JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.64.48.167

20.64.48.167 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.64.48.167

Whois 20.64.48.167

IP Abuse Reports for 20.64.48.167:

This IP address has been reported a total of 84 times from 49 distinct sources. 20.64.48.167 was first reported on July 6th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 m4xx	2026-07-18 10:34:26 (1 week ago)	2026-07-18T10:34:23.770935+00:00 blinken.mattjan.us sshd[3370337]: pam_unix(sshd:auth): authenticati ... show more 2026-07-18T10:34:23.770935+00:00 blinken.mattjan.us sshd[3370337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 2026-07-18T10:34:25.793247+00:00 blinken.mattjan.us sshd[3370337]: Failed password for invalid user administrator from 20.64.48.167 port 52862 ssh2 ... show less	Brute-Force SSH
🇵🇱 lns.bz	2026-07-18 09:50:10 (1 week ago)	SSH bruteforce [BY]	SSH
🇨🇦 maik	2026-07-17 20:13:14 (2 weeks ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇨🇦 maik	2026-07-16 20:12:45 (2 weeks ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇦🇹 CTK	2026-07-16 12:00:30 (2 weeks ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇨🇦 maik	2026-07-15 20:12:37 (2 weeks ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇩🇪 DocNetzwerk	2026-07-15 16:07:09 (2 weeks ago)	20.64.48.167 (US/United States/-), 3 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇩🇪 DEV-DNS	2026-07-15 11:45:14 (2 weeks ago)	20.64.48.167 (US/United States/Texas/San Antonio/-/[redacted]	Brute-Force
🇺🇸 johuang92	2026-07-15 09:48:22 (2 weeks ago)	Cowrie SSH honeypot: session f8031158cb03 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇳🇱 Jos Moonen	2026-07-15 08:31:41 (2 weeks ago)	2026-07-15T10:31:41.095699+02:00 domotica sshd-session[24124]: Failed password for root from 20.64.4 ... show more 2026-07-15T10:31:41.095699+02:00 domotica sshd-session[24124]: Failed password for root from 20.64.48.167 port 53227 ssh2 ... show less	Brute-Force SSH
🇵🇱 ntxg	2026-07-15 01:42:00 (2 weeks ago)	2026-07-15T03:41:57.693794+02:00 serverftp sshd[3075089]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-15T03:41:57.693794+02:00 serverftp sshd[3075089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T03:41:59.773550+02:00 serverftp sshd[3075089]: Failed password for root from 20.64.48.167 port 55105 ssh2 ... show less	Brute-Force SSH
🇷🇺 GoXLd	2026-07-14 23:59:06 (2 weeks ago)	2026-07-15T01:59:03.793746+02:00 gXdNODE2 sshd-session[487613]: pam_unix(sshd:auth): authentication ... show more 2026-07-15T01:59:03.793746+02:00 gXdNODE2 sshd-session[487613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T01:59:06.175193+02:00 gXdNODE2 sshd-session[487613]: Failed password for root from 20.64.48.167 port 59832 ssh2 ... show less	Brute-Force SSH
🇫🇷 GoXLd	2026-07-14 23:15:22 (2 weeks ago)	2026-07-15T01:15:20.469267+02:00 node1 sshd-session[3223740]: pam_unix(sshd:auth): authentication fa ... show more 2026-07-15T01:15:20.469267+02:00 node1 sshd-session[3223740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-15T01:15:21.969550+02:00 node1 sshd-session[3223740]: Failed password for root from 20.64.48.167 port 57042 ssh2 ... show less	Brute-Force SSH
🇨🇦 maik	2026-07-14 20:12:28 (2 weeks ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇵🇱 ntxg	2026-07-14 19:08:08 (2 weeks ago)	2026-07-14T21:08:05.456163+02:00 serverftp sshd[3021396]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-14T21:08:05.456163+02:00 serverftp sshd[3021396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.64.48.167 user=root 2026-07-14T21:08:07.608609+02:00 serverftp sshd[3021396]: Failed password for root from 20.64.48.167 port 63030 ssh2 ... show less	Brute-Force SSH

Showing 46 to 60 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.244.66.230

🇮🇳 182.18.139.237

🇺🇸 162.216.150.234

🇺🇸 162.216.150.174

🇨🇳 118.145.99.252

🇭🇰 101.36.107.233

🇩🇪 69.5.169.245

🇧🇪 35.210.61.208

🇬🇧 35.203.210.75

🇭🇰 23.91.97.170

🇨🇳 183.184.54.239

🇺🇸 173.255.223.49

🇺🇸 172.217.46.16

🇬🇧 138.68.158.60

🇨🇳 116.179.37.111

🇺🇸 91.230.168.169

🇨🇳 36.212.229.48

🇯🇵 8.216.4.132

🇷🇸 2620:171:ee:f003:9999::244

🇨🇳 220.164.201.183