JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.119.224.7

20.119.224.7 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.119.224.7

Whois 20.119.224.7

IP Abuse Reports for 20.119.224.7:

This IP address has been reported a total of 43 times from 26 distinct sources. 20.119.224.7 was first reported on March 18th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2025-03-19 22:52:15 (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇺🇸 mnsf	2025-03-19 22:05:14 (1 year ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇬🇷 lpar69	2025-03-19 14:01:00 (1 year ago)	scanning for wp vulnerabilities	Web App Attack
🇩🇪 sverson	2025-03-19 07:05:06 (1 year ago)	Automated report / Unauthorized connection attempt / Mutliple unauthorized attempts to access web re ... show more Automated report / Unauthorized connection attempt / Mutliple unauthorized attempts to access web resources show less	Hacking Brute-Force Web App Attack
🇩🇪 ardexter	2025-03-19 06:09:26 (1 year ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇺🇸 octageeks.com	2025-03-19 04:07:32 (1 year ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 TPI-Abuse	2025-03-19 03:15:20 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 23:15:12.024271 2025] [security2:error] [pid 21359:tid 21359] [client 20.119.224.7:1738] [client 20.119.224.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|bodeur.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "bodeur.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z9o2wNv7Cos2iSapkzyNHgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-03-19 02:45:16 (1 year ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2025-03-19 01:56:38 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.119.224.7 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.119.224.7 (US/United States/-) show less	Port Scan
🇺🇸 TPI-Abuse	2025-03-19 01:31:39 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 21:31:35.748289 2025] [security2:error] [pid 990267:tid 990267] [client 20.119.224.7:1887] [client 20.119.224.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|lisalehmann.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "lisalehmann.com"] [uri "/photography.html/images/stories/admin-post.php"] [unique_id "Z9oed-JDKLEQlS8SUQf--AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-19 01:11:16 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 21:11:09.444921 2025] [security2:error] [pid 7670:tid 7670] [client 20.119.224.7:2915] [client 20.119.224.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|parkgrant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "parkgrant.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z9oZrav_P39w_9pF9CmnmwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2025-03-19 01:06:38 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.119.224.7 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.119.224.7 (US/United States/-) show less	Port Scan
🇲🇾 Rizzy	2025-03-19 00:21:11 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-18 23:44:17 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 19:44:10.675104 2025] [security2:error] [pid 4048:tid 4048] [client 20.119.224.7:11468] [client 20.119.224.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|boczanowski.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "boczanowski.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z9oFSu1lqB5W6sucEyNbDgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-18 23:24:40 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 20.119.224.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 19:24:36.380612 2025] [security2:error] [pid 26769:tid 26769] [client 20.119.224.7:2374] [client 20.119.224.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.amybeam.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.amybeam.info"] [uri "/images/stories/admin-post.php"] [unique_id "Z9oAtLy0iCujtZCRmNBBmgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 188.169.10.45

🇺🇸 172.191.94.172

🇨🇳 121.31.210.125

🇮🇹 83.224.168.213

🇹🇭 34.15.168.215

🇺🇸 20.163.168.234

🇺🇸 18.97.9.99

🇧🇩 203.190.34.195

🇬🇧 193.163.125.150

🇺🇦 193.107.177.181

🇲🇽 187.190.35.163

🇳🇱 185.242.226.19

🇴🇲 162.158.28.230

🇦🇫 149.54.81.98

🇨🇳 125.86.31.99

🇨🇳 117.14.51.58

🇺🇦 109.86.231.26

🇮🇳 103.54.29.28

🇺🇸 66.132.195.27

🇮🇪 34.243.150.111