JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.169.78.145

Recent Activity

Abuse confidence score ?

71% Elevated

171 reports

38 reporters · latest 12 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.169.78.145

Export CSV

This IP address has been reported a total of 171 times from 38 distinct sources. 20.169.78.145 was first reported on December 5th 2025, and the most recent report was 12 hours ago. In the last 60 days, the top reporter locations were: France with 4 reports; Australia with 2 reports; Germany with 2 reports. The most common categories in these recent reports were: Port Scan 9 times; Brute-Force 2 times; Hacking 1 time; DDoS Attack 1 time; Web App Attack 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-07 03:52:10 (12 hours ago)	Reported from Nginx log analysis 6. Log: 20.169.78.145 - - [07/Oct/2026:xx:xx:xx 0200] "GET /health ... show more Reported from Nginx log analysis 6. Log: 20.169.78.145 - - [07/Oct/2026:xx:xx:xx 0200] "GET /health/liveliness HTTP/1.1" xxx xxx "-" "curl/8.18.0" "-" "US United States Phoenix" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇫🇷 agroman93	2026-10-07 01:01:07 (15 hours ago)	T-Pot honeypot: 307 hits on ports [80, 443, 4000, 4001, 5001, 8000, 8001, 8080, 8081, 8088] (automat ... show more T-Pot honeypot: 307 hits on ports [80, 443, 4000, 4001, 5001, 8000, 8001, 8080, 8081, 8088] (automated report) show less	Port Scan Web App Attack
Anonymous	2026-10-07 00:39:06 (15 hours ago)	Port Scan	Port Scan
🇦🇺 Starburst SysOp Team	2026-10-06 23:35:21 (16 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot
🇺🇸 arqueiro	2026-10-06 23:27:13 (16 hours ago)	Port scan: IP 20.169.78.145 tentou 7 portas distintas ([4000, 4001, 8000, 8001, 8081, 8088, 8200]) e ... show more Port scan: IP 20.169.78.145 tentou 7 portas distintas ([4000, 4001, 8000, 8001, 8081, 8088, 8200]) em 10min. show less	Port Scan
🇫🇷 sthoyer.de	2026-10-06 23:18:28 (16 hours ago)	Oct 7 01:18:25 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 7 01:18:25 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.169.78.145 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=23727 DF PROTO=TCP SPT=15609 DPT=4000 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 7 01:18:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.169.78.145 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=6590 DF PROTO=TCP SPT=16127 DPT=4000 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 7 01:18:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.169.78.145 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=29862 DF PROTO=TCP SPT=16088 DPT=4001 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 7 01:18:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.169.78.145 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=32927 DF PROTO=TCP SPT=15587 DPT=8000 WINDOW= ... show less	Port Scan
🇫🇷 Little Iguana	2026-10-06 23:18:26 (16 hours ago)	trying to access non-authorized port	Port Scan
🇦🇺 dyln	2026-10-06 23:02:23 (17 hours ago)	Dyls honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇫🇮 anycast_ac	2026-10-06 22:46:21 (17 hours ago)	Blocked by UFW on legacypanel [8080/tcp] \| SPT: 16048 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on legacypanel [8080/tcp] \| SPT: 16048 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: FemboyHolding LTD show less	Port Scan
Anonymous	2026-10-06 20:58:41 (19 hours ago)		DNS Compromise DDoS Attack
🇫🇷 Kejult	2026-10-06 20:49:50 (19 hours ago)	Honeypot Finding: verified TCP multi-port scan/probing; 22 application-level events across 12 target ... show more Honeypot Finding: verified TCP multi-port scan/probing; 22 application-level events across 12 target ports and 20 source port(s). Ports: 4000/service, 4001/service, 5001/service, 8000/service, 8001/service, 8081/HTTP, 8088/service, 8200/service. Sensors: Honeytrap, H0neytr4p, Tanner. show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-10-06 20:19:22 (19 hours ago)	[RoutePulse \| 2026-10-06T20:19:22Z] ATTACK: Port Scan Horizontal (port 80) TARGET: 2 subnets: 185.54 ... show more [RoutePulse \| 2026-10-06T20:19:22Z] ATTACK: Port Scan Horizontal (port 80) TARGET: 2 subnets: 185.54.80.0/24, 185.54.82.0/24 SOURCE: 20.169.78.145 EVIDENCE: severity=warning · 259 flows · 84 KB · 259 distinct targets · port 80 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇫🇷 Tilellit.PRO	2026-07-28 12:53:42 (2 months ago)	Malicious web traffic detected by CrowdSec	Hacking
🇮🇩 David Koswari	2026-07-24 05:15:00 (2 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 Reinhard	2026-07-22 02:52:10 (2 months ago)	Unknown activity, but too many attacks with too many users.	Hacking

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.147

🇫🇷 85.217.140.31

🇧🇬 79.124.58.218

🇺🇸 64.23.201.103

🇧🇷 189.50.142.78

🇲🇽 187.212.2.116

🇷🇺 185.23.66.24

🇮🇳 103.216.170.144

🇺🇸 76.110.247.20

🇦🇷 74.244.135.57

🇺🇸 66.132.224.30

🇮🇳 49.204.74.149

🇳🇱 45.148.10.152

🇨🇦 34.19.177.80

🇨🇳 14.29.181.34

🇫🇷 185.177.72.24

🇭🇰 172.68.211.214

🇨🇦 85.217.149.46

🇱🇹 62.60.130.253

🇨🇳 49.75.47.239