JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.119.94.177

20.119.94.177 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 36%: ?

36%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.119.94.177

Whois 20.119.94.177

IP Abuse Reports for 20.119.94.177:

This IP address has been reported a total of 19 times from 14 distinct sources. 20.119.94.177 was first reported on May 31st 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-29 00:28:07 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇹🇭 Sawasdee	2026-06-28 23:36:08 (3 weeks ago)	Port Scan ...	Port Scan
🇩🇪 raspi4	2026-06-28 23:35:48 (3 weeks ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇫🇷 ISPLtd	2026-06-28 21:58:51 (3 weeks ago)	Jun 28 18:58:51 20.119.94.177 TCP SPT=38101 DPT=2087 SYN Jun 28 18:58:51 20.119.94.177 TCP SPT=38097 ... show more Jun 28 18:58:51 20.119.94.177 TCP SPT=38101 DPT=2087 SYN Jun 28 18:58:51 20.119.94.177 TCP SPT=38097 DPT=8443 SYN Jun 28 18:58:51 20.119.94.177 TCP SPT=38084 DPT=2082 ... show less	Port Scan
Anonymous	2026-06-28 21:23:07 (3 weeks ago)	(caddyscan) Scanner path probe from 20.119.94.177 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 20.119.94.177 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.128.134.2 200 2627 20.119.94.177 - - [28/Jun/2026:21:23:00 +0000] "GET /.git/config HTTP/1.1" 216.128.134.2 200 2627 20.119.94.177 - - [28/Jun/2026:21:23:00 +0000] "GET /.git/logs/HEAD HTTP/1.1" 216.128.134.2 200 2627 20.119.94.177 - - [28/Jun/2026:21:23:01 +0000] "GET /.git/refs/heads/master HTTP/1.1" 216.128.134.2 200 2627 20.119.94.177 - - [28/Jun/2026:21:23:02 +0000] "GET /.git/refs/heads/main HTTP/1.1" 216.128.134.2 200 2627 20.119.94.177 - - [28/Jun/2026:21:23:04 +0000] "GET /.git/index HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-28 20:43:39 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 16:43:33.415474 2026] [security2:error] [pid 21025:tid 21025] [client 20.119.94.177:36942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.9"] [uri "/.git/HEAD"] [unique_id "akGHdVjIKYZVP7gKlG00xQAAADo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 20:00:46 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 16:00:44.035327 2026] [security2:error] [pid 11418:tid 11418] [client 20.119.94.177:36992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.54"] [uri "/.git/config"] [unique_id "akF9bPUk3euT--6B-tNXCwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 19:12:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 15:12:27.636965 2026] [security2:error] [pid 28466:tid 28466] [client 20.119.94.177:37206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.166"] [uri "/.git/HEAD"] [unique_id "akFyG-xmCFekqR75OA9eMwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NXTwoThou	2026-06-03 07:51:37 (1 month ago)	/___proxy_subdomain_whm/login/%3Flogin_only=1	Web App Attack
Anonymous	2026-06-03 05:58:13 (1 month ago)	Automated report from Fail2Ban firewall ban	Brute-Force SSH IoT Targeted
🇺🇸 TPI-Abuse	2026-06-03 05:38:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:38:02.356910 2026] [security2:error] [pid 4298:tid 4298] [client 20.119.94.177:10711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.163"] [uri "/.git/HEAD"] [unique_id "ah-9uldaoF5juYmKNTsVjAAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-03 05:20:33 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 05:16:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:16:21.762448 2026] [security2:error] [pid 29058:tid 29058] [client 20.119.94.177:10384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.env.local"] [unique_id "ah-4pU7JnFgDOQLd8i2B2AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 04:31:54 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-03 04:23:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.119.94.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:23:49.387393 2026] [security2:error] [pid 1404:tid 1404] [client 20.119.94.177:10377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.6"] [uri "/.git/HEAD"] [unique_id "ah-sVZcL6zmX4oddt87czAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1f18:3796:6f00:7926:36dc:a925:d99d

🇩🇪 167.94.146.73

🇭🇰 150.5.169.176

🇫🇮 147.185.133.97

🇺🇸 147.182.138.29

🇩🇪 118.193.59.15

🇺🇸 47.251.80.97

🇲🇾 47.250.193.165

🇺🇸 13.90.206.6

🇩🇪 2.26.99.220

🇵🇱 2400:cb00:906:1000:f1c3:ec54:926d:cb21

🇳🇱 185.229.227.199

🇦🇷 181.94.26.136

🇵🇱 176.53.159.197

🇫🇷 173.249.16.176

🇩🇪 167.94.146.47

🇺🇸 165.154.163.160

🇮🇷 152.89.12.101

🇨🇳 150.255.27.68

🇮🇳 143.110.191.140