AbuseIPDB » 20.81.159.112
20.81.159.112 was found in our database!
This IP was reported 408 times. Confidence of Abuse is 100%: ?
| ISP | Microsoft Corporation |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS8075 |
| Domain Name | microsoft.com |
| Country | 🇺🇸 United States of America |
| City | Boydton, Virginia |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 20.81.159.112:
This IP address has been reported a total of 408 times from 68 distinct sources. 20.81.159.112 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 3389 with flags: SYN
|
Port Scan | ||
| 🇵🇱 mkey |
|
Port Scan | ||
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | ||
| 🇩🇪 wlt-blocker |
Unauthorized access to webpage admin
|
Web App Attack | ||
| 🇸🇪 EmK530 |
URL flagged by RegEx: /xmlrpc.php
|
Web App Attack | ||
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | ||
| 🇳🇱 MM-bot |
URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2026-07-15 02:25:59 UTC+2)
|
Web App Attack Hacking | ||
| 🇨🇭 4server |
|
Hacking Web App Attack | ||
| Anonymous |
Web attack blocked by Wordfence on www.gerhuntjens.nl (1 hit). Reported by CRMON.
|
Web App Attack | ||
| 🇩🇪 maxpower |
|
Port Scan | ||
| 🇩🇪 LRob |
|
Brute-Force Web App Attack | ||
| 🇺🇸 interbiznw.com |
malicious-web-requests-vulnerability-scanning
|
Hacking Brute-Force Exploited Host Web App Attack | ||
| Anonymous |
Tries to login WordPress (wp-login.php)
|
Web App Attack | ||
| 🇨🇦 electronico |
|
Brute-Force Web App Attack | ||
| 🇺🇸 Penny Packer |
Fail2Ban apache-tripwires
|
Web App Attack |
Showing 1 to 15 of 408 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩