JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.127.214.214

20.127.214.214 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 52%: ?

52%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.127.214.214

Whois 20.127.214.214

IP Abuse Reports for 20.127.214.214:

This IP address has been reported a total of 15 times from 15 distinct sources. 20.127.214.214 was first reported on June 2nd 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-02 21:45:32 (3 weeks ago)	20.127.214.214 - - [02/Jun/2026:23:45:31 +0200] "GET /.env HTTP/1.1" 402 829 "-" "Mozilla/5.0 (Windo ... show more 20.127.214.214 - - [02/Jun/2026:23:45:31 +0200] "GET /.env HTTP/1.1" 402 829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Web App Attack
🇩🇪 KPS	2026-06-02 21:37:42 (3 weeks ago)	PortscanM	Port Scan
🇧🇷 SOC Blue Team	2026-06-02 21:26:08 (3 weeks ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇩🇪 bescared	2026-06-02 21:24:27 (3 weeks ago)	F2B - Malicious activity detected. Excessive port scans. -c23856ef-	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-02 21:23:25 (3 weeks ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [1], 2083 [1], 2086 [1], 20 ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [1], 2083 [1], 2086 [1], 2082 [1] TCP Reported by: Justin F. show less	Port Scan
🇺🇸 MPL	2026-06-02 19:58:26 (3 weeks ago)	tcp port scan (8 or more attempts)	Port Scan
🇺🇸 eber965	2026-06-02 19:20:19 (3 weeks ago)	[Tue Jun 02 15:20:11 2026] [authz_core:error] [pid 290144:tid 140065485334272] [client 20.127.214.21 ... show more [Tue Jun 02 15:20:11 2026] [authz_core:error] [pid 290144:tid 140065485334272] [client 20.127.214.214:5708] AH01630: client denied by server configuration: /var/www/html/.git [Tue Jun 02 15:20:13 2026] [authz_core:error] [pid 178411:tid 140065502119680] [client 20.127.214.214:5723] AH01630: client denied by server configuration: /var/www/html/.env [Tue Jun 02 15:20:14 2026] [authz_core:error] [pid 178251:tid 140065897010944] [client 20.127.214.214:5718] AH01630: client denied by server configuration: /var/www/html/.env.local [Tue Jun 02 15:20:15 2026] [authz_core:error] [pid 178251:tid 140065359509248] [client 20.127.214.214:5700] AH01630: client denied by server configuration: /var/www/html/.env.production [Tue Jun 02 15:20:18 2026] [authz_core:error] [pid 290144:tid 140065518905088] [client 20.127.214.214:5735] AH01630: client denied by server configuration: /var/www/html/.env.save ... show less	Brute-Force
🇺🇸 kosada.com	2026-06-02 19:04:00 (3 weeks ago)	Web vulnerability probing: /.env.production (bogus vhost/SNI)	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-06-02 17:53:48 (3 weeks ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇷🇺 punctualsuspension968	2026-06-02 17:38:29 (3 weeks ago)	blocked by ufw on TCP 2083	Port Scan
🇩🇪 kivitendo.de	2026-06-02 17:34:24 (3 weeks ago)	{"reqId":"ofKcvhEDjyhyvbV5vVJR","level":1,"time":"2026-06-02T17:33:56+00:00","remoteAddr":"20.127.21 ... show more {"reqId":"ofKcvhEDjyhyvbV5vVJR","level":1,"time":"2026-06-02T17:33:56+00:00","remoteAddr":"20.127.214.214","user":"--","app":"core","method":"GET","url":"/.env.local","scriptName":"/index.php","message":"Trusted domain error. \"20.127.214.214\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"aok6d7MT4cKx5biQlC0n","level":1,"time":"2026-06-02T17:33:58+00:00","remoteAddr":"20.127.214.214","user":"--","app":"core","method":"GET","url":"/.env.production","scriptName":"/index.php","message":"Trusted domain error. \"20.127.214.214\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"3D3MP9eUMkaRd4c0amTq","level":1,"time":"2026-06-02T17:34:02+00:00","remoteAddr":"20.12 ... show less	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-02 17:16:32 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-02 17:04:04 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇨🇭 GAS	2026-06-02 16:48:16 (3 weeks ago)	Bad Bot. 20.127.214.214 - - [02/Jun/2026:18:48:15 +0200] "GET /.env.save HTTP/1.1" 402 2731 "-" "Moz ... show more Bad Bot. 20.127.214.214 - - [02/Jun/2026:18:48:15 +0200] "GET /.env.save HTTP/1.1" 402 2731 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "REDACTED" "" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.202

🇩🇪 213.209.159.225

🇮🇩 158.140.171.33

🇩🇪 154.194.116.183

🇭🇰 123.58.215.102

🇫🇷 91.196.152.185

🇺🇸 47.251.249.232

🇧🇷 45.140.193.156

🇺🇸 40.124.120.41

🇬🇧 35.203.211.7

🇮🇳 2401:4900:7758:1b6:d850:dc00:b5c8:dde1

🇩🇪 194.187.176.3

🇬🇧 193.163.125.254

🇺🇸 162.216.150.191

🇺🇸 54.71.221.189

🇷🇺 46.8.246.27

🇧🇷 45.164.251.106

🇳🇱 45.93.170.154

🇬🇧 193.163.125.152

🇦🇪 165.154.12.108