← Back to Dashboard

168.76.20.229 Threat Intelligence Report

Risk Level: CRITICAL — 239 abuse reports from 5 sources

Threat Intelligence Summary

IP address 168.76.20.229 has been flagged in 239 abuse reports across 5 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with malware c2, professional threat, rdp bruteforce, severe abuse, suspicious activity, web attack.

This IP is geolocated in South Africa and belongs to the network ASLINE LIMITED (AS137951). Reports span from 2024-04-08 to 2026-03-20.

Assessment: With 239 abuse reports, 168.76.20.229 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. This IP appears on expert-curated threat lists, indicating it belongs to a network controlled by professional threat actors.

Data aggregated from 5 independent threat intelligence sources.

Geolocation

Country South Africa
ISP/ASN ASLINE LIMITED
Timezone Africa/Johannesburg

Threat Status

Overall Status Critical
Threat Score 100.0%
Report Count 239
Sources 5
First Seen 2024-04-08
Last Seen 2026-03-20
AI Analysis

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

South Africa Threat Intelligence → AS137951 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: