20.65.95.15

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
6 reports
5 reporters · latest 4 days ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Boydton, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
6 from 5 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇨🇦 Canada 1 🇨🇭 Switzerland 1
Most common categories Email Spam 5 Spoofing 5 Phishing 4 Brute-Force 2 Blog Spam 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Received: from citiessport.shop (20.65.95.15); Microsoft Corporation; AS8075; viasky.co; http://marvenofinds.space; senpluspluseop.onmicrosoft.com; microsoft.com
DNS Compromise DNS Poisoning Fraud Orders Spoofing Brute-Force Exploited Host Web App Attack Web Spam Email Spam Port Scan Phishing Hacking Blog Spam
🇺🇸 Grepco
Spoofing Email Spam Phishing
🇺🇸 oscarmike26
Auto-reported from IOC Email Monitor v2.0. Found in email: "Batch scan enrichment". Verdict: SUSPICIOUS.
Phishing VPN IP Email Spam
Anonymous
Received: from hopnodfva.beer (20.65.95.15); Microsoft Corporation; AS8075; limestonenetworks.com; http://vessilagoods.site; senpluspluseop.onmicrosoft.com; microsoft.com
DNS Compromise DNS Poisoning Fraud Orders Spoofing Brute-Force Exploited Host Web App Attack Web Spam Email Spam Port Scan Phishing Hacking Blog Spam
🇨🇭 YF
DMARC aggregate report from Outlook.com: 1 message(s) from this IP used a domain it is not authorized to send for (SPF fail, DKIM fail, not aligned), 2026-11-05 00:00 to 2026-11-06 00:00 UTC.
Spoofing
🇨🇦 [email protected]
Email spoofing, seen via Microsoft DMARC aggregate report: forged From on lhmjb.com sent to a hotmail.com address Oct 29, no DKIM signature, unrelated envelope domain (PrimeNest.com). Rejected by DMARC p=reject.
Spoofing Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69
🇨🇳 116.179.33.84
🇺🇸 104.28.163.170
🇧🇷 205.210.31.243
🇨🇳 116.179.33.77
🇺🇸 104.28.167.3
🇺🇸 104.28.162.195
🇺🇸 104.28.159.141
🇺🇸 104.28.153.186
🇧🇬 78.128.113.74
🇸🇬 47.82.11.200
🇳🇱 45.148.10.157
🇫🇷 34.155.138.104
🇺🇸 172.90.1.117
🇺🇸 162.216.149.73
🇨🇳 115.190.248.214
🇳🇱 93.123.109.163
🇳🇱 81.19.216.90
🇲🇾 47.250.124.189
🇺🇸 47.77.234.83
feedback