JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.127.218.138

20.127.218.138 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.127.218.138

Whois 20.127.218.138

IP Abuse Reports for 20.127.218.138:

This IP address has been reported a total of 45 times from 38 distinct sources. 20.127.218.138 was first reported on June 26th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 laotuo	2026-07-15 13:51:07 (4 hours ago)	Jul 15 15:51:05 h2930838 sshd[24374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 15 15:51:05 h2930838 sshd[24374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root Jul 15 15:51:07 h2930838 sshd[24374]: Failed password for invalid user root from 20.127.218.138 port 10724 ssh2 show less	Brute-Force SSH
🇩🇪 DocNetzwerk	2026-07-15 13:27:33 (4 hours ago)	20.127.218.138 (US/United States/-), 3 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-15 12:09:29 (6 hours ago)	Jul 14 19:55:54 hemera sshd[366109]: Failed password for root from 20.127.218.138 port 1297 ssh2 Jul ... show more Jul 14 19:55:54 hemera sshd[366109]: Failed password for root from 20.127.218.138 port 1297 ssh2 Jul 15 06:09:25 hemera sshd[378185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root Jul 15 06:09:27 hemera sshd[378185]: Failed password for root from 20.127.218.138 port 56758 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-15 10:48:37 (7 hours ago)	2026-07-15T13:48:35.517172+03:00 2426447-on24665.twc1.net sshd[3894535]: pam_unix(sshd:auth): authen ... show more 2026-07-15T13:48:35.517172+03:00 2426447-on24665.twc1.net sshd[3894535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root 2026-07-15T13:48:37.190317+03:00 2426447-on24665.twc1.net sshd[3894535]: Failed password for root from 20.127.218.138 port 54765 ssh2 ... show less	Brute-Force SSH
🇦🇹 ipi.at	2026-07-15 06:11:06 (12 hours ago)	2026-07-15T08:11:03.988852+02:00 ipi sshd[682172]: pam_unix(sshd:auth): authentication failure; logn ... show more 2026-07-15T08:11:03.988852+02:00 ipi sshd[682172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root 2026-07-15T08:11:05.965303+02:00 ipi sshd[682172]: Failed password for root from 20.127.218.138 port 20045 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-15 03:50:36 (14 hours ago)	Jul 14 21:50:31 web sshd[575698]: User root from 20.127.218.138 not allowed because none of user's g ... show more Jul 14 21:50:31 web sshd[575698]: User root from 20.127.218.138 not allowed because none of user's groups are listed in AllowGroups Jul 14 21:50:31 web sshd[575698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root Jul 14 21:50:35 web sshd[575698]: Failed password for invalid user root from 20.127.218.138 port 32260 ssh2 ... show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-07-15 02:18:25 (15 hours ago)	SSH credential attempt.	Brute-Force SSH
🇺🇸 anon333	2026-07-15 01:33:50 (16 hours ago)	Hacker syslog review 1784079230	Hacking
🇩🇪 senkodev	2026-07-15 01:25:15 (16 hours ago)	2026-07-15T03:25:13.271509+02:00 vm1386.de.snk.wtf sshd[101982]: Failed password for root from 20.12 ... show more 2026-07-15T03:25:13.271509+02:00 vm1386.de.snk.wtf sshd[101982]: Failed password for root from 20.127.218.138 port 39929 ssh2 2026-07-15T03:25:14.970968+02:00 vm1386.de.snk.wtf sshd[101982]: Connection closed by authenticating user root 20.127.218.138 port 39929 [preauth] ... show less	Brute-Force SSH
🇺🇸 HamSammich	2026-07-15 01:23:44 (16 hours ago)	Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-15T01:23Z). Usernames ... show more Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-15T01:23Z). Usernames tried: root. show less	Brute-Force SSH
🇫🇮 StopIt!	2026-07-14 23:40:51 (18 hours ago)	Jul 15 02:10:41 master sshd[3406143]: Failed password for root from 20.127.218.138 port 58306 ssh2	Brute-Force SSH
🇨🇦 Luhte	2026-07-14 21:17:29 (20 hours ago)	Unauthorised SSH/Telnet login attempt with user "root" at 2026-07-14T21:17:29Z	Brute-Force SSH
🇵🇱 ntxg	2026-07-14 20:10:58 (22 hours ago)	2026-07-14T22:10:55.767458+02:00 serverftp sshd[3029801]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-14T22:10:55.767458+02:00 serverftp sshd[3029801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root 2026-07-14T22:10:57.474391+02:00 serverftp sshd[3029801]: Failed password for root from 20.127.218.138 port 38876 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-14 17:17:45 (1 day ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇺🇦 oh.mg	2026-07-14 16:02:04 (1 day ago)	(sshd) Failed SSH login from 20.127.218.138 (US/United States/-): 1 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 20.127.218.138 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-07-14T16:02:02.569431+00:00 francesko sshd[2353983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.218.138 user=root show less	Brute-Force SSH

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 185.15.82.135

🇨🇴 181.54.165.138

🇺🇸 147.185.132.94

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇺🇸 209.85.215.179

🇸🇬 185.200.116.71

🇧🇩 103.163.97.211

🇳🇱 89.125.144.139

🇺🇸 81.30.98.92

🇳🇱 5.61.209.224

🇰🇷 211.48.60.35

🇧🇪 198.235.24.200

🇱🇹 45.227.254.170

🇰🇷 43.155.134.4

🇺🇸 15.204.115.223

🇺🇸 209.85.210.181

🇺🇸 192.34.62.126

🇲🇳 180.149.125.210

🇨🇦 161.115.230.113