JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.57.77.194

20.57.77.194 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 53%: ?

53%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.57.77.194

Whois 20.57.77.194

IP Abuse Reports for 20.57.77.194:

This IP address has been reported a total of 35 times from 27 distinct sources. 20.57.77.194 was first reported on July 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-06-16 07:42:52 (2 days ago)	(modsecurity) srv103 ModSecurity 20.57.77.194 (US/United States/-): 10 in the last 3600 secs; Ports: ... show more (modsecurity) srv103 ModSecurity 20.57.77.194 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 zupan	2026-06-14 10:30:13 (4 days ago)	Blocked by UFW on vps [2086/tcp] \| SPT: 51794 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [2086/tcp] \| SPT: 51794 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-14 05:33:49 (4 days ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 51173 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 51173 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 leo1305	2026-06-07 14:16:54 (1 week ago)	CrowdSec detection \| scenario: http-sensitive-files	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-06-07 13:16:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 20.57.77.194 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.57.77.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:16:49.666978 2026] [security2:error] [pid 9742:tid 9742] [client 20.57.77.194:63115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.242"] [uri "/.git/HEAD"] [unique_id "aiVvQfLZ84yWhT1DQnQxxwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-07 12:19:54 (1 week ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
🇬🇧 djboddington	2026-06-07 08:51:36 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 myintarweb	2026-06-07 08:51:21 (1 week ago)	20.57.77.194 - - [07/Jun/2026:09:51:20 +0100] 80 "GET /.git/HEAD HTTP/1.1" 403 1442 "-" "Mozilla/5.0 ... show more 20.57.77.194 - - [07/Jun/2026:09:51:20 +0100] 80 "GET /.git/HEAD HTTP/1.1" 403 1442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇧🇷 SOC PR	2026-06-07 08:40:54 (1 week ago)	IPS: Web Server Exposed Git Repository Information Disclosure.	Hacking
🇬🇧 2048	2026-05-15 14:24:33 (1 month ago)	2026-05-15T16:24:30.388336+02:00 machodeer kernel: [1562987.035446] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-15T16:24:30.388336+02:00 machodeer kernel: [1562987.035446] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.57.77.194 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=46060 DF PROTO=TCP SPT=9238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-15T16:24:31.411070+02:00 machodeer kernel: [1562988.059149] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.57.77.194 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=46061 DF PROTO=TCP SPT=9238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-15T16:24:32.434944+02:00 machodeer kernel: [1562989.083128] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.57.77.194 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=46062 DF PROTO=TCP SPT=9238 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-04-19 14:49:19 (1 month ago)	2026-04-19 14:49:19 warning[3029331]: host [20.57.77.194]: unauthorized access attempted: ... show more 2026-04-19 14:49:19 warning[3029331]: host [20.57.77.194]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇮🇳 Mr.Singh	2026-04-09 12:30:23 (2 months ago)	NFT blocked 20.57.77.194 on 09-Apr-2026..	Port Scan Brute-Force
🇺🇸 xmission.com	2026-04-09 12:30:20 (2 months ago)	Blocked by UFW (TCP on 3389) Source port: 7184 TTL: 240 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 3389) Source port: 7184 TTL: 240 Packet length: 40 TOS: 0x00 This report (for 20.57.77.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-04-09 11:38:16 (2 months ago)	tcp/3389	Port Scan
🇺🇸 xmission.com	2026-01-20 19:05:41 (4 months ago)	Blocked by UFW (TCP on 443) Source port: 27664 TTL: 237 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 27664 TTL: 237 Packet length: 40 TOS: 0x00 This report (for 20.57.77.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.243

🇸🇬 159.223.62.234

🇮🇩 43.133.148.170

🇮🇳 27.123.107.154

🇰🇷 222.110.147.58

🇳🇱 193.176.31.230

🇮🇷 185.180.131.9

🇵🇹 185.138.89.72

🇧🇼 168.167.72.132

🇺🇸 165.227.188.34

🇭🇰 139.198.113.29

🇨🇳 122.189.105.182

🇺🇸 103.234.62.3

🇺🇸 100.29.192.125

🇳🇱 89.248.173.162

🇸🇦 82.167.4.40

🇺🇸 64.62.156.211

🇺🇸 64.62.156.150

🇺🇸 64.62.156.22

🇳🇱 45.142.193.191