JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.118.245.161

20.118.245.161 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.118.245.161

Whois 20.118.245.161

IP Abuse Reports for 20.118.245.161:

This IP address has been reported a total of 33 times from 30 distinct sources. 20.118.245.161 was first reported on April 12th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-06-04 08:08:17 (5 hours ago)	Connection to port 443 with data transfer. Data preview: �	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (14 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 gu-alvareza	2026-06-03 07:05:24 (1 day ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
Anonymous	2026-06-03 03:52:58 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2026-06-03 03:38:18 (1 day ago)	Portscan: TCP/2086, TCP/8080, TCP/8443, TCP/2087, TCP/2082, TCP/2083	Port Scan
🇩🇪 EGP Abuse Dept	2026-06-03 03:04:47 (1 day ago)	Scanning for web/db/file exploits on tpc-036.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-03 02:58:04 (1 day ago)	2026-06-03 02:58:04 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 mashamal	2026-06-03 02:37:41 (1 day ago)	Vulnerability Probe ...	Web App Attack
🇳🇱 vaddilyin	2026-06-03 02:04:10 (1 day ago)	{"ClientAddr":"20.118.245.161:46271","ClientHost":"20.118.245.161","ClientPort":"46271","ClientUsern ... show more {"ClientAddr":"20.118.245.161:46271","ClientHost":"20.118.245.161","ClientPort":"46271","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":42335,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":42335,"RequestAddr":"148.253.213.233","RequestContentSize":0,"RequestCount":38173,"RequestHost":"148.253.213.233","RequestMethod":"GET","RequestPath":"/.git/HEAD","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-03T02:04:05.421588749Z","StartUTC":"2026-06-03T02:04:05.421588749Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-03T02:04:05Z"} {"ClientAddr":"20.118.245.161:45431","ClientHost":"20.118.245.161","ClientPort":"45431","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":29982,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead": ... show less	Web App Attack
🇺🇸 oralunal	2026-06-03 01:32:12 (1 day ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇫🇮 TrafficAnalyser	2026-06-03 01:29:29 (1 day ago)	Port scanning	Port Scan
🇺🇸 Gabriel Camargo	2026-06-03 01:23:21 (1 day ago)	20.118.245.161 - - [02/Jun/2026:20:23:18 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ... show more 20.118.245.161 - - [02/Jun/2026:20:23:18 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.118.245.161 - - [02/Jun/2026:20:23:20 -0500] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.118.245.161 - - [02/Jun/2026:20:23:21 -0500] "GET /.env.local HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇷🇸 Scan	2026-06-03 00:24:05 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-03 00:22:55 (1 day ago)	Bot detected scanning for vulnerable pages	Port Scan
🇩🇪 Nightreaver	2026-06-03 00:11:43 (1 day ago)	20.118.245.161 - - [03/Jun/2026:02:11:37 0200] "GET / HTTP/1.0" 400 625 "-" "-" 20.118.245.161 - - ... show more 20.118.245.161 - - [03/Jun/2026:02:11:37 0200] "GET / HTTP/1.0" 400 625 "-" "-" 20.118.245.161 - - [03/Jun/2026:02:11:38 0200] "GET / HTTP/1.0" 400 625 "-" "-" 20.118.245.161 - - [03/Jun/2026:02:11:39 0200] "GET / HTTP/1.0" 400 625 "-" "-" 20.118.245.161 - - [03/Jun/2026:02:11:41 0200] "GET / HTTP/1.0" 400 625 "-" "-" 20.118.245.161 - - [03/Jun/2026:02:11:43 0200] "GET / HTTP/1.0" 400 625 "-" "-"[...] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.142.54.5

🇨🇳 222.94.32.158

🇩🇪 213.209.159.241

🇷🇺 185.195.146.240

🇻🇳 171.231.188.52

🇩🇪 155.117.39.149

🇷🇺 91.79.191.40

🇺🇸 64.150.165.48

🇰🇷 59.25.31.152

🇸🇬 43.159.50.69

🇲🇾 195.86.192.66

🇺🇦 194.44.140.36

🇧🇷 191.239.240.133

🇫🇷 176.191.118.58

🇳🇱 176.65.148.197

🇺🇸 162.216.150.183

🇺🇸 72.240.125.133

🇺🇸 64.62.156.138

🇹🇿 41.59.64.80

🇺🇸 34.75.184.73