AbuseIPDB » 20.172.15.200

20.172.15.200 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 37%: ?

37%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 20.172.15.200

Whois 20.172.15.200

IP Abuse Reports for 20.172.15.200:

This IP address has been reported a total of 42 times from 27 distinct sources. 20.172.15.200 was first reported on May 20th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-05-22 20:08:19 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-21 20:08:17 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
octageeks.com	2025-05-21 04:06:34 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
ipblock.com	2025-05-21 02:17:00 (1 month ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Site.eu	2025-05-21 01:56:37 (1 month ago)	Excessive multi-domain requests	Brute-Force
strefapi_com	2025-05-21 01:38:25 (1 month ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
cmbplf	2025-05-21 01:27:15 (1 month ago)	118 requests with url.path */wp.php	Brute-Force Bad Web Bot
ghostwarriors	2025-05-21 01:20:09 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
cybertailor	2025-05-21 01:13:15 (1 month ago)	2025/05/21 06:13:13 [error] 6737#0: *699296 limiting requests, excess: 10.252 by zone "lr_slow", cli ... show more2025/05/21 06:13:13 [error] 6737#0: *699296 limiting requests, excess: 10.252 by zone "lr_slow", client: 20.172.15.200, server: levochki.sysrq.in, request: "GET //man.php HTTP/1.1", host: "levochki.sysrq.in" 2025/05/21 06:13:13 [error] 6737#0: *699296 limiting requests, excess: 10.039 by zone "lr_slow", client: 20.172.15.200, server: levochki.sysrq.in, request: "GET //flower.php HTTP/1.1", host: "levochki.sysrq.in" ... show less	Bad Web Bot
TPI-Abuse	2025-05-21 01:06:15 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.172.15.200 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 20.172.15.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 20 21:06:08.776084 2025] [security2:error] [pid 1741295:tid 1741295] [client 20.172.15.200:1728] [client 20.172.15.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "letmespeakpodcast.com"] [uri "/wp-config.php"] [unique_id "aC0nADqqMVeXoV-TXjmQWgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
COMAITE	2025-05-21 01:01:42 (1 month ago)	Multiple web server 400 error codes from same source ip 20.172.15.200.	Web App Attack
Cloudkul Cloudkul	2025-05-21 00:42:27 (1 month ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
ipblock.com	2025-05-21 00:17:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2025-05-20 23:55:11 (1 month ago)	Bot / seems abusive / Apache connections: 55	DDoS Attack Web Spam Bad Web Bot Web App Attack
statistics indonesia	2025-05-20 23:45:37 (1 month ago)	WP Admin Scan Activities	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩