JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.199.17.137

20.199.17.137 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 46%: ?

46%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.199.17.137

Whois 20.199.17.137

IP Abuse Reports for 20.199.17.137:

This IP address has been reported a total of 36 times from 11 distinct sources. 20.199.17.137 was first reported on June 30th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-15 16:31:52 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-07-15 16:24:08 (1 week ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 16:15:00 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 12:14:54.797920 2026] [security2:error] [pid 22168:tid 22168] [client 20.199.17.137:50276] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wisdomwfm.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wisdomwfm.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "alex_svBmjVFOiRr2CWSKAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 15:35:55 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 11:35:49.466488 2026] [security2:error] [pid 1955:tid 1955] [client 20.199.17.137:59522] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.godcanuseyou.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.godcanuseyou.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aleo1Yef94hfDyPVZyYCPAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 15:12:05 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 11:12:00.007460 2026] [security2:error] [pid 10534:tid 10534] [client 20.199.17.137:58193] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wildemar.info\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wildemar.info"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "alejQGkV_WmsSjuecqy9iwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 LMAS	2026-07-15 14:18:01 (1 week ago)	Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /vendor/phpunit/phpunit/php ... show more Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /vendor/phpunit/phpunit/phpunit.xsd — Honeypot triggered. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 13:23:09 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 09:23:03.971492 2026] [security2:error] [pid 6533:tid 6533] [client 20.199.17.137:52088] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.macryder.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.macryder.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aleJtx9BSg7gIU1aQGSdbQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 12:58:32 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:58:25.227821 2026] [security2:error] [pid 2488121:tid 2488121] [client 20.199.17.137:51445] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mrccertification.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mrccertification.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aleD8XG_T3H9QYvK8-z5sQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 12:42:19 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:42:13.482282 2026] [security2:error] [pid 20910:tid 20910] [client 20.199.17.137:64304] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|teenybikini.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "teenybikini.com"] [uri "/blog/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aleAJXXW8xt-4O_DZtTt3gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 11:47:58 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 07:47:54.641920 2026] [security2:error] [pid 643:tid 643] [client 20.199.17.137:62829] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.tttns.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tttns.com"] [uri "/about-jason/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldzasmV2CA8EPGLuiBlMQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 10:53:47 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 06:53:41.836901 2026] [security2:error] [pid 22185:tid 22185] [client 20.199.17.137:61419] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.washcountyfair.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.washcountyfair.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldmtTEHlWkd9JyLWt2TpQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 10:35:56 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 06:35:49.515103 2026] [security2:error] [pid 8313:tid 8313] [client 20.199.17.137:52528] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|theprairiejewel.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theprairiejewel.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldihVMPe1pl3eQBECEH5wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 10:11:12 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 06:11:06.740353 2026] [security2:error] [pid 14639:tid 14639] [client 20.199.17.137:51981] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|title34.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "title34.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldcunfE7WOjGHjERNRU-QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 09:55:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 05:55:21.327150 2026] [security2:error] [pid 23280:tid 23280] [client 20.199.17.137:52532] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ospectra.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ospectra.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldZCeRMibkohUngAuG4fwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 09:39:42 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.199.17.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 05:39:36.459551 2026] [security2:error] [pid 30987:tid 30987] [client 20.199.17.137:53836] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dodojuice.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dodojuice.com"] [uri "/iwl/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aldVWM2bEVC4tUEF_POvewAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.43

🇧🇪 198.235.24.244

🇲🇴 182.93.7.194

🇺🇸 172.232.15.250

🇨🇦 172.96.179.9

🇩🇪 167.94.146.68

🇩🇪 80.64.27.85

🇸🇬 51.79.146.118

🇨🇳 39.79.121.178

🇧🇷 200.175.61.207

🇧🇷 179.68.236.227

🇺🇸 157.55.39.49

🇫🇷 85.217.140.42

🇺🇸 44.220.188.29

🇸🇬 43.134.49.202

🇨🇱 186.189.73.201

🇨🇳 120.48.150.20

🇧🇷 108.174.147.120

🇮🇷 85.133.145.253

🇮🇳 20.193.141.133