AbuseIPDB » 20.171.22.34
20.171.22.34
This IP was reported 10 times. Confidence of
Abuse
is 40% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Phoenix, Arizona
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.171.22.34 :
This IP address has been reported a total of
10
times from
9 distinct
sources.
20.171.22.34 was first reported on
July 9th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇾
lns.bz
2026-09-01 17:42:38
(1 week ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
MPL
2026-09-01 16:06:42
(1 week ago)
tcp port scan (24 or more attempts)
Port Scan
🇩🇪
Uwe Sarpe
2026-09-01 14:06:01
(1 week ago)
[Tue Sep 01 16:05:50.873404 2026] [access_compat:error] [pid 123576:tid 123576] [client 20.171.22.34 ...
show more
[Tue Sep 01 16:05:50.873404 2026] [access_compat:error] [pid 123576:tid 123576] [client 20.171.22.34:54977] AH01797: client denied by server configuration: /var/www/.git
[Tue Sep 01 16:05:54.011946 2026] [access_compat:error] [pid 127466:tid 127466] [client 20.171.22.34:54930] AH01797: client denied by server configuration: /var/www/.git
[Tue Sep 01 16:05:58.892515 2026] [access_compat:error] [pid 123564:tid 123564] [client 20.171.22.34:54944] AH01797: client denied by server configuration: /var/www/.env.local
[Tue Sep 01 16:05:59.839787 2026] [access_compat:error] [pid 123571:tid 123571] [client 20.171.22.34:55002] AH01797: client denied by server configuration: /var/www/.env.production
[Tue Sep 01 16:06:01.004379 2026] [access_compat:error] [pid 127463:tid 127463] [client 20.171.22.34:54373] AH01797: client denied by server configuration: /var/www/.env.backup
...
show less
Brute-Force
Web App Attack
2026-09-01 02:44:02
(1 week ago)
denied traffic to a non-approved destination port. destination port 2087.
Port Scan
🇺🇸
TPI-Abuse
2026-09-01 01:29:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 20.171.22.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 20.171.22.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:29:37.927605 2026] [security2:error] [pid 30042:tid 30050] [client 20.171.22.34:23584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.131"] [uri "/.env"] [unique_id "apYqgV3JdY86sQbtvJXhHQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Axel
2026-08-28 15:22:47
(2 weeks ago)
Blocked by UFW on LAXHH [2095/tcp] | SPT: 3328 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github ...
show more
Blocked by UFW on LAXHH [2095/tcp] | SPT: 3328 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
MPL
2026-08-28 15:21:46
(2 weeks ago)
tcp port scan (18 or more attempts)
Port Scan
🇮🇹
VHosting
2026-08-07 13:15:03
(1 month ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇩🇪
www.fransveldman.world
2026-07-30 04:08:51
(1 month ago)
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇫🇷
SUNDAY Technologies
2026-07-09 00:10:30
(2 months ago)
...
Jul 9 02:10:29 drop SRC=20.171.22.34 LEN=60 PROTO=TCP DPT=8080 ACK=0 WINDOW=64240 SY ...
show more
...
Jul 9 02:10:29 drop SRC=20.171.22.34 LEN=60 PROTO=TCP DPT=8080 ACK=0 WINDOW=64240 SYN URGP=0 MARK=0x0
show less
Port Scan
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: