JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.219.188.145

Neutral Activity

Abuse confidence score ?

0% Low Risk

203 reports

68 reporters · latest 1 year ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.219.188.145 has been reported 203 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.219.188.145

Export CSV

This IP address has been reported a total of 203 times from 68 distinct sources. 20.219.188.145 was first reported on May 5th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Greg Poulson	2025-04-08 20:15:41 (1 year ago)	Our website was hit by this DDOS at a rate of 28 in 5 minutes.	DDoS Attack Web Spam Brute-Force
Anonymous	2023-05-25 11:39:12 (3 years ago)	Backdrop CMS module - Request: /wordpress	Bad Web Bot Web App Attack
🇺🇸 Donovan_DMC	2023-05-24 19:38:09 (3 years ago)	GET /wp-content/themes/seotheme/db.php?u - 20.219.188.145 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A ... show more GET /wp-content/themes/seotheme/db.php?u - 20.219.188.145 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36) [wp-content]: WordPress Content Scanner [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack
🇳🇱 0xffffffff	2023-05-24 19:05:40 (3 years ago)	[2023-05-24 22:05:38.347815] [authz_core:error] [pid 2004550:tid 140666000823872] [client 20.219.188 ... show more [2023-05-24 22:05:38.347815] [authz_core:error] [pid 2004550:tid 140666000823872] [client 20.219.188.145:0] AH01630: client denied by server configuration: /var/www//wp-content/themes/seotheme, referer www.google.com , error_notes:missing-php , URI:'/wp-content/themes/seotheme/db.php?u' [2023-05-24 22:05:38.368170] [authz_core:error] [pid 2004550:tid 140666000823872] [client 20.219.188.145:0] AH01630: client denied by server configuration: /var/www//ALFA_DATA, referer www.google.com , error_notes:alfa-shell , URI:'/ALFA_DATA/alfacgiapi/perl.alfa' [2023-05-24 22:05:38.368170] [authz_core:error] [pid 2004550:tid 140666000823872] [client 20.219.188.145:0] AH01630: client denied by server configuration: /var/www/*/ALFA_DATA, referer www.google.com , error_notes:alfa-shell , URI:'/ALFA_DATA/alfacgiapi/perl.alfa' show less	Bad Web Bot Web App Attack
🇺🇸 mawan	2023-05-24 17:05:26 (3 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 Major Hostility	2023-05-24 16:44:25 (3 years ago)	"GET /wordpress HTTP/1.1" 404 "GET /wp HTTP/1.1" 404 "GET /blog HTTP/1.1" 404 "GET /new HTTP/1.1" 40 ... show more "GET /wordpress HTTP/1.1" 404 "GET /wp HTTP/1.1" 404 "GET /blog HTTP/1.1" 404 "GET /new HTTP/1.1" 404 "GET /old HTTP/1.1" 404 "GET /test HTTP/1.1" 404 "GET /main HTTP/1.1" 404 "GET /testing HTTP/1.1" 404 "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 "POST /wp-plain.php HTTP/1.1" 404 "GET /wordpress HTTP/1.1" 404 "GET /wp HTTP/1.1" 404 "GET /blog HTTP/1.1" 404 "GET /new HTTP/1.1" 404 "GET /old HTTP/1.1" 404 "GET /test HTTP/1.1" 404 "GET /main HTTP/1.1" 404 "GET /testing HTTP/1.1" 404 show less	Web App Attack
🇫🇷 geot	2023-05-24 15:41:19 (3 years ago)	GET /blog HTTP/1.1 GET /old HTTP/1.1 GET /test HTTP/1.1 GET /wordpress HTTP/1.1 GET /main HTTP/1.1 G ... show more GET /blog HTTP/1.1 GET /old HTTP/1.1 GET /test HTTP/1.1 GET /wordpress HTTP/1.1 GET /main HTTP/1.1 GET /wp HTTP/1.1 GET /testing HTTP/1.1 GET /new HTTP/1.1 show less	Web App Attack
🇺🇸 SleepyHosting	2023-05-24 11:26:43 (3 years ago)	(mod_security) mod_security (id:400010) triggered by 20.219.188.145 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:400010) triggered by 20.219.188.145 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 chronos	2023-05-24 05:04:20 (3 years ago)	[[24/05/2023 - 02:04:20 -03:00 UTC] Attack from [Microsoft Corporation] [20.219.188.145] Action: BLo ... show more [[24/05/2023 - 02:04:20 -03:00 UTC] Attack from [Microsoft Corporation] [20.219.188.145] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software] ... show less	Hacking Web App Attack
🇺🇸 chronos	2023-05-24 03:44:15 (3 years ago)	[[24/05/2023 - 00:44:14 -03:00 UTC] Attack from [Microsoft Corporation] [20.219.188.145] Action: BLo ... show more [[24/05/2023 - 00:44:14 -03:00 UTC] Attack from [Microsoft Corporation] [20.219.188.145] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇿🇦 IrisFlower	2023-05-23 23:52:03 (3 years ago)	Unauthorized connection attempt detected from IP address 20.219.188.145 to port 80 [J]	Port Scan Hacking
🇸🇬 mypatricks	2023-05-23 23:51:00 (3 years ago)	20.219.188.145 \| Port: 28218 \| DNS: 20.219.188.145 2023-05-24T07:50:59+08:00 Asia/Singapore \| Suspic ... show more 20.219.188.145 \| Port: 28218 \| DNS: 20.219.188.145 2023-05-24T07:50:59+08:00 Asia/Singapore \| Suspicious User Abuse Activity \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 HTTP/1.1 443 POST \| URL: /ALFA_DATA/alfacgiapi/perl.alfa \| Ref: www.google.com \| Country: IN/India/+05:00 IP City: Pune 7cc1344c0b63f4ca-BOM/Mumbai, India 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇿🇦 IrisFlower	2023-05-23 23:41:07 (3 years ago)	Unauthorized connection attempt detected from IP address 20.219.188.145 to port 80 [J]	Port Scan Hacking
🇫🇷 oh.mg	2023-05-23 17:27:31 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 20.219.188.145 (IN/India/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:949110) triggered by 20.219.188.145 (IN/India/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue May 23 17:27:27.778174 2023] [:error] [pid 2900214:tid 140240840763136] [client 20.219.188.145:64992] [client 20.219.188.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "184"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "anomaly-evaluation"] [hostname "oh.mg"] [uri "/wp-plain.php"] [unique_id "ZGz3f2Ph994-5tLsSfyH2wAAAJI"], referer: www.google.com show less	Port Scan
🇸🇬 mypatricks	2023-05-23 11:01:00 (3 years ago)	20.219.188.145 \| Port: 60908 \| DNS: 20.219.188.145 2023-05-23T19:00:59+08:00 Asia/Singapore \| Suspic ... show more 20.219.188.145 \| Port: 60908 \| DNS: 20.219.188.145 2023-05-23T19:00:59+08:00 Asia/Singapore \| Suspicious User Abuse Activity \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 HTTP/1.1 443 POST \| URL: /ALFA_DATA/alfacgiapi/perl.alfa \| Ref: www.google.com \| Country: IN/India/+05:00 IP City: Pune 7cbccc5f1f506ed7-BOM/Mumbai, India 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 203 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 2803:e140:1f1:ee90:2649:8839:dec8:86ae

🇬🇧 200.138.46.6

🇦🇫 180.94.75.202

🇳🇱 158.94.209.32

🇺🇸 136.108.62.115

🇺🇸 134.209.120.216

🇺🇸 107.173.234.253

🇮🇳 103.156.18.36

🇺🇸 69.42.211.202

🇩🇪 64.89.160.222

🇰🇷 211.51.132.104

🇦🇷 190.104.36.242

🇺🇸 184.105.139.84

🇵🇱 176.53.159.197

🇺🇸 167.71.104.94

🇳🇱 158.94.209.25

🇺🇸 104.23.209.199

🇺🇸 69.42.211.201

🇧🇷 191.6.112.44

🇳🇱 185.136.15.111