AbuseIPDB » 20.171.207.244

20.171.207.244 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 71%: ?

71%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 20.171.207.244

Whois 20.171.207.244

IP Abuse Reports for 20.171.207.244:

This IP address has been reported a total of 191 times from 70 distinct sources. 20.171.207.244 was first reported on November 16th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-04-17 02:56:17 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 22:56:14.219553 2025] [security2:error] [pid 17461:tid 17461] [client 20.171.207.244:45972] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||caribbeancoralinstitute.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caribbeancoralinstitute.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aABtzoOAIq-PFBE6QGT-RwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2025-04-12 20:02:01 (3 months ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
RLDD	2025-04-11 19:50:45 (3 months ago)	WP probing -hux	Web App Attack
TPI-Abuse	2025-04-09 01:55:25 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 21:55:18.857873 2025] [security2:error] [pid 3091583:tid 3091583] [client 20.171.207.244:58048] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.theamarals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.theamarals.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z_XThgerDwdiRsCbXye0mwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2025-04-07 11:00:42 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
backslash	2025-04-04 03:10:06 (3 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
Swiptly	2025-03-31 06:20:32 (3 months ago)	Aggressive SEO Bots ...	Bad Web Bot
Anymous	2025-03-30 00:16:46 (3 months ago)	GET / HTTP/1.1 403 4659 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML	Bad Web Bot
TPI-Abuse	2025-03-28 11:09:56 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 28 07:09:49.111584 2025] [security2:error] [pid 94672:tid 94672] [client 20.171.207.244:45858] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||noisepie.com|F|2"] [data ".bat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "noisepie.com"] [uri "/video/tcow96.bat"] [unique_id "Z-aDffQ8-WFpbBNlOieBlQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-03-28 06:24:03 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 28 02:23:56.458139 2025] [security2:error] [pid 22852:tid 22852] [client 20.171.207.244:48156] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "Z-ZAfDXr8NTE7Zf94XO32AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-03-28 04:43:19 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 28 00:43:12.619171 2025] [security2:error] [pid 29007:tid 29065] [client 20.171.207.244:52042] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.east-lease.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.east-lease.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z-Yo4I4G_YkwL8pSmhzZ9QAAAZU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-25 09:49:05 (3 months ago)	Brute forcing Wordpress login	Hacking Web App Attack
TPI-Abuse	2025-03-25 02:35:48 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 22:35:41.120623 2025] [security2:error] [pid 273734:tid 273734] [client 20.171.207.244:58592] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.babylontravelone.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z-IWfbFQHM2GeKMBaV2InQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-03-24 12:30:14 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210730) triggered by 20.171.207.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 08:30:10.436000 2025] [security2:error] [pid 13063:tid 13063] [client 20.171.207.244:50604] [client 20.171.207.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.raintechgutters.com|F|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/local-gutter-services-orlando/www.raintechgutters.com"] [unique_id "Z-FQUlfiVS6sWC-lkILoRQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
penjaga BRIN	2025-03-23 22:00:07 (3 months ago)	apache-auth-111	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩