JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.244.3.24

20.244.3.24 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 73%: ?

73%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.244.3.24

Whois 20.244.3.24

IP Abuse Reports for 20.244.3.24:

This IP address has been reported a total of 18 times from 14 distinct sources. 20.244.3.24 was first reported on June 27th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-07-04 01:25:17 (3 days ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 20.244.3.24 35858 show less	Port Scan Hacking Brute-Force
🇫🇷 ✨	2026-07-04 00:08:10 (3 days ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 20.244.3.24 33903 show less	Port Scan Hacking Brute-Force
🇩🇪 anycast_ac	2026-07-03 14:20:03 (4 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials: b'admin':b'Tz123456' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'admin' : 'Tz123456' show less	DDoS Attack
🇨🇦 Luhte	2026-07-03 14:06:35 (4 days ago)	Unsolicited TCP connection from 20.244.3.24 to port 0 at 2026-07-03T14:06:35Z. Source IP completed t ... show more Unsolicited TCP connection from 20.244.3.24 to port 0 at 2026-07-03T14:06:35Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇳🇱 BIV	2026-07-03 13:46:59 (4 days ago)	Honeypot multi-source hit. Sources: tpot:Heralding,tpot:P0f,tpot:Suricata. Ports: 1080. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Heralding,tpot:P0f,tpot:Suricata. Ports: 1080. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇺🇸 xmission.com	2026-07-03 07:27:17 (4 days ago)	Blocked by UFW (TCP on 80) Source port: 23459 TTL: 110 Packet length: 52 TOS: 0x02 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 23459 TTL: 110 Packet length: 52 TOS: 0x02 This report (for 20.244.3.24) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇷 ✨	2026-07-03 00:21:22 (4 days ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrador - 0xc000006d ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrador - 0xc000006d %#13 0xc0000064 3 NtLmSsp NTLM - - - 0 0x0 - 20.244.3.24 6042 show less	Port Scan Hacking Brute-Force
🇫🇷 ✨	2026-07-02 23:08:13 (4 days ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator 0xc000006d % ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 20.244.3.24 22407 show less	Port Scan Hacking Brute-Force
🇦🇹 CTK	2026-06-28 23:13:51 (1 week ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇨🇦 smick	2026-06-28 20:18:31 (1 week ago)	Brute-force attack.	Brute-Force
🇿🇦 maximonline.co.za	2026-06-28 17:50:10 (1 week ago)	Brute Force RDP Attack	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-06-28 11:34:27 (1 week ago)	Blocked by UFW (TCP on 5985) Source port: 54866 TTL: 112 Packet length: 52 TOS: 0x02 This report (f ... show more Blocked by UFW (TCP on 5985) Source port: 54866 TTL: 112 Packet length: 52 TOS: 0x02 This report (for 20.244.3.24) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-06-28 00:18:47 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2026-06-28 00:15:06 (1 week ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇨🇿 Countryman	2026-06-27 23:09:37 (1 week ago)	repeated unauthorized connection attempts, host sweep, port 3389	Hacking Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.253.12.209

🇭🇰 150.5.148.103

🇺🇸 66.109.24.41

🇰🇷 61.81.141.186

🇨🇳 47.103.157.194

🇺🇸 20.40.218.197

🇺🇸 20.40.217.42

🇵🇪 181.67.122.143

🇺🇸 155.103.69.40

🇯🇵 153.121.54.102

🇦🇪 109.177.123.190

🇯🇵 107.155.15.8

🇧🇩 103.129.114.217

🇷🇴 80.94.92.145

🇸🇬 43.163.90.141

🇺🇸 20.40.209.173

🇺🇸 20.38.37.110

🇺🇸 20.38.35.209

🇺🇸 3.95.5.114

🇸🇪 2.68.191.190