JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.171.125.128

20.171.125.128 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.171.125.128

Whois 20.171.125.128

IP Abuse Reports for 20.171.125.128:

This IP address has been reported a total of 74 times from 53 distinct sources. 20.171.125.128 was first reported on September 21st 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 KiekerJan	2026-06-19 18:45:05 (4 days ago)	20.171.125.128 - - [19/Jun/2026:20:43:54 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 20.171.125.128 - - [19/Jun/2026:20:43:54 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 20.171.125.128 - - [19/Jun/2026:20:45:05 +0200] "GET /database.sql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Web App Attack
🇧🇷 chronos	2026-06-19 15:40:38 (4 days ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 2087 \| Proto: TCP \| Locat ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 2087 \| Proto: TCP \| Location: United States, Phoenix show less	Port Scan Hacking
🇨🇿 huginet	2026-06-19 14:36:51 (4 days ago)	20.171.125.128 - - [19/Jun/2026:16:36:44 +0200] "GET /.git/config HTTP/1.1" 403 32175 "-" "Mozilla/5 ... show more 20.171.125.128 - - [19/Jun/2026:16:36:44 +0200] "GET /.git/config HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 20.171.125.128 - - [19/Jun/2026:16:36:50 +0200] "GET /.git/refs/heads/master HTTP/1.1" 404 52325 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web Spam Web App Attack
🇫🇷 Lunix	2026-06-19 13:40:47 (4 days ago)		Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-19 13:21:43 (4 days ago)	Web vulnerability probing: /.git/refs/heads/main (bogus vhost/SNI)	Web App Attack
🇹🇭 Sawasdee	2026-06-15 01:33:05 (1 week ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 MPL	2026-06-15 01:04:45 (1 week ago)	tcp port scan (10 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-15 00:42:56 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇧🇪 sid3windr	2026-06-04 19:21:40 (2 weeks ago)	GET /.env (Tarpitted for 1d15h8m26s, wasted 8.06MB)	Web App Attack
🇺🇸 shadowlab	2026-06-03 21:11:43 (2 weeks ago)	2026-06-03T14:10:47.292118-07:00 shadownetworks.org sshd[3910414]: Failed password for root from 20. ... show more 2026-06-03T14:10:47.292118-07:00 shadownetworks.org sshd[3910414]: Failed password for root from 20.171.125.128 port 17346 ssh2 2026-06-03T14:11:24.749265-07:00 shadownetworks.org sshd[3910968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root 2026-06-03T14:11:26.164772-07:00 shadownetworks.org sshd[3910968]: Failed password for root from 20.171.125.128 port 17349 ssh2 2026-06-03T14:11:40.711030-07:00 shadownetworks.org sshd[3911205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root 2026-06-03T14:11:42.658148-07:00 shadownetworks.org sshd[3911205]: Failed password for root from 20.171.125.128 port 17350 ssh2 ... show less	Brute-Force SSH
🇫🇮 beatsnet.com	2026-06-03 20:56:27 (2 weeks ago)	Jun 3 22:56:18 vulcan sshd-session[91986]: error: PAM: Authentication error for root from 20.171.12 ... show more Jun 3 22:56:18 vulcan sshd-session[91986]: error: PAM: Authentication error for root from 20.171.125.128 Jun 3 22:56:21 vulcan sshd-session[91989]: error: PAM: Authentication error for root from 20.171.125.128 Jun 3 22:56:23 vulcan sshd-session[91992]: error: PAM: Authentication error for root from 20.171.125.128 Jun 3 22:56:26 vulcan sshd-session[91995]: error: PAM: Authentication error for root from 20.171.125.128 ... show less	Brute-Force SSH
Anonymous	2026-06-03 20:55:08 (2 weeks ago)	2026-06-03T20:55:06.296739+00:00 logger sshd[70550]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-06-03T20:55:06.296739+00:00 logger sshd[70550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root 2026-06-03T20:55:08.449892+00:00 logger sshd[70550]: Failed password for root from 20.171.125.128 port 17344 ssh2 ... show less	Brute-Force SSH
🇩🇪 Tha_14	2026-06-03 20:29:13 (2 weeks ago)	Jun 3 22:29:07 hosting sshd[3911341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Jun 3 22:29:07 hosting sshd[3911341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root Jun 3 22:29:08 hosting sshd[3911341]: Failed password for root from 20.171.125.128 port 17347 ssh2 Jun 3 22:29:10 hosting sshd[3911343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root Jun 3 22:29:12 hosting sshd[3911343]: Failed password for root from 20.171.125.128 port 17344 ssh2 show less	SSH Brute-Force
🇫🇷 ISPLtd	2026-06-03 20:18:12 (2 weeks ago)	Jun 3 17:18:11 20.171.125.128 TCP SPT=17344 DPT=22 SYN ...	Port Scan SSH
🇺🇸 shadowlab	2026-06-03 19:13:42 (2 weeks ago)	2026-06-03T12:13:34.561631-07:00 shadownetworks.org sshd[3815421]: Failed password for root from 20. ... show more 2026-06-03T12:13:34.561631-07:00 shadownetworks.org sshd[3815421]: Failed password for root from 20.171.125.128 port 17345 ssh2 2026-06-03T12:13:36.400570-07:00 shadownetworks.org sshd[3815465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root 2026-06-03T12:13:38.168520-07:00 shadownetworks.org sshd[3815465]: Failed password for root from 20.171.125.128 port 17348 ssh2 2026-06-03T12:13:40.081370-07:00 shadownetworks.org sshd[3815507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.171.125.128 user=root 2026-06-03T12:13:42.065546-07:00 shadownetworks.org sshd[3815507]: Failed password for root from 20.171.125.128 port 17347 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.93

🇺🇸 195.184.76.212

🇫🇮 185.148.1.18

🇰🇷 175.199.67.164

🇨🇳 171.8.85.244

🇨🇦 168.138.90.7

🇩🇪 138.124.73.150

🇫🇷 91.231.89.177

🇩🇪 69.5.169.126

🇺🇸 52.167.144.201

🇨🇱 45.227.176.83

🇺🇸 45.132.115.56

🇯🇵 8.209.253.38

🇰🇷 222.110.147.56

🇺🇸 205.210.31.73

🇹🇼 198.235.24.85

🇳🇱 176.65.132.162

🇸🇪 172.253.94.146

🇸🇪 130.49.8.99

🇰🇷 115.178.75.243