JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.102.101.56

20.102.101.56

Recent Activity

112 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Hostname(s)

azpdes9fpg9p.stretchoid.com

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.102.101.56:

This IP address has been reported a total of 112 times from 52 distinct sources. 20.102.101.56 was first reported on August 24th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 54 reports; Germany with 17 reports; Brazil with 5 reports. The most common categories in these recent reports were: Port Scan 94 times; Hacking 19 times; Brute-Force 16 times; Web App Attack 11 times; SSH 7 times; Other 15 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-30 10:20:15 (1 hour ago)	tcp/4567	Port Scan
🇪🇸 el-brujo	2026-08-30 09:46:58 (2 hours ago)	08/30/2026-11:46:58.733121 20.102.101.56 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputat ... show more 08/30/2026-11:46:58.733121 20.102.101.56 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 17 show less	Hacking
🇺🇸 MPL	2026-08-30 06:40:38 (5 hours ago)	tcp/18480 (2 or more attempts)	Port Scan
Anonymous	2026-08-30 05:55:00 (6 hours ago)	Blocked by firewall on hugin [514/tcp] \| Rule: AbuseIPDB \| SPT: 44757 \| TTL: 48 \| LEN: 52 \| TOS: 0x0 ... show more Blocked by firewall on hugin [514/tcp] \| Rule: AbuseIPDB \| SPT: 44757 \| TTL: 48 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇵 radheykrishna.com.np	2026-08-30 05:17:42 (6 hours ago)	Aug 30 11:02:41 kernel: [1783225.666489] [UFW BLOCK] IN=ens160 OUT= SRC=20.102.101.56 LEN=52 TOS=0x0 ... show more Aug 30 11:02:41 kernel: [1783225.666489] [UFW BLOCK] IN=ens160 OUT= SRC=20.102.101.56 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=12500 PROTO=TCP SPT=55308 DPT=8445 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 noconex	2026-08-30 03:07:19 (8 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to Oracle SQL port 1521) ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to Oracle SQL port 1521) detectado de 20.102.101.56 show less	Port Scan Brute-Force SSH
🇫🇮 6kilowatti	2026-08-30 02:12:56 (9 hours ago)	2026-08-30T05:12:55.566562+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-08-30T05:12:55.566562+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=20.102.101.56 DST=192.168.0.102 LEN=52 TOS=0x18 PREC=0x20 TTL=44 ID=11351 PROTO=TCP SPT=51540 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 haxwell.de	2026-08-30 01:46:23 (10 hours ago)	2026-08-30T03:46:23.478236+02:00 kakarott postfix/smtpd[432708]: improper command pipelining after C ... show more 2026-08-30T03:46:23.478236+02:00 kakarott postfix/smtpd[432708]: improper command pipelining after CONNECT from azpdes9fpg9p.stretchoid.com[20.102.101.56]: MGLNDD_194.163.157.110_25\n show less	Brute-Force
🇵🇱 sefinek.net	2026-08-30 01:04:35 (11 hours ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 7473 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (243 bytes of payload); 7473 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇮 6kilowatti	2026-08-29 23:06:34 (12 hours ago)	2026-08-30T02:06:33.421097+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-30T02:06:33.421097+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=20.102.101.56 DST=5.61.88.83 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=49768 PROTO=TCP SPT=57459 DPT=9443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-08-29 20:49:59 (15 hours ago)	tcp/8087	Port Scan
🇸🇪 SkyDancer	2026-08-29 18:51:30 (17 hours ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇺🇸 RAP	2026-08-29 18:09:57 (17 hours ago)	2026-08-29 18:09:57 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇩🇪 David Ferneding	2026-08-29 14:54:23 (21 hours ago)	Blocked by UFW (TCP on 8081) Source port: 43287 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8081) Source port: 43287 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 20.102.101.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-08-29 11:10:50 (1 day ago)	firewall-block, port(s): 18080/tcp	Port Scan

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 117.222.116.6

🇨🇳 114.246.195.18

🇺🇸 107.181.187.94

🇳🇱 91.92.42.172

🇺🇸 66.132.224.24

🇺🇸 207.90.244.4

🇹🇷 188.132.196.112

🇧🇴 181.115.166.173

🇲🇽 177.249.175.219

🇭🇰 156.245.246.50

🇭🇰 156.225.1.13

🇺🇸 147.185.132.33

🇯🇵 135.149.57.58

🇷🇴 92.118.39.14

🇨🇦 52.46.49.79

🇸🇬 47.128.16.31

🇩🇪 46.225.84.51

🇳🇱 45.148.10.188

🇳🇱 45.66.35.37

🇬🇧 35.203.210.31