JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.127.247.37

20.127.247.37 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 49%: ?

49%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.127.247.37

Whois 20.127.247.37

IP Abuse Reports for 20.127.247.37:

This IP address has been reported a total of 15 times from 13 distinct sources. 20.127.247.37 was first reported on June 2nd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 KPS	2026-06-02 21:59:57 (3 weeks ago)	PortscanM	Port Scan
🇹🇭 Sawasdee	2026-06-02 21:39:34 (3 weeks ago)	Port Scan ...	Port Scan
🇧🇷 SOC Blue Team	2026-06-02 21:26:09 (3 weeks ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-02 20:23:58 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 cwytech	2026-06-02 19:56:02 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-probing.	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-06-02 19:43:19 (3 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇬🇧 essinghigh	2026-06-02 19:42:42 (3 weeks ago)	IPS Detection: 20.127.247.37 -> DPT: 2087	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 19:29:26 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.127.247.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.127.247.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:29:18.482641 2026] [security2:error] [pid 25039:tid 25039] [client 20.127.247.37:42830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.250"] [uri "/.git/HEAD"] [unique_id "ah8vDn_2XeK_P96htbierQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 0xffffffff	2026-06-02 19:12:38 (3 weeks ago)	[2026-06-02 22:12:22.849638] [authz_core:error] [pid 3489038:tid 129484615288512] [client 20.127.247 ... show more [2026-06-02 22:12:22.849638] [authz_core:error] [pid 3489038:tid 129484615288512] [client 20.127.247.37:42827] AH01630: client denied by server configuration: /var/www/html/.git , error_notes:wrong-host , URI:'/.git/config' [2026-06-02 22:12:23.613080] [authz_core:error] [pid 3489038:tid 129484556539584] [client 20.127.247.37:42821] AH01630: client denied by server configuration: /var/www/html/.env , error_notes:wrong-host , URI:'/.env' [2026-06-02 22:12:25.314339] [authz_core:error] [pid 3489037:tid 129484772259520] [client 20.127.247.37:42833] AH01630: client denied by server configuration: /var/www/html/.env.production , error_notes:wrong-host , URI:'/.env.production' [2026-06-02 22:12:29.408422] [authz_core:error] [pid 3489038:tid 129484581717696] [client 20.127.247.37:42832] AH01630: client denied by server configuration: /var/www/html/.aws , error_notes:wrong-host , URI:'/.aws/credentials' [2026-06-02 22:12:34.427143] [authz_core:error] [pid 3489037:tid 129484665644736] [client 20.127.247.37:42841] AH01 show less	Web App Attack Bad Web Bot
🇩🇪 Trashware	2026-06-02 19:01:05 (3 weeks ago)	Troll slipped on dog poop	Hacking
🇺🇸 TPI-Abuse	2026-06-02 17:50:11 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.127.247.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.127.247.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:50:05.274117 2026] [security2:error] [pid 10017:tid 10032] [client 20.127.247.37:42834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.126"] [uri "/.git/HEAD"] [unique_id "ah8XzWhROLtnlpi_kuOpVgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gglobatech	2026-06-02 17:40:38 (3 weeks ago)	CrowdSec detection: crowdsecurity/http-sensitive-files on srv1042301	Brute-Force Port Scan
🇬🇧 PeravixGroup	2026-06-02 17:08:53 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-02 16:53:47 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.249.74.198

🇺🇦 176.101.1.223

🇺🇸 173.174.133.232

🇻🇳 171.244.143.209

🇮🇳 152.52.224.26

🇨🇱 136.248.242.166

🇺🇸 107.155.88.70

🇰🇿 92.47.166.23

🇧🇬 79.124.49.174

🇧🇬 78.128.113.22

🇱🇹 62.60.130.219

🇲🇾 47.250.184.67

🇸🇬 43.160.245.79

🇺🇸 20.3.129.142

🇩🇪 194.59.206.2

🇳🇱 160.119.71.129

🇫🇷 91.196.152.185

🇳🇱 91.92.40.237

🇳🇱 91.92.40.5

🇭🇰 46.247.61.200