JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.244.81.58

20.244.81.58 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.244.81.58

Whois 20.244.81.58

IP Abuse Reports for 20.244.81.58:

This IP address has been reported a total of 184 times from 148 distinct sources. 20.244.81.58 was first reported on June 16th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-18 01:43:03 (3 hours ago)	Brute force	Brute-Force
Anonymous	2026-06-17 21:52:29 (7 hours ago)	Reported from Nginx log analysis 6. Log: 20.244.81.58 - - [17/Jun/2026:xx:xx:xx 0200] "GET /_profil ... show more Reported from Nginx log analysis 6. Log: 20.244.81.58 - - [17/Jun/2026:xx:xx:xx 0200] "GET /_profiler/phpinfo HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3879.0 Safari/537.36 Edg/78.0.249.0" "-" "IN India Pune" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇫🇮 oh.mg	2026-06-17 18:42:01 (10 hours ago)	[Wed Jun 17 20:42:00.839692 2026] [security2:error] [pid 3640324:tid 3640327] [client 20.244.81.58:4 ... show more [Wed Jun 17 20:42:00.839692 2026] [security2:error] [pid 3640324:tid 3640327] [client 20.244.81.58:46596] [client 20.244.81.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/_profiler/phpinfo"] [unique_id "ajLqeEOOPCDg3SZTVPw31QAAAEE"] ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-17 18:29:12 (10 hours ago)	[Wed Jun 17 20:25:58.311888 2026] [access_compat:error] [pid 17939] [client 20.244.81.58:35034] AH01 ... show more [Wed Jun 17 20:25:58.311888 2026] [access_compat:error] [pid 17939] [client 20.244.81.58:35034] AH01797: client denied by server configuration: /var/www/html/_profiler [Wed Jun 17 20:29:09.723006 2026] [access_compat:error] [pid 17951] [client 20.244.81.58:56722] AH01797: client denied by server configuration: /var/www/html/_profiler [Wed Jun 17 20:29:11.468672 2026] [authz_core:error] [pid 18149] [client 20.244.81.58:52494] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇬🇧 Smish	2026-06-17 18:24:24 (10 hours ago)	HONEYPOT HIT --> Fail2ban time=1781720662 log=2026-06-17T19:24:22+01:00 ip=20.244.81.58 host=89.39.2 ... show more HONEYPOT HIT --> Fail2ban time=1781720662 log=2026-06-17T19:24:22+01:00 ip=20.244.81.58 host=89.39.211.7 method=GET uri="/_profiler/phpinfo" status=404 ua="Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" ref="-" rid=91fe7e8fc5936666453801c6ead64247 show less	Web App Attack
Anonymous	2026-06-17 18:15:30 (10 hours ago)	[Wed Jun 17 20:15:30.062027 2026] [access_compat:error] [pid 3211618:tid 3211618] [client 20.244.81. ... show more [Wed Jun 17 20:15:30.062027 2026] [access_compat:error] [pid 3211618:tid 3211618] [client 20.244.81.58:34868] AH01797: client denied by server configuration: /var/www/html/_profiler ... show less	Bad Web Bot Web App Attack
🇩🇪 ut-addicted.com	2026-06-17 18:06:38 (10 hours ago)	\[17/Jun/2026:20:06:05 +0200\] ajLiDXozDvsboc2w3eZEWQAAAMc 20.244.81.58 33940 78.46.187.162 443 \[17 ... show more \[17/Jun/2026:20:06:05 +0200\] ajLiDXozDvsboc2w3eZEWQAAAMc 20.244.81.58 33940 78.46.187.162 443 \[17/Jun/2026:20:06:08 +0200\] ajLiEHozDvsboc2w3eZEWwAAAMw 20.244.81.58 33956 78.46.187.162 443 \[17/Jun/2026:20:06:36 +0200\] ajLiLHozDvsboc2w3eZEZQAAAMc 20.244.81.58 34358 78.46.187.162 443 show less	Brute-Force Web App Attack
🇺🇸 jkhorvath.com	2026-06-17 17:56:46 (10 hours ago)	Request for URL /_profiler/phpinfo	Phishing Brute-Force Web App Attack
🇨🇦 Not Fake	2026-06-17 16:45:22 (12 hours ago)	$f2bV_matches	Web App Attack
🇫🇷 Vaction	2026-06-17 16:39:36 (12 hours ago)	20.244.81.58 - - [17/Jun/2026:18:39:35 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 400 "-" "Mozilla ... show more 20.244.81.58 - - [17/Jun/2026:18:39:35 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.1.114 Yowser/2.5 Safari/537.36" show less	Hacking Bad Web Bot Web App Attack
🇩🇪 D3vNu11	2026-06-17 16:17:56 (12 hours ago)	Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: India 6x -> Target Country: Ashburn, US ... show more Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: India 6x -> Target Country: Ashburn, USA HTTPS show less	Hacking Web App Attack
🇩🇪 iRaphi05	2026-06-17 16:16:40 (12 hours ago)	Honeypot detection: GET request on /_profiler/phpinfo \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) ... show more Honeypot detection: GET request on /_profiler/phpinfo \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/36.0.1985.125 Safari/537.36 show less	Hacking Web App Attack
🇧🇷 diego	2026-06-17 16:15:50 (12 hours ago)	[probe-68-69] 2026-06-17 15:57:50, Client: 20.244.81.58, Protocol: 6, Unauthorized activity to HTTP: ... show more [probe-68-69] 2026-06-17 15:57:50, Client: 20.244.81.58, Protocol: 6, Unauthorized activity to HTTP: GET /_profiler/phpinfo show less	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-17 16:07:12 (12 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/_profiler/phpinfo, Method:GET, UA:Mozilla/5. ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/_profiler/phpinfo, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 kkwemi	2026-06-17 16:03:55 (12 hours ago)	Blocked by block-exploit-paths on /_profiler/phpinfo	Bad Web Bot

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.207.239.222

🇳🇱 146.103.107.176

🇮🇳 128.185.220.122

🇳🇱 91.92.40.25

🇫🇮 85.192.31.14

🇬🇧 35.203.211.56

🇧🇪 34.78.29.97

🇬🇧 185.247.137.12

🇹🇼 165.154.227.8

🇰🇷 124.153.188.18

🇮🇳 122.185.237.142

🇰🇷 118.39.230.40

🇬🇧 35.203.210.3

🇲🇾 49.124.150.254

🇮🇷 45.147.77.97

🇰🇷 1.212.225.99

🇨🇳 1.193.163.2

🇧🇬 193.24.211.107

🇺🇸 185.213.193.191

🇮🇶 185.166.25.150