JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.125.144.180

20.125.144.180 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 84%: ?

84%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.125.144.180

Whois 20.125.144.180

IP Abuse Reports for 20.125.144.180:

This IP address has been reported a total of 18 times from 15 distinct sources. 20.125.144.180 was first reported on July 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-30 14:14:38 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'user1':b'123@1' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'user1' : '123@1' show less	DDoS Attack
🇩🇪 NxtGenIT	2026-07-30 12:53:09 (1 day ago)	Heralding Honeypot hit, Protocol: socks5, username: proxyuser, password: 1234@12345	Hacking
🇺🇸 NetGuard	2026-07-28 17:07:39 (3 days ago)	#honeypot #netguard247 #heralding #credentialharvesting Captured by NetGuard 24/7 T-Pot honeypot (ne ... show more #honeypot #netguard247 #heralding #credentialharvesting Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-07-28T17:07:39.864+00:00 Attacker IP: 20.125.144.180 \| Port: 1080 \| Country: United States Honeypot: heralding \| Attack: credential_harvesting Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force
🇨🇦 Luhte	2026-07-28 14:23:40 (3 days ago)	Unsolicited TCP connection from 20.125.144.180 to port 0 at 2026-07-28T14:23:39Z. Source IP complete ... show more Unsolicited TCP connection from 20.125.144.180 to port 0 at 2026-07-28T14:23:39Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 anycast_ac	2026-07-28 11:13:46 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'giorgia':None Family fingerprint: proxy-scanner Commands captured: $ socks4 CONNECT -> 104.26.12.205:443 $ user_id: 'giorgia' show less	DDoS Attack
🇺🇸 kosada.com	2026-07-27 19:06:57 (4 days ago)	SSH vulnerability probing: banner exchange: Connection from 20.125.144.180 port 53456: invalid forma ... show more SSH vulnerability probing: banner exchange: Connection from 20.125.144.180 port 53456: invalid format [preauth] show less	Port Scan SSH
🇩🇪 HoneyPot-FrPri	2026-07-27 17:28:30 (4 days ago)	2026-07-27T19:28:27.642234+02:00 [redacted] sshd[1032641]: pam_unix(sshd:auth): authentication failu ... show more 2026-07-27T19:28:27.642234+02:00 [redacted] sshd[1032641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.125.144.180 2026-07-27T19:28:29.581773+02:00 [redacted] ... show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 17:21:06 (4 days ago)	This IP address carried out 168 port scanning attempts on 26-07-2026. For more information or to rep ... show more This IP address carried out 168 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇸🇬 drewf.ink	2026-07-27 15:49:12 (4 days ago)	[15:49] Attempted SSH login with credentials ubuntu:P@***********56	Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-07-27 14:53:38 (4 days ago)	SSH credential attempt.	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 13:12:10 (4 days ago)	This IP address carried out 42 SSH credential attack (attempts) on 26-07-2026. For more information ... show more This IP address carried out 42 SSH credential attack (attempts) on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇬🇧 Heathrxw	2026-07-26 22:46:22 (5 days ago)	Jul 26 23:46:19 s1-jellyfish sshd[334880]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Jul 26 23:46:19 s1-jellyfish sshd[334880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.125.144.180 Jul 26 23:46:22 s1-jellyfish sshd[334880]: Failed password for invalid user ubuntu from 20.125.144.180 port 48670 ssh2 ... show less	Brute-Force SSH
🇦🇺 LiftUp Hosting	2026-07-26 21:27:57 (5 days ago)	Honeypot hit: SSH handshake/banner (532 bytes of payload); 9229 [1] TCP	SSH
🇩🇪 VentryShield	2026-07-26 20:41:35 (5 days ago)	p0t honeypot: unknown connection on port 7070/tcp, 532 bytes received from client	Port Scan
🇩🇪 NetWatch	2026-07-26 10:12:56 (5 days ago)	The IP 20.125.144.180 tried multiple SSH_BRUTE_FORCE logins	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.225.205.242

🇧🇷 152.32.200.213

🇮🇳 103.91.246.101

🇳🇱 91.92.40.237

🇹🇷 78.135.82.224

🇺🇸 66.132.172.142

🇵🇱 45.138.16.114

🇬🇧 35.203.210.35

🇭🇰 31.77.203.33

🇺🇸 20.29.57.104

🇨🇳 8.163.84.40

🇧🇷 2804:1c80:151b:c900:44a6:9f5c:9a28:7915

🇨🇳 218.87.194.83

🇺🇸 205.210.31.38

🇨🇳 203.195.82.4

🇩🇪 194.88.98.94

🇨🇳 183.184.52.182

🇨🇳 180.167.128.202

🇺🇸 172.214.44.210

🇺🇸 166.62.102.109