JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.172.6.64

20.172.6.64 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.172.6.64

Whois 20.172.6.64

IP Abuse Reports for 20.172.6.64:

This IP address has been reported a total of 81 times from 56 distinct sources. 20.172.6.64 was first reported on October 13th 2025, and the most recent report was 32 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mnazibo	2026-06-04 23:15:07 (32 minutes ago)	Date: Jun 05 02:04:59 2026 EAT \| Reported IP: 20.172.6.64 mod_security \| id: 920350 930130 949110 92 ... show more Date: Jun 05 02:04:59 2026 EAT \| Reported IP: 20.172.6.64 mod_security \| id: 920350 930130 949110 920440 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; URL file extension is restricted by policy; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 13 show less	SQL Injection Brute-Force Bad Web Bot
🇪🇸 masterguru	2026-06-04 23:04:23 (42 minutes ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-159)	Web App Attack
🇬🇧 djboddington	2026-06-04 22:34:42 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 Jos Moonen	2026-06-04 21:09:45 (2 hours ago)	20.172.6.64 - - [04/Jun/2026:23:09:37 +0200] "GET /.env HTTP/1.1" 200 3 "-" "Mozilla/5.0 (compatible ... show more 20.172.6.64 - - [04/Jun/2026:23:09:37 +0200] "GET /.env HTTP/1.1" 200 3 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.172.6.64 - - [04/Jun/2026:23:09:44 +0200] "GET /wp-config.php HTTP/1.1" 200 3 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack Brute-Force
🇩🇪 check-the-sum.fr	2026-06-04 20:11:39 (3 hours ago)	Port Scanning	Port Scan
🇩🇪 rzk	2026-06-04 19:50:03 (3 hours ago)	CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ... show more CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: MICROSOFT-CORP-MSN-AS-BLOCK. Country: US. Timestamp: 2026-06-04T19:50:03+00:00. show less	Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-01 11:19:25 (3 days ago)	2026-06-01 11:19:25 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇹🇷 SeczarSecureOps	2026-06-01 10:47:11 (3 days ago)	Seczar SecureOps — Port Scan Detection (7 events) — quarantined 43200m on fgdcapi	Port Scan
🇺🇸 MPL	2026-06-01 10:14:25 (3 days ago)	tcp port scan (6 or more attempts)	Port Scan
🇬🇧 ISPLtd	2026-06-01 08:13:46 (3 days ago)	Jun 1 05:13:45 20.172.6.64 TCP SPT=25604 DPT=2087 SYN Jun 1 05:13:45 20.172.6.64 TCP SPT=25600 DPT ... show more Jun 1 05:13:45 20.172.6.64 TCP SPT=25604 DPT=2087 SYN Jun 1 05:13:45 20.172.6.64 TCP SPT=25600 DPT=2083 SYN Jun 1 05:13:45 20.172.6.64 TCP SPT=25602 DPT=2082 ... show less	Port Scan
🇷🇸 Scan	2026-06-01 07:32:56 (3 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-01 07:12:54 (3 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇫🇷 ISPLtd	2026-06-01 07:08:07 (3 days ago)	Jun 1 04:08:06 20.172.6.64 TCP SPT=25600 DPT=2082 SYN Jun 1 04:08:06 20.172.6.64 TCP SPT=25600 DPT ... show more Jun 1 04:08:06 20.172.6.64 TCP SPT=25600 DPT=2082 SYN Jun 1 04:08:06 20.172.6.64 TCP SPT=25600 DPT=2087 SYN Jun 1 04:08:06 20.172.6.64 TCP SPT=25600 DPT=2086 ... show less	Port Scan
🇩🇪 cloudmax	2026-06-01 05:28:38 (3 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2026-06-01 04:34:18 (3 days ago)		DNS Compromise DDoS Attack

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.124

🇻🇳 183.91.186.36

🇮🇹 93.92.77.176

🇫🇷 2a02:c207:2330:7005::1

🇲🇽 206.135.24.10

🇮🇳 182.78.240.94

🇭🇰 165.154.60.76

🇨🇳 119.53.253.2

🇳🇱 45.148.10.183

🇳🇱 34.158.78.15

🇨🇳 14.103.112.5

🇧🇷 200.155.66.2

🇩🇪 198.7.121.44

🇧🇷 187.49.63.167

🇺🇸 104.152.52.234

🇨🇦 34.130.79.215

🇬🇧 198.244.183.219

🇨🇦 34.130.29.112

🇩🇪 213.209.159.231

🇺🇸 207.241.173.57