JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.20.16.180

84.20.16.180 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 20%: ?

20%

ISP	GTT Communications Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-84-20-16-180.datapacket.com
Domain Name	gtt.net
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.20.16.180

Whois 84.20.16.180

IP Abuse Reports for 84.20.16.180:

This IP address has been reported a total of 58 times from 34 distinct sources. 84.20.16.180 was first reported on October 28th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-07-28 05:51:52 (16 hours ago)	Form spam	Web Spam
🇺🇸 xmission.com	2026-07-15 03:41:58 (1 week ago)	Blocked by UFW (TCP on 52155) Source port: 36239 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52155) Source port: 36239 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 84.20.16.180) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 EGP Abuse Dept	2026-06-28 03:56:06 (1 month ago)	Scanning for port/service exploits on tpc-027.mach3builders.nl	Port Scan Hacking
🇩🇪 filstal.org	2026-05-01 14:45:48 (2 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_7; rv:1.9.5.20) Gecko/ ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_7; rv:1.9.5.20) Gecko/6878-02-10 01:06:48.270599 Firefox/14.0). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-26 13:12:52 (3 months ago)	(wordpress) Apache: Failed WordPress login from 84.20.16.180 (CA/Canada/-): 10 in the last 3600 secs ... show more (wordpress) Apache: Failed WordPress login from 84.20.16.180 (CA/Canada/-): 10 in the last 3600 secs (0-193) show less	Hacking
🇧🇷 chronos	2026-04-19 01:05:22 (3 months ago)	Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 596 ... show more Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 59601 \| Location: Canada, Montreal show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-04-12 12:50:06 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 08:50:01.572266 2026] [security2:error] [pid 3013292:tid 3013308] [client 84.20.16.180:38926] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|onenessrecords.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "onenessrecords.com"] [uri "/images/stories/themes.php"] [unique_id "aduU-bnE6BRdK_Cdl6Lt-wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-04-10 23:36:53 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Starburst SysOp Team	2026-04-09 05:53:14 (3 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 180.16.20.84.rbl.malwar ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 180.16.20.84.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-nue6-2) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-09 02:55:25 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:55:20.002595 2026] [security2:error] [pid 323979:tid 323993] [client 84.20.16.180:38580] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|lavonnesells.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "lavonnesells.com"] [uri "/images/stories/themes.php"] [unique_id "adcVGOzH83Ar8V7g9XUTwgAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-08 00:10:37 (3 months ago)	alfa-rex.php	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 18:49:11 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 14:49:07.153757 2026] [security2:error] [pid 1684483:tid 1684483] [client 84.20.16.180:53560] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|ferrarapanfitness.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ferrarapanfitness.com"] [uri "/images/stories/themes.php"] [unique_id "adVRo2kAOonMqYxZQWMbiQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 16:58:35 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 84.20.16.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 12:58:27.820350 2026] [security2:error] [pid 13070:tid 13070] [client 84.20.16.180:34676] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.mightyhoop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.mightyhoop.com"] [uri "/images/stories/themes.php"] [unique_id "ac6gM2kWaCF1koreopFfugAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2026-03-10 11:29:59 (4 months ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇬🇧 cg-design.co.uk	2026-02-15 08:38:18 (5 months ago)	Port Scan detected from 84.20.16.180 (CA/Canada/-).	Port Scan

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 195.242.214.179

🇧🇷 177.10.117.73

🇸🇬 165.22.53.101

🇨🇦 138.197.164.175

🇺🇸 137.184.140.32

🇳🇱 91.92.40.19

🇺🇸 71.6.232.22

🇺🇸 54.183.203.189

🇺🇸 35.193.187.4

🇺🇸 23.137.105.195

🇬🇧 2a09:bac1:2880:840::319:da

🇰🇷 220.85.210.200

🇳🇱 185.223.235.48

🇻🇳 116.99.169.38

🇬🇦 102.142.96.124

🇺🇸 98.206.61.139

🇳🇱 64.225.73.248

🇨🇳 61.160.242.228

🇭🇰 38.54.23.236

🇺🇸 2a09:bac5:9441:3af::5e:5d