AbuseIPDB » 20.104.227.41

20.104.227.41
Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
22 reports found in our database
0% Low Risk
Abuse confidence score ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
Domain Name
microsoft.com
Country
๐Ÿ‡จ๐Ÿ‡ฆ Canada
City
Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.104.227.41 has been reported 22 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.104.227.41:

This IP address has been reported a total of 22 times from 19 distinct sources. 20.104.227.41 was first reported on , and the most recent report was .

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ง๐Ÿ‡ท SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
๐Ÿ‡น๐Ÿ‡ท Threat.live
Suspicious Connection Attempts
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท zulzeen
[incypit-web] Blocked by SysWarden Firewall (Database/Cache Attack)
Port Scan Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-04-27 21:33:48 UTC Unauthorized activity to TCP port 9200.
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡ท๐Ÿ‡บ www.winos.me
Shield: Layer4 Port 9 Trap
Port Scan Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ ParaBug
20.104.227.41 - - [27/Apr/2026:20:42:38 +0200] "-" 408 3662 "-" "-" ...
Phishing Brute-Force Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-04-27 17:34:32 UTC Unauthorized activity to TCP port 9200.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช EinfxchFinn
Unauthorized connection attempt to port 9200 from 20.104.227.41
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช genokrad
Unauthorized connection attempt on TCP/9200 (Elasticsearch)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Rayulcifer
Open Proxy Port Scan Hacking Web App Attack SSH
๐Ÿ‡ซ๐Ÿ‡ท EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack Port 9200)
Brute-Force Hacking Port Scan
Anonymous
SSH Brute-Force
DDoS Attack Port Scan Hacking Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-04-27 10:54:09 UTC Unauthorized activity to TCP port 9200.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan

Showing 1 to 15 of 22 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 188.166.29.60
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.164
๐Ÿ‡จ๐Ÿ‡ณ 124.152.90.68
๐Ÿ‡จ๐Ÿ‡ณ 120.48.28.60
๐Ÿ‡จ๐Ÿ‡ณ 110.166.67.189
๐Ÿ‡ณ๐Ÿ‡ฑ 64.34.87.145
๐Ÿ‡ด๐Ÿ‡ฒ 37.41.129.193
๐Ÿ‡บ๐Ÿ‡ฆ 193.107.171.198
๐Ÿ‡บ๐Ÿ‡ธ 98.234.123.203
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.226
๐Ÿ‡บ๐Ÿ‡ธ 47.251.82.39
๐Ÿ‡บ๐Ÿ‡ธ 38.70.78.3
๐Ÿ‡ฎ๐Ÿ‡ฉ 36.64.68.99
๐Ÿ‡ซ๐Ÿ‡ท 2a02:c207:2277:1616::1
๐Ÿ‡ง๐Ÿ‡ท 201.71.192.108
๐Ÿ‡ฒ๐Ÿ‡ฉ 178.175.167.68
๐Ÿ‡ธ๐Ÿ‡ฌ 152.32.220.188
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.70
๐Ÿ‡บ๐Ÿ‡ธ 74.135.115.141
๐Ÿ‡บ๐Ÿ‡ธ 66.132.195.32