JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.219.216.27

Neutral Activity

Abuse confidence score ?

0% Low Risk

148 reports

110 reporters · latest 5 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.219.216.27 has been reported 148 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.219.216.27

Export CSV

This IP address has been reported a total of 148 times from 110 distinct sources. 20.219.216.27 was first reported on March 26th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:29 (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 Peregrine	2026-04-02 03:11:11 (6 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0300] "GET /3.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:11 -0300] "GET /403.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /404.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /87.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /Auth/index.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-01 03:10:44 (6 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0300] "GET /3.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:11 -0300] "GET /403.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /404.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /87.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /Auth/index.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-04-01 01:01:48 (6 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-03-31 03:10:16 (6 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0300] "GET /3.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:11 -0300] "GET /403.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /404.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /87.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /Auth/index.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 Holger	2026-03-30 10:56:38 (6 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-03-30 03:09:58 (6 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0300] "GET /3.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:11 -0300] "GET /403.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /404.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /87.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /Auth/index.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-29 20:12:19 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 Peregrine	2026-03-29 03:09:52 (6 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.219.216.27 172.69.179.217 - - [26/Mar/2026:16:22:11 -0300] "GET /3.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:11 -0300] "GET /403.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /404.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /87.php HTTP/1.1" 404 414 20.219.216.27 172.69.178.205 - - [26/Mar/2026:16:22:12 -0300] "GET /Auth/index.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-03-28 23:41:37 (6 months ago)		Brute-Force Web App Attack
🇭🇺 DumaNet	2026-03-28 11:56:00 (6 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 27. 02:04:52 Source IP: 20.219 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 27. 02:04:52 Source IP: 20.219.216.27 Portion of the log(s): 20.219.216.27 - [27/Mar/2026:02:04:50 +0100] "GET /Core-Econ/upH.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.216.27 - [27/Mar/2026:02:04:50 +0100] "GET /Cookie/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.216.27 - [27/Mar/2026:02:04:50 +0100] "GET /Content/Type/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.216.27 - [27/Mar/2026:02:04:50 +0100] "GET /Content/Type/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.216.27 - [27/Mar/2026:02:04:50 +0100] "GET /Content/ HTTP show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-03-28 06:14:35 (6 months ago)	220 attacks on PHP URLs, env grabbing URLs, Alfa URLs, site downloads: GET /bootstrap.php HTTP/1.1 G ... show more 220 attacks on PHP URLs, env grabbing URLs, Alfa URLs, site downloads: GET /bootstrap.php HTTP/1.1 GET /app/.env HTTP/1.1 GET /alfacgiapi/perl.alfa.php HTTP/1.1 GET /backup.sql HTTP/1.1 show less	Web App Attack Hacking
🇺🇸 octageeks.com	2026-03-28 04:06:55 (6 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-03-28 01:05:10 (6 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-03-27 23:36:32 (6 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.77.214.59

🇺🇸 202.8.41.244

🇰🇪 197.237.228.71

🇺🇸 194.77.198.225

🇨🇿 194.12.32.235

🇨🇿 193.179.120.196

🇨🇷 186.15.103.19

🇨🇴 181.53.13.135

🇺🇸 170.23.26.118

🇳🇱 152.42.143.147

🇭🇰 151.240.11.8

🇸🇬 150.109.23.93

🇵🇭 112.198.179.68

🇳🇱 109.160.32.140

🇺🇸 107.122.70.130

🇭🇺 81.182.236.89

🇺🇸 76.185.38.79

🇺🇸 73.107.60.223

🇺🇸 66.132.186.232

🇫🇷 62.84.186.96