JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.64.48.167

20.64.48.167 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.64.48.167

Whois 20.64.48.167

IP Abuse Reports for 20.64.48.167:

This IP address has been reported a total of 53 times from 38 distinct sources. 20.64.48.167 was first reported on July 6th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 lns.bz	2026-07-18 09:50:10 (22 hours ago)	SSH bruteforce [BY]	SSH
🇨🇦 maik	2026-07-17 20:13:14 (1 day ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇨🇦 maik	2026-07-16 20:12:45 (2 days ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇦🇹 CTK	2026-07-16 12:00:30 (2 days ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇨🇦 maik	2026-07-15 20:12:37 (3 days ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇩🇪 DocNetzwerk	2026-07-15 16:07:09 (3 days ago)	20.64.48.167 (US/United States/-), 3 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇩🇪 DEV-DNS	2026-07-15 11:45:14 (3 days ago)	20.64.48.167 (US/United States/Texas/San Antonio/-/[redacted]	Brute-Force
🇺🇸 johuang92	2026-07-15 09:48:22 (3 days ago)	Cowrie SSH honeypot: session f8031158cb03 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇳🇱 Jos Moonen	2026-07-15 08:31:41 (3 days ago)	2026-07-15T10:31:41.095699+02:00 domotica sshd-session[24124]: Failed password for root from 20.64.4 ... show more 2026-07-15T10:31:41.095699+02:00 domotica sshd-session[24124]: Failed password for root from 20.64.48.167 port 53227 ssh2 ... show less	Brute-Force SSH
🇵🇱 ntxg	2026-07-15 01:42:00 (4 days ago)	2026-07-15T03:41:57.693794+02:00 serverftp sshd[3075089]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-15T03:41:57.693794+02:00 serverftp sshd[3075089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T03:41:59.773550+02:00 serverftp sshd[3075089]: Failed password for root from 20.64.48.167 port 55105 ssh2 ... show less	Brute-Force SSH
🇷🇺 GoXLd	2026-07-14 23:59:06 (4 days ago)	2026-07-15T01:59:03.793746+02:00 gXdNODE2 sshd-session[487613]: pam_unix(sshd:auth): authentication ... show more 2026-07-15T01:59:03.793746+02:00 gXdNODE2 sshd-session[487613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T01:59:06.175193+02:00 gXdNODE2 sshd-session[487613]: Failed password for root from 20.64.48.167 port 59832 ssh2 ... show less	Brute-Force SSH
🇫🇷 GoXLd	2026-07-14 23:15:22 (4 days ago)	2026-07-15T01:15:20.469267+02:00 node1 sshd-session[3223740]: pam_unix(sshd:auth): authentication fa ... show more 2026-07-15T01:15:20.469267+02:00 node1 sshd-session[3223740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T01:15:21.969550+02:00 node1 sshd-session[3223740]: Failed password for root from 20.64.48.167 port 57042 ssh2 ... show less	Brute-Force SSH
🇨🇦 maik	2026-07-14 20:12:28 (4 days ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇵🇱 ntxg	2026-07-14 19:08:08 (4 days ago)	2026-07-14T21:08:05.456163+02:00 serverftp sshd[3021396]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-14T21:08:05.456163+02:00 serverftp sshd[3021396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-14T21:08:07.608609+02:00 serverftp sshd[3021396]: Failed password for root from 20.64.48.167 port 63030 ssh2 ... show less	Brute-Force SSH
🇺🇸 dondessert.com	2026-07-14 15:48:19 (4 days ago)	2026-07-14T11:48:18.715421mail.dondessert.com sshd[646005]: Failed password for root from 20.64.48.1 ... show more 2026-07-14T11:48:18.715421mail.dondessert.com sshd[646005]: Failed password for root from 20.64.48.167 port 57501 ssh2 2026-07-14T11:48:19.208322mail.dondessert.com sshd[646005]: Connection closed by authenticating user root 20.64.48.167 port 57501 [preauth] ... show less	Brute-Force SSH

Showing 16 to 30 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.7

🇩🇪 5.175.180.139

🇧🇷 177.155.205.75

🇺🇸 162.216.150.134

🇮🇩 157.15.67.253

🇫🇮 147.185.133.160

🇺🇸 104.236.10.191

🇮🇳 103.16.140.243

🇨🇦 85.217.149.57

🇳🇱 77.239.124.251

🇺🇸 64.62.156.24

🇸🇬 43.156.250.17

🇺🇸 34.145.105.225

🇩🇪 157.230.18.133

🇫🇮 147.185.133.196

🇺🇸 143.110.236.200

🇫🇷 104.28.155.118

🇳🇱 45.153.34.144

🇨🇳 117.50.51.198

🇨🇳 106.75.24.61