JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.172.37.232

20.172.37.232 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.172.37.232

Whois 20.172.37.232

IP Abuse Reports for 20.172.37.232:

This IP address has been reported a total of 12 times from 8 distinct sources. 20.172.37.232 was first reported on May 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-06-03 05:41:30 (1 week ago)	Port Scan ...	Port Scan
Anonymous	2026-06-03 05:37:26 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 Enno	2026-06-03 05:35:33 (1 week ago)	P04::Fail2Ban: automated bot scanning / credential probing detected.	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 04:59:37 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 20.172.37.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.172.37.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:59:34.438249 2026] [security2:error] [pid 31219:tid 31219] [client 20.172.37.232:5931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.222"] [uri "/.git/HEAD"] [unique_id "ah-0tnuBqr4RgWfOED1F7QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Little Iguana	2026-06-03 04:21:03 (1 week ago)	trying to access non-authorized port	Port Scan
🇬🇧 PeravixGroup	2026-06-03 04:14:01 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-05-21 00:26:49 (3 weeks ago)	(PERMBLOCK) 20.172.37.232 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 20.172.37.232 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-20 23:55:46 (3 weeks ago)	(caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:55:44 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:55:44 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:55:44 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:55:44 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:55:44 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 23:35:51 (3 weeks ago)	(caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:35:47 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:35:48 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:35:48 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:35:48 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:23:35:48 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" show less	Port Scan
🇩🇪 big-cloud.nl	2026-05-20 23:26:11 (3 weeks ago)	Try to access /config/.env	Web App Attack
Anonymous	2026-05-20 22:28:30 (3 weeks ago)	(caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:22:28:26 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:22:28:26 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:22:28:26 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:22:28:26 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:22:28:27 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 21:22:44 (3 weeks ago)	(caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.172.37.232 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:21:22:40 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:21:22:40 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:21:22:40 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:21:22:40 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 20.172.37.232 - - [20/May/2026:21:22:40 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 151.115.165.50

🇫🇷 141.94.237.134

🇨🇳 113.121.114.146

🇦🇹 68.210.120.110

🇹🇼 198.235.24.17

🇲🇽 187.190.35.163

🇲🇽 186.96.145.241

🇩🇪 185.231.59.141

🇸🇦 178.80.238.60

🇲🇽 177.229.197.38

🇧🇩 103.252.120.17

🇺🇸 103.101.203.150

🇭🇺 79.120.177.246

🇹🇼 60.250.246.239

🇺🇸 208.84.102.213

🇬🇧 178.62.11.159

🇺🇸 137.119.21.152

🇨🇦 130.107.224.239

🇨🇳 106.75.185.227

🇮🇳 103.132.243.250