JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.83.158.248

20.83.158.248 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.83.158.248

Whois 20.83.158.248

IP Abuse Reports for 20.83.158.248:

This IP address has been reported a total of 21 times from 19 distinct sources. 20.83.158.248 was first reported on May 20th 2026, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (23 minutes ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Hiigara	2026-06-03 04:30:43 (18 hours ago)	connection attempt : 20.83.158.248 on port : tcp/8080 (HTTP-alt)	Port Scan
🇳🇱 Webhoster	2026-06-03 04:11:26 (18 hours ago)	CrowdSec scenario: crowdsecurity/http-probing	Hacking
🇧🇷 Peregrine	2026-06-03 04:09:34 (18 hours ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 20.83.158.248 - - [03/Jun/2026:00:57:30 -0300] "GET ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 20.83.158.248 - - [03/Jun/2026:00:57:30 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:57:40 -0300] "GET /.git/config HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:57:40 -0300] "GET /.env.production HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:57:45 -0300] "GET /.env.save HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:58:17 -0300] "GET /wp-config.php HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:58:18 -0300] "GET /wp-config.php.bak HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:58:18 -0300] "GET /config.php HTTP/1.1" 404 414 - 20.83.158.248 - - [03/Jun/2026:00:59:36 -0300] "GET /backup.sql HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 ufn.edu.br	2026-06-03 03:28:11 (19 hours ago)	[Wed Jun 03 00:17:41.804336 2026] [access_compat:error] [pid 927] [client 20.83.158.248:12925] AH017 ... show more [Wed Jun 03 00:17:41.804336 2026] [access_compat:error] [pid 927] [client 20.83.158.248:12925] AH01797: client denied by server configuration: /var/www/html/wp-config.php [Wed Jun 03 00:17:51.984583 2026] [authz_core:error] [pid 959] [client 20.83.158.248:12886] AH01630: client denied by server configuration: /var/www/html/server-status [Wed Jun 03 00:17:56.811058 2026] [access_compat:error] [pid 15660] [client 20.83.158.248:12889] AH01797: client denied by server configuration: /var/www/html/config.php ... show less	Exploited Host Web App Attack
🇬🇧 PeravixGroup	2026-06-03 02:46:55 (20 hours ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 02:19:13 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.83.158.248 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.83.158.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:19:07.634705 2026] [security2:error] [pid 14733:tid 14733] [client 20.83.158.248:13127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.51"] [uri "/.git/HEAD"] [unique_id "ah-PGzuk3a83neFMEEw-LwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-03 02:18:00 (20 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 Enno	2026-06-03 02:15:59 (20 hours ago)	P04::Fail2Ban: automated bot scanning / credential probing detected.	Web App Attack Bad Web Bot
🇫🇷 GabrielJST	2026-06-03 01:41:58 (21 hours ago)	Port Scan detected from 20.83.158.248 (US/United States/-).	Port Scan
🇮🇪 AutosOnShow	2026-06-03 01:10:06 (21 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-03 01:09:20.806 \|	Web App Attack
🇺🇸 factor1	2026-06-03 00:56:52 (22 hours ago)	Fail2ban at saturn Reports Abuse.	Bad Web Bot
🇫🇮 [email protected]	2026-06-03 00:41:39 (22 hours ago)	Attack attempt against Interwebbi servers; Port Scan detected from 20.83.158.248 (US/United States ... show more Attack attempt against Interwebbi servers; Port Scan detected from 20.83.158.248 (US/United States/-). 5 hits in the last 91 seconds; IP: 20.83.158.248; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇺🇸 Gabriel Camargo	2026-06-03 00:40:37 (22 hours ago)	20.83.158.248 - - [02/Jun/2026:19:40:34 -0500] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 ... show more 20.83.158.248 - - [02/Jun/2026:19:40:34 -0500] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.83.158.248 - - [02/Jun/2026:19:40:36 -0500] "GET /.env.local HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.83.158.248 - - [02/Jun/2026:19:40:37 -0500] "GET /.env.production HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Brute-Force SSH
Anonymous	2026-06-03 00:30:05 (22 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇵🇰 153.117.40.249

🇵🇱 138.124.20.112

🇨🇳 116.198.232.100

🇻🇳 112.78.1.87

🇳🇱 80.71.227.178

🇮🇩 36.95.221.140

🇧🇪 198.235.24.164

🇸🇪 185.195.233.178

🇦🇹 109.70.100.8

🇧🇩 103.171.69.67

🇮🇳 103.54.101.216

🇻🇳 103.9.204.88

🇷🇴 2.57.122.177

🇳🇱 185.242.226.72

🇮🇸 185.40.122.250

🇰🇷 175.196.136.75

🇨🇳 139.170.72.234

🇮🇳 138.252.214.161

🇭🇰 101.79.165.43