JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.172.192.241

20.172.192.241 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.172.192.241

Whois 20.172.192.241

IP Abuse Reports for 20.172.192.241:

This IP address has been reported a total of 38 times from 32 distinct sources. 20.172.192.241 was first reported on April 10th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-06-16 03:13:56 (6 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 20.172.192.241 - - [14/Jun/2026:18:05:36 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 20.172.192.241 - - [14/Jun/2026:18:05:36 -0300] "GET /.git/config HTTP/1.1" 404 18193 show less	Bad Web Bot
🇷🇸 Scan	2026-06-15 00:40:49 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 ✨	2026-06-15 00:03:19 (1 day ago)	Domain : itrap.co.uk Rule : env 2026-06-15 00:02:26 W3SVC29 PLESK76 217.194.212.111 GET /.env.backup ... show more Domain : itrap.co.uk Rule : env 2026-06-15 00:02:26 W3SVC29 PLESK76 217.194.212.111 GET /.env.backup - 80 - 20.172.192.241 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 - - 217.194.212.111 301 0 0 542 219 139 - - show less	Hacking SQL Injection
Anonymous	2026-06-14 21:37:13 (1 day ago)	20.172.192.241 - - [14/Jun/2026:14:37:12 -0700] "GET /.env.local HTTP/1.1" 403 397 "-" "Mozilla/5.0 ... show more 20.172.192.241 - - [14/Jun/2026:14:37:12 -0700] "GET /.env.local HTTP/1.1" 403 397 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force SSH
Anonymous	2026-06-14 21:27:22 (1 day ago)		Web App Attack
🇧🇷 Peregrine	2026-06-14 21:05:46 (1 day ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 20.172.192.241 - - [14/Jun/2026:18:05:36 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 20.172.192.241 - - [14/Jun/2026:18:05:36 -0300] "GET /.git/config HTTP/1.1" 404 18193 show less	Bad Web Bot
🇺🇸 Axel	2026-06-14 20:55:27 (1 day ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 65228 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 65228 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Selckie	2026-06-13 13:53:59 (2 days ago)	fail2ban: NGINX unusual impact	Web App Attack
🇷🇸 Scan	2026-06-03 02:21:48 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇧🇾 lns.bz	2026-06-02 22:46:14 (1 week ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 JPPO	2026-06-02 22:16:29 (1 week ago)	4 hits : GET /.env or GET //.env with or without prefix /api,/config ...	Web App Attack
🇳🇱 e.fierstra	2026-06-02 21:59:06 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-02 21:42:21 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 RAP	2026-06-02 21:41:19 (1 week ago)	2026-06-02 21:41:19 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇫🇷 guillaume illien	2026-06-02 20:00:11 (1 week ago)	20.172.192.241 - - [02/Jun/2026:20:00:00 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compa ... show more 20.172.192.241 - - [02/Jun/2026:20:00:00 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.172.192.241 - - [02/Jun/2026:20:00:01 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.172.192.241 - - [02/Jun/2026:20:00:03 +0000] "GET /.env.save HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 20.172.192.241 - - [02/Jun/2026:20:00:05 +0000] "GET /wp-config.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.172.192.241 - - [02/Jun/2026:20:00:07 +0000] "GET /wp-config.php.bak HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.172.192.241 - - [02/Jun/2026:20:00:10 +0000] "GET /phpinfo.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show less	Hacking Brute-Force Web App Attack SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.212

🇭🇺 193.68.57.43

🇰🇷 183.109.232.182

🇧🇷 181.189.118.116

🇩🇪 178.105.164.33

🇵🇰 110.93.224.226

🇷🇺 88.205.172.170

🇺🇸 76.130.1.49

🇮🇳 47.15.98.120

🇩🇪 46.249.99.46

🇬🇧 35.203.211.58

🇨🇳 27.8.44.168

🇶🇦 20.173.116.24

🇻🇳 14.161.18.1

🇻🇪 181.208.184.190

🇬🇧 165.232.33.59

🇮🇩 103.59.161.65

🇺🇸 75.197.64.15

🇫🇷 51.159.103.72

🇳🇱 45.148.10.147