JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.114.149.73

20.114.149.73 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 56%: ?

56%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.114.149.73

Whois 20.114.149.73

IP Abuse Reports for 20.114.149.73:

This IP address has been reported a total of 30 times from 16 distinct sources. 20.114.149.73 was first reported on August 4th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-08-22 03:20:39 (1 week ago)	firewall-block, port(s): 443/tcp	Port Scan
🇩🇪 iNetWorker	2026-08-21 01:20:32 (1 week ago)	firewall-block, port(s): 443/tcp	Port Scan
🇩🇪 iNetWorker	2026-08-19 19:10:38 (2 weeks ago)	firewall-block, port(s): 443/tcp	Port Scan
🇩🇪 iNetWorker	2026-08-18 18:40:33 (2 weeks ago)	firewall-block, port(s): 443/tcp	Port Scan
🇬🇧 djboddington	2026-08-15 15:51:23 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇩🇪 iNetWorker	2026-08-14 13:10:15 (2 weeks ago)	firewall-block, port(s): 443/tcp	Port Scan
🇺🇸 TPI-Abuse	2026-08-14 06:06:43 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 20.114.149.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.114.149.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 02:06:37.427927 2026] [security2:error] [pid 56848:tid 56848] [client 20.114.149.73:3942] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cincinnati.deubellzebub.com\|F\|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cincinnati.deubellzebub.com"] [uri "/php.ini.ea3.bak"] [unique_id "an6wbQbPQdFPxQAkNjYQHQAAAA0"], referer: https://www.cincinnati.deubellzebub.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 DXC-0	2026-08-14 03:00:15 (2 weeks ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇩🇪 Vegascosmetics	2026-08-14 01:07:03 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack
🇵🇱 Budyn	2026-08-14 00:03:38 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sinus.budyn.ovh \| URI: /actuator/env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇰 ScamAware	2026-08-13 23:01:46 (2 weeks ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-13 19:45:45 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.114.149.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.114.149.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 15:45:40.786944 2026] [security2:error] [pid 1555066:tid 1555066] [client 20.114.149.73:20384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorder.us"] [uri "/USE-To-BLOCKwww.countryipblocks.net.htaccess"] [unique_id "an4e5MMCJ88zaS0OTBnPEAAAAAc"], referer: https://needtoorder.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 centurion	2026-08-13 19:34:08 (2 weeks ago)	Blocked by UFW on ns03 [443/tcp] Source port: 19020 TTL: 45 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns03 [443/tcp] Source port: 19020 TTL: 45 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇷 masterguru	2026-08-13 14:53:08 (2 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 20.114.149.73 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 20.114.149.73 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 Progetto1	2026-08-13 12:33:01 (2 weeks ago)	Detected via HAProxyScanner at 2026-08-13 12:33:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-08-13 12:33:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.40

🇺🇸 147.185.132.212

🇷🇺 77.73.90.195

🇺🇸 98.80.4.41

🇫🇷 91.196.152.86

🇷🇺 87.250.224.208

🇺🇸 66.132.186.202

🇺🇸 64.62.156.202

🇺🇸 40.117.97.0

🇺🇸 32.198.93.152

🇰🇷 218.52.254.90

🇬🇧 188.240.59.29

🇦🇷 181.28.101.14

🇷🇺 176.99.130.169

🇺🇸 159.203.172.172

🇺🇸 157.230.235.43

🇨🇦 147.182.152.131

🇺🇸 146.190.118.252

🇸🇪 104.23.221.108

🇮🇷 95.38.179.72