20.161.70.181
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
Abuse Reports
Total reports
76 from
61 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
|
DNS Compromise DDoS Attack | |
| Anonymous |
PROTO=TCP DPT=30241
|
Port Scan Hacking | |
| 🇬🇧 AvonleaConsulting |
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
|
Bad Web Bot Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| 🇺🇸 RAP |
2026-09-01 00:56:55 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 2096.
|
Port Scan Hacking | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇮🇹 VHosting |
Detected mail brute force attack from 4 different servers
|
Brute-Force | |
| 🇺🇸 xxkodedxx |
|
Bad Web Bot Web App Attack | |
| 🇫🇷 geeek |
Port scanning: 8080 TCP Blocked
|
Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
6 hits, proto=tcp, ports=2082,2083,2086,2087,8080,8443
|
Port Scan Hacking | |
| 🇵🇱 Kitki30.com |
HTTP Probing. Log: 20.161.70.181 - - [02/Jun/2026:11:12:48 +0200] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER WEB-PHP phpinfo access). Ip 20.161.70.181 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-02 08:54:52.684887031 +0000 UTC
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown