JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.127.245.162

20.127.245.162 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 49%: ?

49%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.127.245.162

Whois 20.127.245.162

IP Abuse Reports for 20.127.245.162:

This IP address has been reported a total of 22 times from 16 distinct sources. 20.127.245.162 was first reported on April 10th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 theanalogmaker	2026-06-04 06:00:39 (7 hours ago)	CrowdSec: Symphony auto-ban: /actuator/env (99.9% confidence) (720h ban)	Brute-Force Web App Attack
Anonymous	2026-06-03 05:28:07 (1 day ago)	20.127.245.162 - - [03/Jun/2026:01:28:06 -0400] "GET /phpinfo.php HTTP/1.1" 404 454 "-" "Mozilla/5.0 ... show more 20.127.245.162 - - [03/Jun/2026:01:28:06 -0400] "GET /phpinfo.php HTTP/1.1" 404 454 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force Web App Attack SSH
Anonymous	2026-06-03 05:02:08 (1 day ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 theanalogmaker	2026-06-03 04:59:07 (1 day ago)	CrowdSec: crowdsecurity/http-sensitive-files (24h ban)	Brute-Force Web App Attack
🇺🇸 RAP	2026-06-03 04:39:46 (1 day ago)	2026-06-03 04:39:46 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-03 04:23:56 (1 day ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇯🇵 demonsword	2026-05-02 16:15:52 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: graph.vshield.pro:443 show less	Open Proxy Port Scan
🇩🇪 2048	2026-05-01 17:52:41 (1 month ago)	2026-05-01T19:52:38.602217+02:00 machodeer kernel: [365873.608385] [UFW BLOCK] IN=ens3 OUT= MAC=REDA ... show more 2026-05-01T19:52:38.602217+02:00 machodeer kernel: [365873.608385] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.127.245.162 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59545 DF PROTO=TCP SPT=17344 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-01T19:52:39.665699+02:00 machodeer kernel: [365874.672511] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.127.245.162 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59546 DF PROTO=TCP SPT=17344 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-01T19:52:40.689969+02:00 machodeer kernel: [365875.696750] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.127.245.162 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59547 DF PROTO=TCP SPT=17344 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 Rayulcifer	2026-04-18 05:10:41 (1 month ago)	20.127.245.162 - - [18/Apr/2026:00:10:38 -0500] "GET https://cloud.xiliancloud.cn HTTP/1.1" 200 8576 ... show more 20.127.245.162 - - [18/Apr/2026:00:10:38 -0500] "GET https://cloud.xiliancloud.cn HTTP/1.1" 200 85769 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 OPR/104.0.0.0" 20.127.245.162 - - [18/Apr/2026:00:10:40 -0500] "GET https://cloud.xiliancloud.cn HTTP/1.1" 200 85768 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 OPR/104.0.0.0" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇳🇱 homeshowdomain.nl	2026-04-11 21:59:20 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-10. show less	Web App Attack SSH Hacking
🇳🇱 oisecnet	2026-04-10 21:02:50 (1 month ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-04-10. 647 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-04-10. 647 requests from this IP. show less	Brute-Force Web App Attack SSH
🇫🇷 IRISIO	2026-04-10 09:05:54 (1 month ago)	scans/SQL injection/spam posts : 5 queries	Web App Attack SQL Injection
🇫🇷 masterguru	2026-04-10 07:24:01 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 Charlesiv	2026-04-10 06:01:32 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: /.git/config Timestamp: 2026-04-10T04:23:35Z Ray ID: 9e9efa21f9dee5ed UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 clamehost.it	2026-04-10 04:28:53 (1 month ago)	Automatic report - Brute Force attack using this IP address	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 192.99.169.210

🇺🇸 172.67.170.187

🇵🇰 160.191.208.64

🇬🇧 151.241.190.72

🇵🇰 119.156.31.177

🇻🇳 116.110.158.220

🇲🇦 102.53.15.18

🇧🇬 79.124.62.122

🇵🇭 61.28.144.154

🇨🇳 58.220.10.131

🇲🇽 46.250.169.106

🇨🇿 46.28.105.114

🇳🇱 45.148.10.151

🇺🇸 71.6.232.24

🇺🇸 65.49.1.49

🇸🇬 47.84.133.68

🇭🇰 47.83.124.31

🇩🇪 43.165.7.74

🇫🇷 38.242.232.20

🇺🇸 35.222.63.71