JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.168.119.24

20.168.119.24 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 47%: ?

47%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.168.119.24

Whois 20.168.119.24

IP Abuse Reports for 20.168.119.24:

This IP address has been reported a total of 23 times from 19 distinct sources. 20.168.119.24 was first reported on May 6th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hbrks	2026-06-24 16:55:47 (2 weeks ago)	50 attack(s) detected, such as these: {"event":"web_block","ip":"20.168.119.24","host":"185.207.107. ... show more 50 attack(s) detected, such as these: {"event":"web_block","ip":"20.168.119.24","host":"185.207.107.155","request":"GET /___proxy_subdomain_whm/login/ HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-24T16:55:47 00:00","logentry":"185.207.107.155 20.168.119.24 - - [24/Jun/2026:16:55:47 0000] \"GET /___proxy_subdomain_whm/login/ HTTP/1.1\" 503 592 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\" \"-\""} * Report Details : https://p4u.xyz/FFJ8LLC7NT4/1 IP Details *: https://p4u.xyz/FFJ8LLC7NT4/2 show less	Web Spam Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-06-06 20:05:01 (1 month ago)	Imunify360 WAF block (graylisted)	Web App Attack
🇫🇷 dynamix	2026-06-06 17:56:10 (1 month ago)	Multiple WAF Violations	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-06 17:40:30 (1 month ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 deskpass.com	2026-06-06 17:23:19 (1 month ago)	GET /wp-config.php.bak	Web App Attack
🇺🇸 RAP	2026-06-06 17:20:05 (1 month ago)	2026-06-06 17:20:05 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇳🇱 taivas.nl	2026-06-06 16:30:05 (1 month ago)	web_app_attack	Email Spam
🇺🇸 TPI-Abuse	2026-06-06 16:26:33 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 12:26:30.706231 2026] [security2:error] [pid 10975:tid 10975] [client 20.168.119.24:63255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.195"] [uri "/.git/HEAD"] [unique_id "aiRKNrsD94wgXwOythhIaAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kkeyser	2026-06-06 16:17:18 (1 month ago)	GET /.env HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 15:57:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 11:57:47.388179 2026] [security2:error] [pid 14544:tid 14544] [client 20.168.119.24:62909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.20"] [uri "/.git/HEAD"] [unique_id "aiRDe8oemnuxBA4jesHVkAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-06 15:20:29 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 14:56:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.168.119.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 10:56:40.481966 2026] [security2:error] [pid 32537:tid 32537] [client 20.168.119.24:62501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.140"] [uri "/.git/HEAD"] [unique_id "aiQ1KKx_wWkrcyNOV5_00gAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇰 www.winos.me	2026-06-06 14:54:56 (1 month ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 [email protected]	2026-06-06 13:51:32 (1 month ago)	Ports: 80,443,2082,2083,2086,2087,8080,8443. Proto: TCP. Observations: 8	Port Scan Web App Attack
🇯🇵 demonsword	2026-06-03 17:33:16 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.104.76.94

🇬🇧 35.203.211.20

🇨🇳 218.202.91.147

🇮🇩 182.10.97.6

🇺🇸 167.172.133.19

🇺🇸 104.248.49.130

🇳🇬 102.91.72.116

🇨🇳 47.110.155.130

🇳🇱 45.148.10.240

🇺🇸 34.11.27.235

🇩🇪 2a01:4f8:150:13a5::100:f

🇵🇱 176.53.159.198

🇨🇳 175.30.48.222

🇮🇩 140.213.200.3

🇮🇳 128.185.220.90

🇮🇳 113.30.177.170

🇰🇪 105.160.125.141

🇭🇰 103.210.21.178

🇰🇷 58.229.180.112

🇺🇸 35.193.115.220