20.98.155.81

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
152 reports
91 reporters Β· latest 1 hour ago
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country πŸ‡ΊπŸ‡Έ United States of America
City Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.98.155.81

This IP address has been reported a total of 152 times from 91 distinct sources. 20.98.155.81 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 37 reports; Germany with 28 reports; Hong Kong with 18 reports. The most common categories in these recent reports were: Port Scan 122 times; Hacking 41 times; Brute-Force 20 times; Web App Attack 15 times; Bad Web Bot 6 times; Other 20 times.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ RAP
2026-10-20 20:10:36 UTC Unauthorized activity to TCP port 135.
Port Scan
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡©πŸ‡ͺ EinfxchFinn
Unauthorized connection attempt to port 3000 from 20.98.155.81
Port Scan
πŸ‡§πŸ‡· diego
Port Scan
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 3 MSSQL connection/probe attempts over the last 24h (latest 2026-10-20T08:31Z).
Hacking Brute-Force
πŸ‡¦πŸ‡Ί LiftUp Hosting
Honeypot hit: Unauthorized traffic (1000 bytes of payload); 2000 [1] TCP
Port Scan
πŸ‡·πŸ‡Έ Smel
SIP/5060 Probe, Scan, BF, Hack -
Fraud VoIP Port Scan Hacking Brute-Force
πŸ‡«πŸ‡· agroman93
T-Pot honeypot: 3 hits on ports [1521] (automated)
Port Scan
πŸ‡©πŸ‡ͺ Admins@FBN
FW-PortScan: Traffic Blocked srcport=42898 dstport=4567
Port Scan
Anonymous
Port Scan
πŸ‡«πŸ‡· EvoX
πŸ›‘οΈ Honeypot [bsts-tpot-hive]: SSH handshake/banner (12 bytes of payload); 8022 [1] TCP
SSH
πŸ‡©πŸ‡ͺ Admins@FBN
FW-PortScan: Traffic Blocked srcport=59325 dstport=427
Port Scan
Anonymous
Web App Attack
πŸ‡­πŸ‡° sandra361
Port Scan
πŸ‡¦πŸ‡Ί KevinNeale
Fail2Ban recidive block for repeated malicious authentication attempts.
Web App Attack

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡ΊπŸ‡Έ 216.126.34.194
πŸ‡ΈπŸ‡· 190.98.110.233
πŸ‡¨πŸ‡³ 182.117.69.59
πŸ‡ΉπŸ‡Ό 172.68.87.167
πŸ‡ΊπŸ‡Έ 167.172.194.86
πŸ‡«πŸ‡· 161.97.76.56
πŸ‡΅πŸ‡° 144.48.130.189
πŸ‡©πŸ‡ͺ 139.59.208.225
πŸ‡ΊπŸ‡Έ 129.121.115.239
πŸ‡¨πŸ‡³ 121.15.140.235
πŸ‡©πŸ‡ͺ 118.193.58.20
πŸ‡¨πŸ‡³ 106.59.139.77
πŸ‡ΏπŸ‡¦ 102.64.41.42
πŸ‡¦πŸ‡Ή 84.115.211.5
πŸ‡ΈπŸ‡ͺ 81.227.54.149
πŸ‡·πŸ‡Ί 81.28.167.30
πŸ‡·πŸ‡Ί 77.66.192.139
πŸ‡§πŸ‡· 45.166.188.48
πŸ‡§πŸ‡ͺ 35.205.181.62
πŸ‡¦πŸ‡Ί 20.53.249.197