JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.150.196.181

20.150.196.181 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.150.196.181

Whois 20.150.196.181

IP Abuse Reports for 20.150.196.181:

This IP address has been reported a total of 130 times from 54 distinct sources. 20.150.196.181 was first reported on August 26th 2026, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-01 18:33:18 (55 minutes ago)	Blocked by UFW (TCP on 9529) Source port: 48917 TTL: 53 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9529) Source port: 48917 TTL: 53 Packet length: 52 TOS: 0x00 This report (for 20.150.196.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-01 17:10:38 (2 hours ago)	tcp/50070 (2 or more attempts)	Port Scan
🇩🇪 Jochen Pretli	2026-09-01 16:07:57 (3 hours ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 xmission.com	2026-09-01 14:58:00 (4 hours ago)	Blocked by UFW (TCP on 10250) Source port: 56458 TTL: 53 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 10250) Source port: 56458 TTL: 53 Packet length: 52 TOS: 0x00 This report (for 20.150.196.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 chronos	2026-09-01 13:46:18 (5 hours ago)	[AUTORAVALT][[01/09/2026 - 10:46:18 -03:00 UTC] Attack from [Microsoft Corporation] [20.150.196.181] ... show more [AUTORAVALT][[01/09/2026 - 10:46:18 -03:00 UTC] Attack from [Microsoft Corporation] [20.150.196.181] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-fo] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇵🇱 sefinek.net	2026-09-01 12:57:33 (6 hours ago)	Honeypot hit: HTTP/1.1 request on 2379 GET /version User-Agent: Mozilla/5.0 zgrab/0.x Accept: / A ... show more Honeypot hit: HTTP/1.1 request on 2379 GET /version User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 2379 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-09-01 12:28:10 (7 hours ago)	Blocked by UFW (TCP on 21) Source port: 37294 TTL: 53 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 21) Source port: 37294 TTL: 53 Packet length: 52 TOS: 0x00 This report (for 20.150.196.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇺🇸 xmission.com	2026-09-01 12:11:10 (7 hours ago)	Blocked by UFW (TCP on 21) Source port: 43280 TTL: 52 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 21) Source port: 43280 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.150.196.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇺🇸 MPL	2026-09-01 11:43:15 (7 hours ago)	tcp/44818 (2 or more attempts)	Port Scan
🇪🇪 Tsumugi Kotobuki	2026-09-01 11:37:09 (7 hours ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 37 \| Len: 52B \| Win: 6 ... show more Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 37 \| Len: 52B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-09-01T11:37:09Z show less	Port Scan Hacking
🇧🇷 diego	2026-09-01 09:41:11 (9 hours ago)	[rede-top188] 09/01/2026-06:41:11.810079, 20.150.196.181, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-top188] 09/01/2026-06:41:11.810079, 20.150.196.181, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 22 show less	Hacking
🇺🇸 MPL	2026-09-01 09:37:58 (9 hours ago)	tcp/1337 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-09-01 08:16:52 (11 hours ago)	tcp/5692	Port Scan
🇧🇷 diego	2026-09-01 03:34:11 (15 hours ago)	[rede-168-134] 09/01/2026-00:34:10.762073, 20.150.196.181, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-168-134] 09/01/2026-00:34:10.762073, 20.150.196.181, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 22 show less	Hacking
🇫🇷 EvoX	2026-09-01 03:28:37 (15 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 3351 [2] TCP	Port Scan

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.12.180.51

🇧🇩 103.147.182.179

🇸🇬 94.231.206.254

🇨🇳 60.172.41.103

🇩🇪 47.254.177.253

🇰🇿 31.132.90.3

🇬🇧 31.14.254.46

🇸🇪 2.249.150.53

🇫🇷 2400:cb00:532:1000:6755:acd2:b758:201f

🇮🇷 217.60.255.130

🇧🇷 200.222.71.218

🇭🇰 199.45.154.54

🇺🇿 185.74.7.77

🇩🇪 167.94.146.50

🇳🇱 158.173.21.226

🇳🇱 158.173.20.6

🇩🇪 69.5.169.71

🇨🇳 60.174.39.82

🇺🇸 47.254.72.143

🇳🇱 45.148.10.151