AbuseIPDB » 20.171.207.80

20.171.207.80 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 91%: ?

91%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 20.171.207.80

Whois 20.171.207.80

IP Abuse Reports for 20.171.207.80:

This IP address has been reported a total of 211 times from 81 distinct sources. 20.171.207.80 was first reported on November 14th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
cmbplf	2025-07-17 15:59:12 (1 day ago)	2.587 requests from abuseipdb.com blacklisted IP (2mos2w4dfromnow)	Brute-Force Bad Web Bot
TPI-Abuse	2025-07-17 15:15:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.171.207.80 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 20.171.207.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 11:15:44.948985 2025] [security2:error] [pid 9554:tid 9617] [client 20.171.207.80:47220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bh4sale.omegaoak.com"] [uri "/composer.lock"] [unique_id "aHkToBgK0JLcozZGBD8DOwAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
LotPhantom	2025-07-17 05:54:57 (1 day ago)	20.171.207.80 - - [17/Jul/2025:05:53:57 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit ... show more20.171.207.80 - - [17/Jul/2025:05:53:57 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" "0" ... show less	Bad Web Bot Web App Attack
TPI-Abuse	2025-07-17 03:54:16 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 20.171.207.80 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 20.171.207.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 23:54:09.690850 2025] [security2:error] [pid 3072:tid 3072] [client 20.171.207.80:56442] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stantontownship.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stantontownship.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHhz4Y6ZWO6Tcbjtz4TdQgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Mehmet_The_Script_Kiddie	2025-07-13 18:17:56 (5 days ago)	CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.	Bad Web Bot Web App Attack
Sylant	2025-07-11 15:53:50 (1 week ago)	Triggered WAF (firewallCustom) from US Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show moreTriggered WAF (firewallCustom) from US Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) show less	Bad Web Bot
bescared	2025-07-11 15:06:56 (1 week ago)	F2B - Malicious activity detected. Too many 403.	Hacking Brute-Force Bad Web Bot Web App Attack
bescared	2025-07-10 13:48:30 (1 week ago)	F2B - Malicious activity detected. Too many 403.	Hacking Brute-Force Bad Web Bot Web App Attack
cmbplf	2025-07-10 03:59:38 (1 week ago)	2.564 requests from abuseipdb.com blacklisted IP (1yr9mos2wfromnow)	Brute-Force Bad Web Bot
Swiptly	2025-07-10 01:41:56 (1 week ago)	Aggressive SEO Bots ...	Bad Web Bot
Carsten	2025-07-07 23:27:49 (1 week ago)	bad web bot	Bad Web Bot
Carsten	2025-07-05 10:19:09 (1 week ago)	bad web bot	Bad Web Bot
Carsten	2025-07-03 02:57:28 (2 weeks ago)	bad web bot	Bad Web Bot
trung.fun	2025-07-02 09:15:35 (2 weeks ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
Starburst SysOp Team	2025-06-30 09:59:21 (2 weeks ago)	PHP Injection Attack: High-Risk PHP Function Name Found. Matched phrase "printf" at REQUEST_FILENAME ... show morePHP Injection Attack: High-Risk PHP Function Name Found. Matched phrase "printf" at REQUEST_FILENAME. (933150-stl2-14) show less	Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩