20.80.78.99
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
Abuse Reports
Total reports
508 from
137 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3306)
Source port: 48547
TTL: 50
Packet length: 52
TOS: 0x00
This report (for 20.80.78.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SQL Injection | |
| 🇺🇸 gu-alvareza |
ZGrab.Scanner
|
Port Scan | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 2525 [2] TCP
|
Port Scan | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:53) [srv1]
|
Port Scan Hacking | |
| 🇨🇭 pingusurmars |
Blocked by UFW on ampereone [587/tcp]
Source port: 45674
TTL: 49
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 sbocquet |
Port 443 scanned from 20.80.78.99:37301.
|
Port Scan | |
| 🇳🇱 DrLex0 |
The Stretchoid sphincter poking for Microsoft Exchange autodiscover
20.80.78.99 443 - [07/Oct/2026:14:20:39 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 410 5269 "-" "Mozilla/5.0 zgrab/0.x"
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 18480)
Source port: 40493
TTL: 50
Packet length: 52
TOS: 0x00
This report (for 20.80.78.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-07 11:56:18 UTC Unauthorized activity to TCP port 139. SMB
|
Port Scan | |
| 🇺🇸 thororen |
Blocked by UFW [118/tcp]
Source port: 52975
TTL: 43
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3128)
Source port: 36078
TTL: 50
Packet length: 52
TOS: 0x00
This report (for 20.80.78.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 7199)
Source port: 60107
TTL: 50
Packet length: 52
TOS: 0x00
This report (for 20.80.78.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 554)
Source port: 51457
TTL: 51
Packet length: 52
TOS: 0x00
This report (for 20.80.78.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown