20.81.49.255
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
53 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 20.81.49.255 (US/United States/-): 1 in the last 3600 secs (0-196)
|
Hacking | |
| 🇫🇷 masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 20.81.49.255 (US/United States/-): 1 in the last 3600 secs (0-195)
|
Hacking | |
| 🇫🇷 masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 20.81.49.255 (US/United States/-): 1 in the last 3600 secs (0-196)
|
Hacking | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇳🇴 tmiland |
Suricata Detected 112 attacks from 20.81.49.255.; ET CINS Active Threat Intelligence Poor Reputation IP group 30; IP: 20.81.49.255; Ports: 24960; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2
|
Brute-Force | |
| 🇧🇾 StatsMe |
2026-06-13T20:52:11.302762+0300
ET SCAN NMAP -sS window 1024
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8989
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8989)
Source port: 24960
TTL: 235
Packet length: 40
TOS: 0x00
This report (for 20.81.49.255) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 RAP |
2026-06-13 12:48:20 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 Axel |
Blocked by UFW on MVI [8282/tcp] | SPT: 24960 | TTL: 238 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6363. Single burst at 2026-06-13 11:00 UTC.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 6363)
Source port: 24960
TTL: 235
Packet length: 40
TOS: 0x00
This report (for 20.81.49.255) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/4000 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9999
|
Port Scan | |
| Anonymous |
Drop from IP address 20.81.49.255 to tcp-port 9090
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown