JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.161.77.163

20.161.77.163 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 41%: ?

41%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.161.77.163

Whois 20.161.77.163

IP Abuse Reports for 20.161.77.163:

This IP address has been reported a total of 43 times from 33 distinct sources. 20.161.77.163 was first reported on August 6th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-07-17 01:57:26 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇺🇸 micropedro	2026-06-30 10:30:45 (4 weeks ago)	3 incidents: malicious activity. Ports: 2082/TCP(1), 2086/TCP(1), 2087/TCP(1), 8443/TCP(1). First: 2 ... show more 3 incidents: malicious activity. Ports: 2082/TCP(1), 2086/TCP(1), 2087/TCP(1), 8443/TCP(1). First: 2026-06-23 05:30, Last: 2026-06-30 06:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-23 09:31:16 (1 month ago)	3 incidents: malicious activity. First: 2026-06-09 01:30, Last: 2026-06-23 05:31 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-09 01:30, Last: 2026-06-23 05:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-16 08:30:55 (1 month ago)	4 incidents: malicious activity. Ports: 2082/TCP(1), 2086/TCP(1), 2087/TCP(1), 8443/TCP(1). First: 2 ... show more 4 incidents: malicious activity. Ports: 2082/TCP(1), 2086/TCP(1), 2087/TCP(1), 8443/TCP(1). First: 2026-06-09 01:30, Last: 2026-06-16 04:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇸🇪 Per-Erik Runebert	2026-06-15 08:39:25 (1 month ago)	Excessive unauthorized requests	Hacking
🇺🇸 MPL	2026-06-14 20:44:21 (1 month ago)	tcp port scan (12 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-14 20:39:07 (1 month ago)	2026-06-14 20:39:07 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇳🇱 BIV	2026-06-14 20:21:14 (1 month ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇩🇪 McClay	2026-06-14 19:54:05 (1 month ago)	Illegal access attempt:20.161.77.163 - - [14/Jun/2026:21:54:04 +0200] "GET /.DS_Store HTTP/1.1" 404 ... show more Illegal access attempt:20.161.77.163 - - [14/Jun/2026:21:54:04 +0200] "GET /.DS_Store HTTP/1.1" 404 4993 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Hacking Web App Attack
Anonymous	2026-06-14 19:13:36 (1 month ago)		Web App Attack
Anonymous	2026-06-14 19:05:44 (1 month ago)	20.161.77.163 (US/United States/-), 5 distributed cpanel attacks on account [root] in the last 600 s ... show more 20.161.77.163 (US/United States/-), 5 distributed cpanel attacks on account [root] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-06-14 13:03:46 -0600] info [whostmgrd] 172.183.131.192 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-14 13:04:36 -0600] info [whostmgrd] 20.161.77.163 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-14 13:05:37 -0600] info [whostmgrd] 20.169.72.6 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-14 13:04:54 -0600] info [whostmgrd] 20.161.77.163 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-14 13:03:59 -0600] info [whostmgrd] 172.183.131.192 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: 172.183.131.192 (US/United States/-) show less	Port Scan
🇩🇪 Admins@FBN	2026-06-14 19:04:40 (1 month ago)	FW-PortScan: Traffic Blocked srcport=1177 dstport=2087	Port Scan
🇬🇧 Deezel	2026-06-14 17:26:00 (1 month ago)	Port scan 4th time today using various IP'S	Port Scan Spoofing
🇺🇸 Axel	2026-06-14 17:17:09 (1 month ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 1619 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 1619 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇾 lns.bz	2026-06-14 16:39:48 (1 month ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.209

🇧🇷 189.52.52.162

🇮🇳 168.144.123.211

🇸🇰 91.226.115.63

🇺🇸 66.132.172.238

🇺🇸 13.89.124.213

🇨🇭 209.99.189.177

🇬🇧 195.206.182.206

🇳🇱 193.176.31.211

🇨🇳 183.135.189.6

🇵🇰 161.248.202.88

🇺🇸 154.197.57.83

🇺🇸 136.66.16.84

🇯🇵 111.235.76.92

🇳🇱 88.151.33.203

🇳🇱 81.19.216.112

🇳🇱 81.19.216.66

🇵🇱 70.34.243.65

🇩🇪 69.5.169.112

🇺🇸 64.62.197.38