JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.12.79.171

20.12.79.171 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.12.79.171

Whois 20.12.79.171

IP Abuse Reports for 20.12.79.171:

This IP address has been reported a total of 266 times from 209 distinct sources. 20.12.79.171 was first reported on March 8th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-04 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=87, sources=1)	Hacking Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-28 20:12:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-03-27 14:55:23 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Gem	2026-03-26 12:14:47 (2 months ago)	Unauthorized web scan.	Web App Attack
🇧🇪 Ivo Vynckier	2026-03-12 14:03:00 (2 months ago)	20.12.79.171 - - [08/Mar/2026:22:23:22 +0100] "GET /simple.php HTTP/1.1" 301 296 "-" "-" 20.12.79.1 ... show more 20.12.79.171 - - [08/Mar/2026:22:23:22 +0100] "GET /simple.php HTTP/1.1" 301 296 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:22 +0100] "GET /file2.php HTTP/1.1" 301 295 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:23 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 308 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:23 +0100] "GET /wp-info.php HTTP/1.1" 301 297 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:23 +0100] "GET /lock360.php HTTP/1.1" 301 297 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:24 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 6263 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:24 +0100] "GET /file.php HTTP/1.1" 404 27 "-" "-" 20.12.79.171 - - [08/Mar/2026:22:23:24 +0100] "GET /baxa1.phP8 HTTP/1.1" 404 6263 "-" "-" show less	Web App Attack
🇸🇪 SkyDancer	2026-03-10 16:51:23 (2 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇳🇱 Site.eu	2026-03-10 16:14:43 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇨🇳 ThreatBook.io	2026-03-10 02:45:47 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.12.79.171 2026-03-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.12.79.171 2026-03-09 05:40:16 /file2.php 2026-03-09 05:40:01 /wp-content/plugins/hellopress/wp_filemanager.php 2026-03-09 05:40:13 /simple.php 2026-03-09 05:40:17 /wp-admin/wp-conflg.php show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-09 23:05:05 (3 months ago)	Auto-ban: 202 malicious requests on 2026-03-08 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 202 malicious requests on 2026-03-08 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇹🇷 rtbh.com.tr	2026-03-09 20:11:58 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-09 17:03:13 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇫🇷 geot	2026-03-09 12:12:40 (3 months ago)	WordPress scanning bot	Hacking Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-03-09 09:36:42 (3 months ago)	scans/SQL injection/spam posts : 226 queries	Web App Attack SQL Injection
🇭🇺 kranem	2026-03-09 09:01:46 (3 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Micro ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /file.php Timestamp: 2026-03-08T21:19:45Z User-Agent: empty show less	Bad Web Bot
🇺🇸 chronos	2026-03-09 06:16:47 (3 months ago)	[AUTORAVALT][[09/03/2026 - 03:16:46 -03:00 UTC] Attack from [Microsoft Corporation] [20.12.79.171] A ... show more [AUTORAVALT][[09/03/2026 - 03:16:46 -03:00 UTC] Attack from [Microsoft Corporation] [20.12.79.171] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.107

🇵🇾 186.182.233.254

🇨🇳 123.13.64.164

🇺🇸 43.166.128.86

🇰🇿 37.151.163.110

🇳🇱 34.178.181.35

🇩🇪 148.251.41.182

🇨🇳 111.26.63.85

🇨🇦 85.217.149.56

🇫🇮 80.223.192.112

🇺🇸 44.190.113.71

🇭🇰 13.70.2.225

🇭🇰 199.45.154.190

🇳🇱 165.22.198.1

🇨🇳 120.48.135.189

🇻🇳 103.216.117.118

🇩🇪 91.204.46.157

🇷🇴 80.94.92.182

🇺🇸 65.49.1.70

🇳🇱 45.148.10.183