20.15.167.28
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
Abuse Reports
Total reports
377 from
115 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/9529
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=41984 dstport=5007
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇧🇷 Pingtoping |
ZGrab.Scanner
|
Ping of Death Port Scan Exploited Host | |
| 🇺🇸 MPL |
tcp/55554 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/139)
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized traffic (36 bytes of payload); 11740 [2] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/80 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8899 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: HTTP (1 total hits)
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/8087
|
Port Scan | |
| 🇺🇸 distorx |
2026-09-01 11:00:14,280 fail2ban.actions [49012]: NOTICE [ufw] Ban 20.15.167.28
2026-09-14 01:54:51,919 fail2ban.actions [49012]: NOTICE [ufw] Ban 20.15.167.28
...
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8022)
Source port: 55189
TTL: 51
Packet length: 52
TOS: 0x00
This report (for 20.15.167.28) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 ValtonTahiri |
|
Port Scan | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: SMB (1 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown