JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.169.80.255

20.169.80.255 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.169.80.255

Whois 20.169.80.255

IP Abuse Reports for 20.169.80.255:

This IP address has been reported a total of 143 times from 70 distinct sources. 20.169.80.255 was first reported on November 9th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:55:15 (2 years ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2023-12-02 21:00:08 (2 years ago)	GET /.env HTTP/1.1	Web App Attack
🇩🇪 ISPLtd	2023-12-02 18:50:30 (2 years ago)	20.169.80.255 - - [02/Dec/2023:10:50:29 -0800] "GET /.env ...	Hacking Web App Attack
🇷🇺 OK	2023-12-02 17:40:04 (2 years ago)	HTTP/HTTPS	Hacking Web App Attack
🇦🇺 Ross Wheatley	2023-12-02 16:39:58 (2 years ago)	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 404 492 - python-requests/2.26.0	Brute-Force Web App Attack
🇫🇷 geot	2023-12-02 14:13:38 (2 years ago)	POST / HTTP/1.1 GET /.env HTTP/1.1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	Port Scan Hacking Web App Attack
🇩🇪 Tamsy	2023-12-02 13:01:43 (2 years ago)	Web application vulnerability scanning	Web App Attack
🇩🇪 ISPLtd	2023-12-02 12:20:03 (2 years ago)	20.169.80.255 - - [02/Dec/2023:08:20:02 -0400] "GET /.env 20.169.80.255 - - [02/Dec/2023:08:20:03 -0 ... show more 20.169.80.255 - - [02/Dec/2023:08:20:02 -0400] "GET /.env 20.169.80.255 - - [02/Dec/2023:08:20:03 -0400] "POST / ... show less	Hacking Web App Attack
🇳🇱 Pornomens	2023-12-02 11:28:40 (2 years ago)	20.169.80.255 - - [02/Dec/2023:12:28:39 +0100] "GET /.env HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux; ... show more 20.169.80.255 - - [02/Dec/2023:12:28:39 +0100] "GET /.env HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 20.169.80.255 - - [02/Dec/2023:12:28:39 +0100] "POST / HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 20.169.80.255 - - [02/Dec/2023:12:28:39 +0100] "GET /.env HTTP/1.1" 403 5379 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
🇩🇪 ut-addicted.com	2023-12-02 11:27:29 (2 years ago)	\[Sat Dec 02 12:27:27.748232 2023\] \[:error\] \[pid 3691:tid 139913441801984\] \[client 20.169.80.2 ... show more \[Sat Dec 02 12:27:27.748232 2023\] \[:error\] \[pid 3691:tid 139913441801984\] \[client 20.169.80.255:60369\] \[client 20.169.80.255\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZWsUn0RKdKStppsLhzkfIQAAAMg"\] show less	Brute-Force Web App Attack
🇺🇸 jcbriar	2023-12-02 10:16:13 (2 years ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇵🇪 inspectorperuano	2023-12-02 06:10:23 (2 years ago)	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.	Web App Attack
🇫🇷 pigro	2023-12-02 06:04:05 (2 years ago)	20.169.80.255 - - [02/Dec/2023:07:04:01 +0100] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Linux; ... show more 20.169.80.255 - - [02/Dec/2023:07:04:01 +0100] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 20.169.80.255 - - [02/Dec/2023:07:04:03 +0100] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
Anonymous	2023-12-02 05:16:29 (2 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 ISPLtd	2023-12-02 03:33:20 (2 years ago)	20.169.80.255 - - [01/Dec/2023:20:33:20 -0700] "GET /.env ...	Hacking Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:c300:1000::389

🇩🇪 213.209.159.11

🇻🇳 210.245.20.230

🇺🇸 174.138.181.182

🇬🇧 86.25.55.241

🇮🇳 182.95.106.138

🇺🇸 147.185.132.101

🇺🇸 104.155.154.215

🇫🇷 104.29.151.116

🇺🇸 50.223.176.171

🇺🇸 162.216.149.74

🇭🇰 152.32.254.89

🇨🇳 124.88.174.143

🇻🇳 113.160.16.194

🇱🇹 62.60.130.219

🇦🇺 139.216.6.17

🇩🇪 93.152.221.252

🇫🇷 91.231.89.183

🇺🇸 38.175.103.191

🇱🇻 31.76.104.19