JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.51.57.115

20.51.57.115 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 70%: ?

70%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.51.57.115

Whois 20.51.57.115

IP Abuse Reports for 20.51.57.115:

This IP address has been reported a total of 20 times from 15 distinct sources. 20.51.57.115 was first reported on April 25th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-06-14 18:55:15 (11 hours ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-06-14 17:00:00 (13 hours ago)	SSH Brute-Force	DDoS Attack Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-14 16:48:22 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 12:48:16.947405 2026] [security2:error] [pid 32189:tid 32189] [client 20.51.57.115:6811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.71"] [uri "/.git/HEAD"] [unique_id "ai7bUBL7tJUr-s89nmvEBQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-06-14 14:27:28 (16 hours ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇨🇭 ALPHANET	2026-06-14 14:26:14 (16 hours ago)	web exploits	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 14:25:27 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:25:21.107119 2026] [security2:error] [pid 10274:tid 10274] [client 20.51.57.115:6477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.89"] [uri "/.git/config"] [unique_id "ai650dW97rOoX2Cl4owUBgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 14:23:23 (16 hours ago)	Blocked by UFW (TCP on 80) Source port: 7897 TTL: 116 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 7897 TTL: 116 Packet length: 40 TOS: 0x00 This report (for 20.51.57.115) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 13:31:07 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.51.57.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:31:00.225139 2026] [security2:error] [pid 26554:tid 26554] [client 20.51.57.115:7580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.137"] [uri "/.git/HEAD"] [unique_id "ai6tFNiOarktumkO3E3t_gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 13:25:52 (17 hours ago)	Blocked by UFW (TCP on 2087) Source port: 7987 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2087) Source port: 7987 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 20.51.57.115) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-10 01:04:26 (5 days ago)	Blocked by UFW (TCP on 9848) Source port: 43266 TTL: 243 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9848) Source port: 43266 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 20.51.57.115) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 celestialcity	2026-06-10 00:12:37 (5 days ago)	Blocked by UFW on celestialcityas [8848/tcp] \| SPT: 43268 \| TTL: 230 \| LEN: 40 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [8848/tcp] \| SPT: 43268 \| TTL: 230 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 centurion	2026-06-10 00:03:24 (5 days ago)	Blocked by UFW on dc00 [9849/tcp] Source port: 43270 TTL: 234 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [9849/tcp] Source port: 43270 TTL: 234 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇱 spd.co.il	2026-05-23 16:03:11 (3 weeks ago)	Web application attack detected	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-22 22:02:12 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-21. show less	Web App Attack SSH Hacking
🇺🇸 oralunal	2026-05-21 21:07:49 (3 weeks ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.197

🇭🇰 43.154.198.181

🇺🇸 20.65.177.158

🇳🇱 213.176.16.100

🇹🇭 203.154.158.195

🇫🇷 194.113.235.89

🇨🇳 183.36.179.7

🇺🇸 162.240.109.188

🇨🇳 121.237.11.53

🇨🇳 120.240.178.221

🇨🇳 120.240.178.209

🇻🇳 116.99.172.90

🇮🇹 94.85.249.225

🇸🇬 35.240.174.82

🇹🇼 34.81.16.181

🇦🇷 200.115.27.166

🇺🇸 185.199.92.28

🇧🇷 179.184.242.48

🇶🇦 178.153.202.174

🇩🇪 147.45.199.80