20.118.235.128

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
171 reports
89 reporters ยท latest 4 hours ago
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.118.235.128

This IP address has been reported a total of 171 times from 89 distinct sources. 20.118.235.128 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 56 reports; Germany with 23 reports; France with 20 reports. The most common categories in these recent reports were: Port Scan 143 times; Hacking 37 times; Brute-Force 23 times; Web App Attack 18 times; Bad Web Bot 7 times; Other 24 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 88/tcp
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ anycast_ac
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-10-20T12:36Z).
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-20 12:32:09 UTC Unauthorized activity to TCP port 22. SSH
SSH
Anonymous
malicious scanning tool activity
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ VMHeaven.io
Blocked by UFW [5432/tcp] Source port: 43846 TTL: 38 Packet length: 52
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ azminawwar
Port Scan Hacking
Anonymous
8181/tcp (1 or more attempts)
Port Scan
Anonymous
Port Scan Brute-Force
๐Ÿ‡ท๐Ÿ‡ด abuse_IP_reporter
Oct 20 10:44:32 server UFW BLOCK SRC=20.118.235.128 PROTO=TCP SPT=40425 DPT=8118
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=44131 dstport=4444
Port Scan Brute-Force Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ Andreas76
Port scan: connection attempt to an unused trap port. Reported by bantower.
Port Scan

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ต๐Ÿ‡ญ 165.154.59.118
๐Ÿ‡ต๐Ÿ‡น 50.7.43.34
๐Ÿ‡บ๐Ÿ‡ธ 45.132.227.137
๐Ÿ‡บ๐Ÿ‡ธ 3.142.123.76
๐Ÿ‡บ๐Ÿ‡ธ 216.180.246.196
๐Ÿ‡ต๐Ÿ‡ฐ 203.128.6.159
๐Ÿ‡ฎ๐Ÿ‡ฉ 182.253.156.184
๐Ÿ‡บ๐Ÿ‡ฆ 176.124.134.243
๐Ÿ‡บ๐Ÿ‡ธ 173.254.221.133
๐Ÿ‡ธ๐Ÿ‡ฌ 162.158.106.193
๐Ÿ‡ฉ๐Ÿ‡ช 130.12.180.163
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.64
๐Ÿ‡ณ๐Ÿ‡ฑ 81.19.216.75
๐Ÿ‡บ๐Ÿ‡ธ 72.90.143.182
๐Ÿ‡ณ๐Ÿ‡ฑ 45.74.59.2
๐Ÿ‡บ๐Ÿ‡ธ 34.74.69.205
๐Ÿ‡ฐ๐Ÿ‡ท 211.184.47.202
๐Ÿ‡บ๐Ÿ‡ธ 209.151.145.35
๐Ÿ‡ฎ๐Ÿ‡ฉ 203.83.39.34
๐Ÿ‡บ๐Ÿ‡ธ 142.147.148.224