20.169.72.166
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Phoenix, Arizona
No reports in the last 60 days
20.169.72.166 has been reported 15 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
15 from
14 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: flashstudy.vn:443:443
|
Open Proxy Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/443 (2 or more attempts)
|
Port Scan | |
| 🇩🇪 KPS |
PortscanM
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 2087 [3], 2086 [1], 2083 [1], 2082 [1] TCP
|
Port Scan | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.env | seen at 2026-06-02 20:23:44.228 |
|
Web App Attack | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 2083
|
Port Scan Hacking Exploited Host | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:443
|
Open Proxy Port Scan | |
| 🇹🇷 Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| 🇺🇸 Rayulcifer |
20.169.72.166 - - [25/Mar/2026:15:39:34 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-"
20.169.72.166 - - [25/Mar/2026:15:39:34 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH | |
| 🇺🇸 Rayulcifer |
20.169.72.166 - - [13/Feb/2026:15:37:32 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-"
20.169.72.166 - - [13/Feb/2026:15:37:32 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown