20.127.185.20

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse confidence score ?
37% Elevated
4,770 reports
359 reporters ยท latest 1 week ago
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.127.185.20

This IP address has been reported a total of 4,770 times from 359 distinct sources. 20.127.185.20 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 40 reports; Germany with 8 reports; Brazil with 4 reports. The most common categories in these recent reports were: Port Scan 73 times; Hacking 21 times; Brute-Force 10 times; Exploited Host 2 times; Web App Attack 2 times; Other 3 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡ณ evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท Coco Bongo
1787589645 - 08/24/2026 18:40:45 Host: 20.127.185.20/20.127.185.20 Port: 4545 TCP Blocked ...
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/1723
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/554
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=52894 dstport=8009
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/1389
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 4443 with data transfer. Data preview: MGLNDD_87.229.95.155_4443
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/1270 (2 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 8089/tcp
Port Scan
๐Ÿ‡ต๐Ÿ‡ฑ bart@
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง Nov
Unauthorized access attempt (udp/9433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/4330 (2 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-08-23 21:27:41 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/3001 (2 or more attempts)
Port Scan

Showing 1 to 15 of 4770 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 209.173.10.75
๐Ÿ‡น๐Ÿ‡ญ 203.154.158.195
๐Ÿ‡ณ๐Ÿ‡ฑ 45.153.34.160
๐Ÿ‡ฌ๐Ÿ‡ง 45.133.173.150
๐Ÿ‡ฎ๐Ÿ‡ณ 182.70.63.221
๐Ÿ‡ฌ๐Ÿ‡ง 167.100.109.160
๐Ÿ‡บ๐Ÿ‡ธ 162.241.29.37
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.104
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.83
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.63
๐Ÿ‡ง๐Ÿ‡ท 128.201.148.124
๐Ÿ‡บ๐Ÿ‡ธ 107.180.88.176
๐Ÿ‡ฌ๐Ÿ‡ง 86.38.187.198
๐Ÿ‡ณ๐Ÿ‡ฌ 197.210.55.163
๐Ÿ‡บ๐Ÿ‡ธ 188.114.96.11
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.51
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.5
๐Ÿ‡ฎ๐Ÿ‡ณ 122.169.207.93
๐Ÿ‡จ๐Ÿ‡ณ 112.86.225.81
๐Ÿ‡ท๐Ÿ‡บ 109.173.107.163