JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.163.8.207

20.163.8.207 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 50%: ?

50%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.163.8.207

Whois 20.163.8.207

IP Abuse Reports for 20.163.8.207:

This IP address has been reported a total of 29 times from 13 distinct sources. 20.163.8.207 was first reported on October 3rd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 abuseipdb.amaze321	2026-10-17 21:37:24 (4 days ago)	Automated reconnaissance: repeated requests for sensitive/non-existent paths.	Web App Attack Bad Web Bot
🇪🇸 tutaim.com	2026-10-04 22:00:13 (2 weeks ago)	⛔ [05/10/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). ... show more ⛔ [05/10/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). Potential malicious activity. show less	Brute-Force SSH Web App Attack FTP Brute-Force
🇭🇺 kranem	2026-10-04 12:00:11 (2 weeks ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: //vendor/phpunit/phpunit/phpunit.xsd Timestamp: 2026-10-04T09:35:51Z User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-04 11:25:13 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 20.163.8.207 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 20.163.8.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:25:07.577974 2026] [security2:error] [pid 31746:tid 31765] [client 20.163.8.207:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mindgardens.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mindgardens.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "asI3k8JV0r0BHNvDUdTTJQAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-04 09:46:22 (2 weeks ago)	Automated report: 1 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: ... show more Automated report: 1 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: /vendor/phpunit/phpunit/phpunit.xsd show less	Bad Web Bot Web App Attack
Anonymous	2026-10-04 08:47:54 (2 weeks ago)	Automatically blocked after 1 security event. Observed PHPUnit exploit probes. Source: Cloudflare se ... show more Automatically blocked after 1 security event. Observed PHPUnit exploit probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇩🇪 maxpower	2026-10-04 08:20:35 (2 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.163.8.207 (US/United States/-): 1 in ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.163.8.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.163.8.207 - - [04/Oct/2026:10:20:33 +0200] "GET //vendor/phpunit/phpunit/phpunit.xsd HTTP/2.0" 200 4820 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" "20.163.8.207" host=masterlabvideoproduzioni.it show less	Port Scan
🇵🇰 sbk97 (https://sayor.net)	2026-10-04 07:42:55 (2 weeks ago)	SAYOR honeypot: observed attack //vendor/phpunit/phpunit/phpunit.xsd	Brute-Force
🇵🇱 Budyn	2026-10-04 07:13:09 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh \| URI: //vendor/phpunit/phpunit/phpunit.xsd \| UA: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-04 07:07:49 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇪🇸 tutaim.com	2026-10-04 05:00:02 (2 weeks ago)	⛔ [04/10/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). ... show more ⛔ [04/10/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). Potential malicious activity. show less	Brute-Force SSH Web App Attack FTP Brute-Force
🇺🇸 TPI-Abuse	2026-10-04 04:14:14 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 20.163.8.207 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 20.163.8.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:14:07.765396 2026] [security2:error] [pid 26001:tid 26001] [client 20.163.8.207:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bradleybarefoot.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bradleybarefoot.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "asHSjwHto_4Dpo6ii6DVpAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-10-04 00:51:38 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: //vendor/phpunit/phpunit/phpunit.xsd \| UA: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 maxpower	2026-10-04 00:08:30 (2 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.163.8.207 (US/United States/-): 1 in ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.163.8.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.163.8.207 - - [04/Oct/2026:02:08:27 +0200] "GET //vendor/phpunit/phpunit/phpunit.xsd HTTP/1.1" 200 12046 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" "20.163.8.207" host=vortici.it show less	Port Scan
🇵🇱 Budyn	2026-10-03 23:35:21 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.space \| URI: //vendor/phpunit/phpunit/phpunit.xsd \| UA: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.242.102.7

🇺🇸 129.121.127.153

🇺🇸 129.121.102.82

🇮🇹 87.1.2.56

🇪🇸 79.117.252.212

🇸🇬 35.240.188.199

🇯🇵 34.84.180.62

🇹🇼 211.22.123.63

🇺🇸 174.138.65.5

🇮🇳 171.76.108.235

🇺🇸 159.89.92.100

🇩🇪 130.12.180.164

🇱🇹 62.60.130.253

🇩🇪 35.242.232.135

🇪🇸 34.175.150.79

🇳🇱 34.34.118.125

🇺🇸 24.234.232.64

🇮🇳 117.218.75.251

🇮🇩 103.118.82.254

🇸🇪 94.255.255.26