JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.187.125.210

20.187.125.210 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.187.125.210

Whois 20.187.125.210

IP Abuse Reports for 20.187.125.210:

This IP address has been reported a total of 20 times from 20 distinct sources. 20.187.125.210 was first reported on July 20th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SOC-BR	2026-07-21 06:18:22 (18 hours ago)	Trying access in non-authorized port - Source Port 55473 - Destination Port 3389 - Time 2026-07-20 2 ... show more Trying access in non-authorized port - Source Port 55473 - Destination Port 3389 - Time 2026-07-20 21:59:38 (UTC-3) show less	Port Scan Hacking
🇧🇷 chronos	2026-07-21 01:12:22 (23 hours ago)	2026-07-20 22:03:34 UTC-3\|\|Unauthorized connection attempt detected for port scanning	Port Scan
🇩🇪 0xrh0d4m1n	2026-07-21 00:14:05 (1 day ago)	🛡️ HPN Threat Sighting by 0xrh0d4m1n · 🔹 Verdict MALICIOUS (High), score 84/100 · 📌 HPN-RDP-RECON (R ... show more 🛡️ HPN Threat Sighting by 0xrh0d4m1n · 🔹 Verdict MALICIOUS (High), score 84/100 · 📌 HPN-RDP-RECON (RDP Intrusion Attempt) · 🎯 147 events/24h on rdp · 🔑 0 unique secrets tried (hello) · 📍 Origin Hong Kong · Microsoft Corporation · 🧠 MITRE ATT&CK T1110 (Brute Force), T1021.001 (Remote Services: RDP) · 🛰️ Cross-Intel no public blocklist yet · ⏱️ 2026-07-20 17:21 UTC → 2026-07-21 00:14 UTC · 🕵️ HPN Autonomous Sensor Grid show less	Brute-Force Hacking
🇩🇪 DoSammy	2026-07-20 17:33:30 (1 day ago)	neu-RDP-Brute-Force	Brute-Force
🇩🇪 Fahreddin Ergin	2026-07-20 17:32:34 (1 day ago)	Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)	Brute-Force SSH Port Scan
🇳🇱 VMHeaven.io	2026-07-20 17:15:09 (1 day ago)	Blocked by UFW [3389/tcp] Source port: 46355 TTL: 234 Packet length: 40	Port Scan Hacking Brute-Force
🇳🇱 ByeByte API	2026-07-20 17:14:14 (1 day ago)	byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-20T17:14:14Z. Source port 46355. TCP fl ... show more byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-20T17:14:14Z. Source port 46355. TCP flags: SYN. Packet: 40B, TTL 231, window 1024, IP id 28864. Single packet, dropped at firewall. p0f: 24 hops. show less	Port Scan
🇺🇸 micropedro	2026-07-20 17:14:09 (1 day ago)	3 incidents: port scanning. First: 2026-07-20 13:14, Last: 2026-07-20 13:14 UTC. Triggers: firewall- ... show more 3 incidents: port scanning. First: 2026-07-20 13:14, Last: 2026-07-20 13:14 UTC. Triggers: firewall-tcp,non-public-port,port-trap. show less	Port Scan
🇩🇪 zupan	2026-07-20 17:08:41 (1 day ago)	Blocked by UFW on vps [3389/tcp] \| SPT: 46355 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [3389/tcp] \| SPT: 46355 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-20 17:07:04 (1 day ago)	Unauthorized connection to RDP port 3389	Port Scan
🇩🇪 wlt-blocker	2026-07-20 17:04:29 (1 day ago)	Illegal port scans	Port Scan
🇫🇷 sthoyer.de	2026-07-20 17:02:01 (1 day ago)	Jul 20 19:02:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 20 19:02:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.187.125.210 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=238 ID=2077 PROTO=TCP SPT=46355 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 centurion	2026-07-20 17:01:44 (1 day ago)	Blocked by UFW on ns03 [3389/tcp] Source port: 46355 TTL: 232 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [3389/tcp] Source port: 46355 TTL: 232 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-07-20 16:59:37 (1 day ago)	Blocked by firewall on hugin [3389/tcp] \| Rule: UFW \| SPT: 46355 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [3389/tcp] \| Rule: UFW \| SPT: 46355 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 iamxorum	2026-07-20 16:55:33 (1 day ago)	2026-07-20T16:55:33.041336+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-07-20T16:55:33.041336+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=20.187.125.210 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=46721 PROTO=TCP SPT=46355 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.195

🇧🇪 198.235.24.227

🇳🇱 195.178.110.217

🇧🇷 177.106.61.244

🇮🇳 168.144.28.166

🇺🇸 151.245.32.125

🇮🇳 144.24.147.7

🇺🇸 135.237.126.84

🇻🇳 116.110.218.152

🇩🇪 102.165.54.119

🇫🇷 91.231.89.251

🇬🇧 87.236.176.232

🇳🇱 85.11.167.154

🇺🇸 65.49.1.233

🇺🇸 64.62.197.196

🇺🇸 47.251.175.116

🇸🇬 47.128.72.36

🇳🇱 45.198.224.62

🇩🇪 2a04:4e40:e000:0:98c:b4c:3948:b518

🇹🇭 202.29.220.106