ubuntu from 180.189.168.37 port 17835 ssh2 Jul 27 12:33:36 14278 sshd[14050]: Invalid user ubuntu from 20.80.75.235 port 54154 Jul 27 12:28:45 14278 sshd[11587]: Invalid user ubuntu from 5.133.100.70 port 49630 Jul 27 12:28:47 14278 sshd[11587]: Failed password for invalid user ubuntu from 5.133.100.70 port 49630 ssh2 Jul 27 12:23:55 14278 sshd[9125]: Invalid user ubuntu from 180.189.168.37 port 17835 IP Addresses Blocked: 180.189.168.37 (JP/Japan/-) show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 17:27:35 (13 hours ago)	Invalid user ubuntu from 20.80.75.235 port 57566	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 17:21:04 (13 hours ago)	This IP address carried out 168 port scanning attempts on 26-07-2026. For more information or to rep ... show more This IP address carried out 168 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇧🇷 wagnerbocchi	2026-07-27 16:17:36 (14 hours ago)	2026-07-27T13:17:32.652613-03:00 wazuh sshd[890751]: Invalid user ubuntu from 20.80.75.235 port 3431 ... show more 2026-07-27T13:17:32.652613-03:00 wazuh sshd[890751]: Invalid user ubuntu from 20.80.75.235 port 34310 2026-07-27T13:17:32.664136-03:00 wazuh sshd[890751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.80.75.235 2026-07-27T13:17:34.799725-03:00 wazuh sshd[890751]: Failed password for invalid user ubuntu from 20.80.75.235 port 34310 ssh2 ... show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 15:32:17 (14 hours ago)	Invalid user ubuntu from 20.80.75.235 port 43722	Brute-Force SSH
🇷🇺 lns.bz	2026-07-27 15:23:18 (15 hours ago)	SSH bruteforce [RU.VDS]	SSH
🇺🇸 slish	2026-07-27 14:27:54 (16 hours ago)	SSH honeypot: ssh_auth	Brute-Force SSH
🇺🇦 oh.mg	2026-07-27 13:40:57 (16 hours ago)	(sshd) Failed SSH login from 20.80.75.235 (US/United States/-): 1 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 20.80.75.235 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-07-27T13:40:55.492767+00:00 francesko sshd[3263122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.80.75.235 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 13:27:38 (17 hours ago)	20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 07:47:16 15106 sshd[5401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.218.23.60 user=root Jul 27 07:47:17 15106 sshd[5401]: Failed password for root from 196.218.23.60 port 52252 ssh2 Jul 27 08:27:20 15106 sshd[25504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.80.75.235 user=root Jul 27 08:17:18 15106 sshd[20493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.2.73.10 user=root Jul 27 08:17:20 15106 sshd[20493]: Failed password for root from 61.2.73.10 port 53127 ssh2 IP Addresses Blocked: 196.218.23.60 (EG/Egypt/-) show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 13:12:08 (17 hours ago)	This IP address carried out 42 SSH credential attack (attempts) on 26-07-2026. For more information ... show more This IP address carried out 42 SSH credential attack (attempts) on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-27 13:09:44 (17 hours ago)	[13:09] Attempted SSH login with credentials root:a******1	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:37:52 (18 hours ago)	20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 20.80.75.235 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:37:44 15365 sshd[6226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.80.75.235 user=root Jul 27 06:33:22 15365 sshd[4060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.14.109 user=root Jul 27 06:33:25 15365 sshd[4060]: Failed password for root from 36.92.14.109 port 58069 ssh2 Jul 27 06:24:20 15365 sshd[31988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.38.212 user=root Jul 27 06:24:22 15365 sshd[31988]: Failed password for root from 103.99.38.212 port 60084 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 senkodev	2026-07-27 11:27:16 (19 hours ago)	2026-07-27T13:27:13.801964+02:00 vm1386.de.snk.wtf sshd[331105]: Failed password for root from 20.80 ... show more 2026-07-27T13:27:13.801964+02:00 vm1386.de.snk.wtf sshd[331105]: Failed password for root from 20.80.75.235 port 56598 ssh2 2026-07-27T13:27:15.293917+02:00 vm1386.de.snk.wtf sshd[331105]: Connection closed by authenticating user root 20.80.75.235 port 56598 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.43.93.6

🇩🇪 178.171.73.77

🇵🇱 176.53.159.197

🇺🇸 144.225.187.161

🇿🇼 143.105.233.188

🇧🇯 137.255.13.247

🇨🇳 110.179.81.62

🇸🇬 103.189.235.176

🇸🇬 103.189.235.114

🇸🇬 103.189.234.96

🇻🇳 103.1.210.25

🇰🇿 91.229.148.3

🇳🇱 91.92.47.53

🇺🇸 74.235.140.14

🇬🇧 35.203.210.223

🇺🇸 18.221.179.104

🇩🇪 217.154.253.108

🇳🇱 217.60.195.59

🇸🇬 203.116.129.55

🇧🇴 181.188.176.242