JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.97.62.120

23.97.62.120 was found in our database!

This IP was reported 463 times. Confidence of Abuse is 76%: ?

76%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.97.62.120

Whois 23.97.62.120

IP Abuse Reports for 23.97.62.120:

This IP address has been reported a total of 463 times from 250 distinct sources. 23.97.62.120 was first reported on December 9th 2024, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 avgsmoe	2026-06-05 08:00:07 (23 hours ago)	REPEAT offender. Observed 593 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-05-27 21:59:06 (1 week ago)	REPEAT offender. Observed 485 times.	Port Scan Brute-Force
🇺🇸 Vano Ganzzz	2026-05-27 02:59:08 (1 week ago)	Triggered Cloudflare WAF (ratelimit) from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) ... show more Triggered Cloudflare WAF (ratelimit) from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (HEAD method) Endpoint: / Timestamp: 2026-05-27T02:59:08Z Ray ID: a021c3082c1581c2 UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b2) Gecko Camino/0.9+ show less	Bad Web Bot
🇯🇵 SentinalX by uzumaru	2026-05-27 02:41:35 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: rate-limit-1.dstatbot.win:443 show less	Open Proxy Port Scan
🇺🇸 cazae	2026-05-22 14:57:31 (2 weeks ago)	Unauthorized attempt on debian [2087/tcp] Source port: 27200 TTL: 238 Packet length: 44 TOS: 0x00 h ... show more Unauthorized attempt on debian [2087/tcp] Source port: 27200 TTL: 238 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-22 14:15:31 (2 weeks ago)	2026-05-22T15:15:30.528737+01:00 vps kernel: [41199509.135675] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-22T15:15:30.528737+01:00 vps kernel: [41199509.135675] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=23.97.62.120 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=10612 PROTO=TCP SPT=27200 DPT=2087 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 iNetWorker	2026-05-22 14:13:01 (2 weeks ago)	trying to access non-authorized port	Port Scan
🇺🇸 avgsmoe	2026-05-21 20:12:31 (2 weeks ago)	REPEAT offender. Observed 321 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-05-20 19:00:02 (2 weeks ago)	CROWDSEC offender. Observed 277 times.	Port Scan Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-05-14 23:23:52 (3 weeks ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/23.97.62.120 2026-05-14 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/23.97.62.120 2026-05-14 23:19:57 //c3.dstatbot.win:443 2026-05-14 23:19:57 //c3.dstatbot.win:443 2026-05-14 23:19:56 //c3.dstatbot.win:443 show less	Web App Attack
Anonymous	2026-05-13 16:23:50 (3 weeks ago)	May 13 12:23:46 localhost kernel: [107034782.464636] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 13 12:23:46 localhost kernel: [107034782.464636] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.97.62.120 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=234 ID=29570 PROTO=TCP SPT=44096 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 12:23:46 localhost kernel: [107034782.464657] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.97.62.120 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=234 ID=29570 PROTO=TCP SPT=44096 DPT=2087 SEQ=2533759963 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 12:23:50 localhost kernel: [107034786.249146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.97.62.120 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=234 ID=29570 PROTO=TCP SPT=44096 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 12:23:50 localhost kernel: [107034786.249172] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.97.62.120 DST=[mungedIP2] LEN=40 TOS=0x00 show less	Port Scan
🇨🇦 unullable	2026-05-13 13:25:58 (3 weeks ago)	CPoT triggered at tcp/2087.'/login' probe,PYTHON-REQUESTS/2.32.5	Hacking
🇺🇸 drewf.ink	2026-05-13 12:33:16 (3 weeks ago)	[12:33] Port scanning. Port(s) scanned: TCP/2087	Port Scan
🇺🇸 drewf.ink	2026-05-13 12:03:36 (3 weeks ago)	[12:03] Port scanning. Port(s) scanned: TCP/2087	Port Scan
🇩🇪 ValtonTahiri	2026-05-13 11:20:38 (3 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=23.97.62.120; proto=TCP; source_port=44096; target_port=2087; flags=SYN show less	Port Scan

Showing 1 to 15 of 463 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 202.8.42.242

🇬🇧 74.63.26.238

🇩🇪 69.5.169.225

🇻🇳 14.240.228.99

🇰🇷 222.236.155.146

🇺🇸 207.90.244.17

🇧🇪 198.235.24.225

🇩🇪 185.220.101.38

🇧🇷 177.16.244.39

🇳🇱 176.65.148.132

🇧🇷 108.165.230.100

🇨🇳 106.12.145.153

🇭🇰 103.230.240.59

🇫🇷 80.241.220.242

🇺🇸 69.136.25.40

🇺🇸 64.150.165.48

🇺🇸 64.62.156.196

🇨🇳 115.190.230.82

🇺🇸 103.234.62.115

🇵🇰 103.156.152.10