JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.37.219.242

20.37.219.242 was found in our database!

This IP was reported 173 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.37.219.242

Whois 20.37.219.242

IP Abuse Reports for 20.37.219.242:

This IP address has been reported a total of 173 times from 147 distinct sources. 20.37.219.242 was first reported on December 6th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Delta Juliet	2025-12-15 23:43:47 (9 months ago)	Exploit scanner detected	Hacking Web App Attack
Anonymous	2025-12-15 08:06:23 (9 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇹🇷 rtbh.com.tr	2025-12-08 20:10:20 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bazter.pro	2025-12-08 07:14:04 (9 months ago)	CRITICAL: Sensitive files (21) [Paths: 257]	Web App Attack
🇳🇱 Site.eu	2025-12-08 04:19:45 (9 months ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2025-12-07 23:03:00 (9 months ago)	Auto-ban: 27 malicious requests on 2025-12-06 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 27 malicious requests on 2025-12-06 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-07 20:10:19 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 Buster	2025-12-07 13:23:00 (9 months ago)	Repeated script kiddie DDOS attack attempts from Perm Blocked ASN and country	DDoS Attack Open Proxy Hacking Web App Attack
🇭🇺 DumaNet	2025-12-07 09:16:00 (9 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 06. 23:56:22 Source IP: 20.37. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 06. 23:56:22 Source IP: 20.37.219.242 Portion of the log(s): 20.37.219.242 - [06/Dec/2025:23:56:21 +0100] "GET /chosen.php HTTP/1.1" 404 153 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 20.37.219.242 - [06/Dec/2025:23:56:21 +0100] "GET /cc.php HTTP/1.1" 404 153 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 20.37.219.242 - [06/Dec/2025:23:56:21 +0100] "GET /buy.php HTTP/1.1" 404 555 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.37.219.242 - [06/Dec/2025:23:56:20 +0100] "GET /bless.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-12-07 06:15:06 (9 months ago)	157 attacks on FCKeditor URLs, PHP URLs: GET /admin/fckeditor/editor/filemanager/ HTTP/1.1 GET /moon ... show more 157 attacks on FCKeditor URLs, PHP URLs: GET /admin/fckeditor/editor/filemanager/ HTTP/1.1 GET /moon.php HTTP/1.1 show less	Web App Attack
🇺🇸 octageeks.com	2025-12-07 05:06:53 (9 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 [email protected]	2025-12-07 00:52:26 (9 months ago)	...	Brute-Force SSH
🇮🇹 mauri64	2025-12-07 00:30:31 (9 months ago)	Troppi errori Apache (251)	Hacking
🇮🇩 Burayot	2025-12-06 23:18:29 (9 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.37.219.242 (AU/Australia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.37.219.242 (AU/Australia/-): 1 in the last 3600 secs show less	Web App Attack
🇦🇺 paulshipley.com.au	2025-12-06 23:11:41 (9 months ago)	levellapromotions.com.au:443 20.37.219.242 - - [07/Dec/2025:10:11:14 +1100] "GET /.well-known/acme-c ... show more levellapromotions.com.au:443 20.37.219.242 - - [07/Dec/2025:10:11:14 +1100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 157555 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" levellapromotions.com.au:443 20.37.219.242 - - [07/Dec/2025:10:11:15 +1100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 154720 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" levellapromotions.com.au:443 20.37.219.242 - - [07/Dec/2025:10:11:16 +1100] "GET /.well-known/pki-validation/ HTTP/1.1" 404 146659 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" levellapromotions.com.au:443 20.37.219.242 - - [07/Dec/2025:10:11:17 +1100] "GET /1.php HTTP/1.1" 404 146637 "https://www.google.fr/" "Mozill ... show less	Web App Attack

Showing 1 to 15 of 173 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 94.231.206.248

🇳🇱 77.239.124.183

🇳🇱 77.91.71.11

🇺🇸 216.73.216.188

🇹🇼 198.235.24.66

🇳🇬 197.211.52.252

🇳🇱 185.93.89.167

🇵🇪 179.6.34.166

🇩🇪 172.71.148.45

🇩🇪 172.71.148.44

🇺🇸 170.187.163.90

🇸🇬 168.144.106.28

🇩🇪 47.245.142.53

🇺🇸 20.65.202.176

🇧🇪 198.235.24.237

🇲🇽 177.229.197.38

🇻🇳 157.66.26.151

🇺🇸 107.150.106.28

🇸🇬 47.236.194.29

🇨🇴 38.19.239.176