20.127.239.241

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
26% Elevated
15 reports
15 reporters · latest 2 weeks ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇦🇹 Austria 1 🇩🇪 Germany 1 🇫🇷 France 1
Most common categories Port Scan 5 Bad Web Bot 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 donarev419
Port scan detected on port 3479 (connection without data transfer)
Port Scan
🇭🇰 CyberFox
8008/tcp (1 or more attempts)
Port Scan
🇦🇹 hxsain
Blocked by UFW on fr2 [1081/tcp] | SPT: 22464 | TTL: 234 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇬🇧 Axel
Blocked by UFW on BGPGB [8118/tcp] | SPT: 22464 | TTL: 106 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Web attack
Bad Web Bot Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 8443.
Port Scan Hacking
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
🇩🇪 www.fransveldman.world
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇧🇬 HighWay
Hacking Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇯🇵 jay hung
Port Scan
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.cloudflare.com:443
Open Proxy Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 188.26.209.65
🇺🇸 135.119.20.18
🇩🇪 109.160.32.42
🇷🇴 92.118.39.71
🇮🇸 82.221.100.12
🇧🇪 34.22.159.76
🇩🇪 172.71.172.231
🇩🇪 151.243.11.39
🇦🇫 149.54.40.94
🇺🇸 104.248.121.216
🇮🇪 80.233.60.183
🇨🇳 58.221.60.25
🇬🇧 45.133.173.2
🇨🇳 202.46.61.80
🇳🇱 93.123.109.9
🇫🇷 90.89.127.14
🇳🇱 86.38.187.112
🇧🇫 41.138.99.78
🇳🇱 185.223.235.41
🇺🇸 162.216.149.184
feedback