JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.37.104.170

20.37.104.170

Neutral Activity

17 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇯🇵 Japan

City

Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.37.104.170 has been reported 17 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.37.104.170:

This IP address has been reported a total of 17 times from 11 distinct sources. 20.37.104.170 was first reported on August 2nd 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2024-08-04 08:21:01 (2 years ago)	Domain : subastame.net Rule : env 2024-08-04 08:19:40 *hidden-privacy* GET /.env - 80 - 162.158. ... show more Domain : subastame.net Rule : env 2024-08-04 08:19:40 *hidden-privacy* GET /.env - 80 - 162.158.119.194 HTTP/1.1 python-requests/2.26.0 - subastame.net 200 0 0 10774 330 3336 - 20.37.104.170 show less	Hacking SQL Injection
🇺🇸 TPI-Abuse	2024-08-04 02:08:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 22:08:35.042118 2024] [security2:error] [pid 25610:tid 25610] [client 20.37.104.170:54990] [client 20.37.104.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adona.org"] [uri "/.env"] [unique_id "Zq7io492LhVBbF_t0yKfcAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MHuiG	2024-08-04 00:38:56 (2 years ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 8075 clientASND ... show more The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: JP clientIP: 20.37.104.170 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-08-03T22:58:21Z rayName: 8ad9e973a935af37 ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: python-requests/2.26.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Anonymous	2024-08-04 00:01:33 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 cmbplf	2024-08-03 22:26:07 (2 years ago)	253 requests to *.env	Brute-Force Bad Web Bot
🇳🇿 Tripwire	2024-08-03 21:36:48 (2 years ago)	Scanning for exploits - /.env	Web App Attack
🇺🇸 myagent.site	2024-08-03 18:49:31 (2 years ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇬🇧 aricooperdavis	2024-08-03 14:50:03 (2 years ago)	Probe for vulnerabilities. Path attempted: /.env	Web App Attack
🇺🇸 TPI-Abuse	2024-08-03 14:26:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 10:26:35.005179 2024] [security2:error] [pid 13045:tid 13045] [client 20.37.104.170:58970] [client 20.37.104.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ieas.org"] [uri "/.env"] [unique_id "Zq4-G1ethTkhs49TuUlhlQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-03 11:30:30 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 07:30:25.413678 2024] [security2:error] [pid 22738:tid 22738] [client 20.37.104.170:62827] [client 20.37.104.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pfmarch.com"] [uri "/.env"] [unique_id "Zq4U0T4glvo2__rh61yJzwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-03 08:01:56 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.37.104.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 04:01:50.438017 2024] [security2:error] [pid 4786:tid 4786] [client 20.37.104.170:51085] [client 20.37.104.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.acquivest.net"] [uri "/.env"] [unique_id "Zq3j7hE-98v-_0VCUy9OAQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2024-08-03 06:28:35 (2 years ago)	ece-17 : Block hidden directories=>/.env(/)	Hacking
🇬🇧 Swiptly	2024-08-03 05:42:55 (2 years ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
🇦🇺 FEWA	2024-08-02 19:37:26 (2 years ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇺🇸 myagent.site	2024-08-02 14:39:41 (2 years ago)	Blocking for trying to access an exploit file: /.env	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.12.188.3

🇨🇭 141.255.164.73

🇬🇧 139.28.176.36

🇺🇸 136.108.10.112

🇨🇳 111.14.105.62

🇧🇪 109.136.90.76

🇺🇸 100.49.117.77

🇨🇳 36.32.70.241

🇺🇸 17.166.23.251

🇹🇼 198.235.24.80

🇺🇸 192.81.209.153

🇪🇨 179.60.188.54

🇨🇺 152.206.114.10

🇮🇶 149.255.216.16

🇧🇷 131.0.158.18

🇩🇪 130.12.180.174

🇨🇳 101.31.84.184

🇳🇱 93.174.95.106

🇺🇸 216.25.89.65

🇰🇷 210.204.61.75