JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.88.210.173

20.88.210.173 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.88.210.173

Whois 20.88.210.173

IP Abuse Reports for 20.88.210.173:

This IP address has been reported a total of 57 times from 46 distinct sources. 20.88.210.173 was first reported on September 12th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-09-17 10:29:23 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 Budyn	2026-09-17 09:07:22 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.goblinpot.site \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-17 08:40:27 (5 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 craudiovizai	2026-09-17 06:30:38 (7 hours ago)	Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked ... show more Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked at the edge. show less	Bad Web Bot
🇳🇱 Alt255	2026-09-17 06:30:23 (7 hours ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 20.88.210.173 - - [17/Sep/2026:08:30:06 +0200] "GET /.env.txt HTTP/1.1" 301 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 03:59:35 (9 hours ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197) show less	Hacking
🇸🇪 vaia.cloud	2026-09-17 03:45:02 (10 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
Anonymous	2026-09-17 02:45:44 (11 hours ago)	(caddyscan) Scanner path probe from 20.88.210.173 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.88.210.173 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.88.210.173 - - [17/Sep/2026:02:45:38 +0000] "GET /.env.txt HTTP/1.1" [REDACTED] 200 2627 20.88.210.173 - - [17/Sep/2026:02:45:39 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 20.88.210.173 - - [17/Sep/2026:02:45:40 +0000] "GET /.env.old HTTP/1.1" [REDACTED] 200 2627 20.88.210.173 - - [17/Sep/2026:02:45:40 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 20.88.210.173 - - [17/Sep/2026:02:45:40 +0000] "GET /.env.backup HTTP/1.1" show less	Port Scan
🇵🇱 Budyn	2026-09-17 02:41:06 (11 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.sweetpuddingtrap.xyz \| URI: /.env.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-17 02:00:31 (11 hours ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
Anonymous	2026-09-17 01:41:33 (12 hours ago)	ICONZDE WEBEXPLOIT 20.88.210.173 (20.88.210.173)	Web App Attack
🇫🇷 ✨	2026-09-17 00:54:10 (12 hours ago)	Domain : staging.fellsoft.com Rule : hack 2026-09-17 00:52:31 *hidden-privacy* GET /wp-config.ph ... show more Domain : staging.fellsoft.com Rule : hack 2026-09-17 00:52:31 *hidden-privacy* GET /wp-config.php.bak - 80 - 20.88.210.173 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 - myinjurylawyer.co.uk 403 0 0 1317 258 119 - - show less	Hacking SQL Injection Brute-Force
🇩🇪 Interceptor_HQ	2026-09-16 23:41:46 (14 hours ago)	request_uri: /pathscan-0535db81b4ce-nope.env -- automatic report --	Brute-Force Hacking
🇫🇮 Ba-Yu	2026-09-16 23:20:23 (14 hours ago)	General hacking/exploits/scanning	Port Scan Exploited Host Web App Attack
🇩🇪 jbcrn	2026-09-16 11:29:45 (1 day ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 94.78.89.25

🇩🇪 103.244.227.135

🇻🇳 103.28.38.27

🇩🇪 94.130.231.26

🇳🇱 45.148.10.141

🇧🇬 213.222.43.10

🇮🇳 209.38.121.225

🇲🇽 189.223.176.45

🇦🇷 149.78.37.51

🇮🇩 103.75.101.41

🇷🇴 92.118.39.71

🇳🇱 51.124.112.121

🇬🇧 185.92.25.122

🇺🇸 159.65.108.15

🇮🇳 122.166.250.251

🇨🇳 110.42.234.244

🇧🇬 84.242.138.116

🇳🇱 77.239.124.201

🇺🇸 4.246.117.137

🇳🇱 213.177.179.150