20.125.48.165
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Moses Lake, Washington
No reports in the last 60 days
20.125.48.165 has been reported 16 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
16 from
15 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇿 CZ-LH01 |
Port scan detected by OPNsense firewall. 10 distinct destination ports probed in 24h, 10 blocked packets. Ports: 80, 443, 2082, 2083, 2086, 2087, 2095, 2096, 8080, 8443. Detected by automated firewall log analysis.
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (6 ports, 6 attempts in 24h)
|
Port Scan | |
| 🇩🇪 ValtonTahiri |
|
Port Scan | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port scan
|
Port Scan | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [8443/tcp] | SPT: 37958 | TTL: 103 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 ruddy104 |
20.125.48.165 - - [09/Sep/2026:22:49:31 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
|
Brute-Force Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.git/config | seen at 2026-09-09 20:38:07.981 |
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 RAP |
2026-09-09 20:09:40 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇮🇹 VHosting |
Detected mail brute force attack from 4 different servers
|
Brute-Force | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=54274 dstport=2078
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 2078.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown