JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.163.182.68

Neutral Activity

Abuse confidence score ?

0% Low Risk

35 reports

22 reporters · latest 2 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.163.182.68 has been reported 35 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.163.182.68

Export CSV

This IP address has been reported a total of 35 times from 22 distinct sources. 20.163.182.68 was first reported on April 4th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2024-04-24 17:27:23 (2 years ago)	24/Apr/2024:19:27:22.414269 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 24/Apr/2024:19:27:22.414269 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 20.163.182.68] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:lang: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "warzone.elhacker.net"] [uri "/index.php"] [unique_id "ZilA-ikCSThn3FRZW8jhHQAAAOA"] ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2024-04-23 04:02:13 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 gu-alvareza	2024-04-22 07:05:26 (2 years ago)	AndroxGh0st.Malware	Hacking Exploited Host
🇮🇪 Jim Keir	2024-04-22 02:30:33 (2 years ago)	2024-04-22 02:30:33 20.163.182.68 File scanning, blocking 20.163.182.68 for 5 minutes	Web App Attack
🇺🇸 TPI-Abuse	2024-04-22 02:24:57 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 22:24:54.986109 2024] [security2:error] [pid 30241] [client 20.163.182.68:58987] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.179"] [uri "/.env"] [unique_id "ZiXKdiUsc2o9PXaTzpIjMAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2024-04-22 02:20:12 (2 years ago)	IPS detection: AndroxGh0st.Malware	Hacking
🇺🇸 TPI-Abuse	2024-04-22 02:00:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 22:00:13.963472 2024] [security2:error] [pid 85001] [client 20.163.182.68:50047] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.55"] [uri "/.env"] [unique_id "ZiXErU1uiFAdq395i3wYpgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 ozisp.com.au	2024-04-22 01:48:31 (2 years ago)	US_Microsoft_<33>1713750510 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Clas ... show more US_Microsoft_<33>1713750510 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 20.163.182.68:65165 show less	Hacking
🇬🇧 SilverZippo	2024-04-22 01:44:24 (2 years ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-04-22 01:43:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 21:43:32.168458 2024] [security2:error] [pid 18872] [client 20.163.182.68:63891] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.174"] [uri "/.env"] [unique_id "ZiXAxFeR-K9f1AO7ojsLQQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-04-22 01:32:44 (2 years ago)	tcp/80	Port Scan
🇺🇸 TPI-Abuse	2024-04-22 01:24:57 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 21:24:53.777528 2024] [security2:error] [pid 19722] [client 20.163.182.68:49378] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.221"] [uri "/.env"] [unique_id "ZiW8ZaouUdm6xagwlQC1LAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-22 01:08:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 21:08:34.235430 2024] [security2:error] [pid 11049] [client 20.163.182.68:62147] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.239"] [uri "/.env"] [unique_id "ZiW4knMHhpAZ8Sl5FNm7bAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-22 00:50:40 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.163.182.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 20:50:36.475218 2024] [security2:error] [pid 3855] [client 20.163.182.68:55781] [client 20.163.182.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.99"] [uri "/.env"] [unique_id "ZiW0XEMFjZ-C1mEicJKXcQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fortypoundhead	2024-04-17 04:36:09 (2 years ago)	SQL Injection Attempt	SQL Injection Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 201.24.51.53

🇩🇴 190.167.75.90

🇺🇸 172.56.102.1

🇺🇸 160.223.208.152

🇺🇸 147.185.132.37

🇩🇿 129.45.5.48

🇩🇪 109.160.32.115

🇺🇸 104.61.178.232

🇺🇸 45.16.78.174

🇭🇰 23.91.97.30

🇪🇨 186.4.213.98

🇺🇸 104.251.240.229

🇮🇩 103.113.170.231

🇺🇸 99.61.8.194

🇩🇪 47.245.131.47

🇺🇸 47.219.207.223

🇯🇵 34.146.201.202

🇺🇸 24.53.129.78

🇨🇳 1.95.138.238

🇦🇷 200.49.113.17