20.127.247.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
32% Elevated
17 reports
17 reporters · latest 3 days ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇩🇪 Germany 2 🇺🇸 United States of America 2
Most common categories Web App Attack 6 Hacking 4 Port Scan 3 Brute-Force 2 Open Proxy 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇦 URAN Publishing Service
[08/Nov/2026:02:02:36 +0200] -- 20.127.247.148 Ban reason: User-Agent Python/
Bad Web Bot Web App Attack
🇺🇸 Rayulcifer
Open Proxy Port Scan Hacking Web App Attack SSH
🇩🇪 LRob
Wordlist path sweep | method: GET | path: /contact, /contact-us, /contactez-nous (+3 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
Port Scan Web App Attack
🇩🇪 Roper123
Web exploits
Web App Attack
🇫🇷 Vaction
20.127.247.148 - - [28/Sep/2026:23:08:19 +0200] "GET /health/liveliness HTTP/1.1" 404 400 "-" "curl/8.18.0"
Hacking Bad Web Bot Web App Attack
🇫🇷 Security_Whaller
Malicious activity detected on Honeypot.
Brute-Force Hacking Web App Attack
🇺🇸 drewf.ink
[20:09] Probed an open proxy (direct request to the proxy port)
Open Proxy
🇬🇧 Interceptor_HQ
request_uri: /health/liveliness -- automatic report --
Brute-Force Hacking
🇫🇷 GabrielJST
*Port Scan* detected from 20.127.247.148 (US/United States/-).
Port Scan
🇹🇼 tyetriiix
Wazuh Alert Evidence: 20.127.247.148 - - [01/Sep/2026:02:39:05 +0000] "GET /.git/config HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
Web App Attack
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
Anonymous
Tried our host z.
Port Scan Hacking Exploited Host
Anonymous
denied traffic to a honeypot network. destination port 443.
Port Scan Hacking
🇩🇪 EGP Abuse Dept
Scanning for web/db/file exploits on tpc-043.mach3builders.nl
SQL Injection Bad Web Bot Web App Attack
🇩🇪 www.mammazone.it
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 117.6.44.221
🇷🇴 92.118.39.92
🇩🇪 217.19.30.57
🇺🇸 199.165.159.49
🇨🇳 183.196.97.222
🇩🇪 167.94.145.21
🇫🇮 155.212.109.92
🇬🇧 86.38.123.33
🇫🇷 85.204.70.116
🇳🇱 77.67.26.41
🇺🇸 45.159.20.138
🇳🇱 45.148.10.157
🇺🇸 154.3.62.51
🇮🇷 151.232.83.161
🇨🇳 14.23.77.27
🇰🇷 220.118.173.234
feedback