20.85.123.27
| ISP | Microsoft Corporation |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS8075 |
| Domain Name | microsoft.com |
| Country | 🇺🇸 United States of America |
| City | Boydton, Virginia |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
No reports in the last 60 days
20.85.123.27 has been reported 83 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
IP Abuse Reports for 20.85.123.27
This IP address has been reported a total of 83 times from 44 distinct sources. 20.85.123.27 was first reported on , and the most recent report was .
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | ||
| Anonymous |
path attack /.env
|
Web App Attack | ||
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | ||
| 🇳🇿 Antinson |
Scraping with a high error ratio and request rate
|
Bad Web Bot | ||
| Anonymous |
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
|
Web App Attack | ||
| 🇨🇭 Sophie Nina |
Automatically blocked by server
|
Fraud Orders | ||
| Anonymous |
|
Brute-Force | ||
| 🇹🇭 MWA SOC |
|
Port Scan | ||
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | ||
| 🇬🇧 openstrike.co.uk |
2 attacks on env grabbing URLs:
GET /.env HTTP/1.1
|
Hacking | ||
| Anonymous |
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
|
Web App Attack | ||
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted] 20.85.123.27 (US/United States/-)
|
SQL Injection | ||
| 🇺🇸 Epimetheus |
|
Bad Web Bot Exploited Host Web App Attack | ||
| Anonymous |
Automated report (2026-04-10T16:09:41-04:00). Caught probing for env file.
|
Hacking Web App Attack Open Proxy | ||
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩