JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.163.3.72

20.163.3.72 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.163.3.72

Whois 20.163.3.72

IP Abuse Reports for 20.163.3.72:

This IP address has been reported a total of 114 times from 53 distinct sources. 20.163.3.72 was first reported on August 26th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-09-01 14:57:56 (22 minutes ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-09-01 09:42:12 (5 hours ago)	tcp/9200 (2 or more attempts)	Port Scan
🇹🇷 Threat.live	2026-09-01 08:15:02 (7 hours ago)	Threat.live: Web Scan	Web App Attack
Anonymous	2026-09-01 08:09:04 (7 hours ago)	2026-09-01T10:09:04.060553+02:00 vps kernel: [4620960.613766] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-01T10:09:04.060553+02:00 vps kernel: [4620960.613766] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=20.163.3.72 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=40 ID=52518 PROTO=TCP SPT=59869 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇵🇱 nfsec.pl	2026-09-01 07:37:54 (7 hours ago)	Detected: TCP scan on port: 8080 with flags: SYN	Port Scan
🇩🇪 zupan	2026-09-01 05:01:55 (10 hours ago)	Blocked by UFW on vps [5631/tcp] \| SPT: 37376 \| TTL: 41 \| LEN: 52 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [5631/tcp] \| SPT: 37376 \| TTL: 41 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 raiolanetworks.com	2026-09-01 04:47:57 (10 hours ago)	Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ... show more Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor. show less	Port Scan
🇩🇪 dispaisyenterprises	2026-09-01 03:33:57 (11 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8090 [2] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8090 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 diego	2026-09-01 03:19:54 (12 hours ago)	[rede-44-49] 09/01/2026-00:19:54.410193, 20.163.3.72, Protocol: 6, ET CINS Active Threat Intelligenc ... show more [rede-44-49] 09/01/2026-00:19:54.410193, 20.163.3.72, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 24 show less	Hacking
🇺🇸 MPL	2026-09-01 01:06:46 (14 hours ago)	tcp/27017 (2 or more attempts)	Port Scan
🇩🇪 kingjan1999	2026-09-01 01:02:00 (14 hours ago)	Blocked by UFW [9997/tcp] \| SPT: 45274 \| TTL: 42 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [9997/tcp] \| SPT: 45274 \| TTL: 42 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-01 00:05:29 (15 hours ago)	Blocked by UFW (TCP on 20) Source port: 41591 TTL: 52 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 20) Source port: 41591 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.163.3.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-31 23:02:25 (16 hours ago)	tcp ports: 389,20 (3 or more attempts)	Port Scan
🇫🇮 iamxorum	2026-08-31 21:59:00 (17 hours ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-08-31T21:58:59.41 ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-08-31T21:58:59.419941+00:00 XRM-01 kernel: [130222.734978] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=20.163.3.72 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=44951 PROTO=TCP SPT=53852 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-08-31 18:30:09 (20 hours ago)	Blocked by UFW (TCP on 50070) Source port: 46100 TTL: 52 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 50070) Source port: 46100 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.163.3.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.5.200.98

🇲🇾 160.250.93.239

🇻🇳 103.199.16.90

🇹🇼 211.75.164.94

🇺🇸 189.81.235.233

🇺🇸 189.81.235.193

🇺🇸 189.81.235.93

🇺🇸 157.230.173.88

🇧🇩 118.179.121.236

🇫🇷 91.231.89.169

🇺🇸 57.154.243.106

🇭🇰 43.129.193.109

🇺🇸 189.81.235.152

🇦🇷 161.22.10.164

🇮🇩 103.193.179.139

🇮🇩 103.98.104.5

🇭🇰 103.56.115.187

🇺🇸 65.49.1.63

🇺🇸 64.62.156.83

🇭🇰 34.92.64.161