20.57.47.227
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
No reports in the last 60 days
20.57.47.227 has been reported 55 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
55 from
45 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Bad Web Bot Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇺🇸 MatCat |
Banned by fail2ban: apache-webprobe
|
Port Scan Bad Web Bot | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 Octopuce |
Aggressive web search of vulnerable pages: /.env /.env.local /wp-config.php /config/database.yml /phpinfo.php /info.php /config.php /config/con ...
|
Web App Attack | |
| 🇫🇮 JRID |
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
|
Brute-Force Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.env | seen at 2026-08-04 05:17:15.143 |
|
Web App Attack | |
| 🇺🇸 mutebot.net |
SRC=20.57.47.227, PROTO=TCP, SPT=17796, DPT=8080
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=18965 dstport=2083
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 443.
|
Port Scan Hacking | |
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443
|
Open Proxy Port Scan | |
| 🇫🇷 SiyCah |
20.57.47.227 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 8s. Total bytes sent by tarpit: 882B. Report generated by Endlessh Report Generator v1.2.3
|
Brute-Force Port Scan SSH Hacking | |
| 🇫🇷 SiyCah |
20.57.47.227 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 8s. Total bytes sent by tarpit: 882B. Report generated by Endlessh Report Generator v1.2.3
|
Brute-Force Port Scan SSH Hacking | |
| 🇩🇪 excill |
Honeypot mesh observed 1058 attack events in 24h — cowrie/dionaea/heralding/suricata
|
Port Scan Hacking Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown