20.84.158.4

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
8 reports
8 reporters Β· latest 4 days ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Des Moines, Iowa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
8 from 8 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡«πŸ‡· France 2 πŸ‡ΊπŸ‡Έ United States of America 2 πŸ‡©πŸ‡ͺ Germany 1
Most common categories Port Scan 7 Hacking 3 Brute-Force 1 Open Proxy 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ www.winos.me
Shield: Layer4 Port 9 Trap
Port Scan Hacking
πŸ‡ΉπŸ‡· pashait
Auto-blocked by Seczar SecureOps β€” Database Service Brute Force (5 events in 5min) at 2026-11-01 01:02
Brute-Force SSH
πŸ‡©πŸ‡ͺ bancix
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 3306)
Port Scan
πŸ‡ΊπŸ‡Έ Necrotic
Unsolicited connection attempt to a port with no service behind it (scan trap). Automated report.
Port Scan
πŸ‡«πŸ‡· cityhunter_rhone
Connection attempts on sensitive port(s) 3306 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
πŸ‡«πŸ‡· security.rdmc.fr
Port Scan Attack proto:TCP src:48160 dst:3306
Port Scan
πŸ‡³πŸ‡± Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 3306/MySQL | Proto: TCP(1) | Flags: all SYN | TTL: 229 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-01T00:05:50Z
Port Scan Hacking
πŸ‡―πŸ‡΅ demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: boclone.shop:443
Open Proxy Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡¨πŸ‡³ 218.15.224.102
πŸ‡ΊπŸ‡Έ 173.46.91.203
πŸ‡ΊπŸ‡Έ 173.46.91.167
πŸ‡ΊπŸ‡Έ 146.70.11.60
πŸ‡ΊπŸ‡Έ 95.181.238.189
πŸ‡¬πŸ‡§ 87.236.176.26
πŸ‡³πŸ‡± 34.187.54.206
πŸ‡³πŸ‡± 193.47.62.69
πŸ‡­πŸ‡° 154.93.84.22
πŸ‡°πŸ‡· 114.129.122.212
πŸ‡―πŸ‡΅ 104.22.197.40
πŸ‡ΊπŸ‡Έ 70.164.32.144
πŸ‡ΊπŸ‡Έ 64.62.197.94
πŸ‡¬πŸ‡§ 31.14.254.12
πŸ‡ΊπŸ‡Έ 216.180.246.40
πŸ‡ΊπŸ‡Ώ 213.230.100.154
πŸ‡§πŸ‡ͺ 198.235.24.229
πŸ‡ΊπŸ‡Έ 146.70.173.64
πŸ‡°πŸ‡· 121.142.200.226
πŸ‡»πŸ‡³ 103.53.158.121
feedback