20.242.131.119
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
21 from
19 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
2026-10-30: one_time_code. Observed against Billease APIs; source blocked. Datacenter IP (Microsoft Corporation), no legitimate customer traffic. Automated report.
|
Brute-Force Web App Attack | |
| Anonymous |
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
|
Brute-Force | |
| 🇫🇷 Stara |
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
|
Brute-Force DDoS Attack | |
| 🇳🇱 nikki101 |
pop/imap unauthorized access or misuse
|
Email Spam Brute-Force | |
| 🇺🇸 Zestysoft |
|
Brute-Force | |
| 🇿🇦 maximonline.co.za |
Brute Force IMAP AUTH Attack
|
Brute-Force | |
| Anonymous |
...
|
Brute-Force | |
| Anonymous |
|
Hacking Brute-Force | |
| 🇺🇸 oncord |
Form spam
|
Web Spam | |
| 🇳🇱 Site.eu |
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
|
Hacking Web App Attack | |
| 🇺🇸 Vasili Sviridov |
: Connection closed (no auth attempts in 29 secs)
|
Brute-Force | |
| 🇺🇸 hablaxdev |
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 151 unsolicited messages (dating spam). Observed 2026-10-27T19:38:21-04:00 to 2026-10-28T05:40:46-04:00.
|
Email Spam Hacking Brute-Force | |
| 🇺🇸 hablaxdev |
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 151 unsolicited messages (dating spam). Observed 2026-10-27T19:38:21-04:00 to 2026-10-28T05:40:46-04:00.
|
Email Spam Hacking Brute-Force | |
| Anonymous |
Authentication failure
|
Brute-Force | |
| 🇹🇷 Jova |
Part of a distributed password attack on a mail account (SMTP logins from many IPs).
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown