JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.7.169.23

20.7.169.23 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.7.169.23

Whois 20.7.169.23

IP Abuse Reports for 20.7.169.23:

This IP address has been reported a total of 24 times from 19 distinct sources. 20.7.169.23 was first reported on March 24th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 weblite	2025-03-25 19:56:19 (1 year ago)	WP_MALWARE_PROBE	Hacking Web App Attack
🇺🇸 mnsf	2025-03-25 16:05:31 (1 year ago)	Too many Status 40X (14) Too many Status 50X (17)	Brute-Force Web App Attack
🇨🇦 Mediashaker	2025-03-25 12:00:12 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.169.23 (US/United S ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.169.23 (US/United States/-) show less	Port Scan
Anonymous	2025-03-25 11:56:56 (1 year ago)	[11:56:55] 4: Exploit attempt against non-existent file - /wp-content/plugins/hellopress/wp_fileman ... show more [11:56:55] 4: Exploit attempt against non-existent file - /wp-content/plugins/hellopress/wp_filemanager.php show less	Hacking Bad Web Bot Web App Attack
🇨🇦 mitsurugi	2025-03-25 10:08:00 (1 year ago)	Probing for too many things.	Bad Web Bot Web App Attack
Anonymous	2025-03-25 07:08:07 (1 year ago)	Inappropriate script execution attempts	Hacking Brute-Force
Anonymous	2025-03-25 07:03:03 (1 year ago)	Bot / scanning and/or hacking attempts: GET /wp-includes/lock.php HTTP/1.1, GET /wp-content/upgrade/ ... show more Bot / scanning and/or hacking attempts: GET /wp-includes/lock.php HTTP/1.1, GET /wp-content/upgrade/about.php HTTP/1.1, GET /wp-includes/ID3/about.php HTTP/1.1, GET /wp-includes/js/alfa-rex.php HTTP/1.1, GET /admin/atomlib.php HTTP/1.1, GET /wp-includes/certificates/up.php HTTP/1.1, GET /css/index.php HTTP/1.1, GET /item.php HTTP/1.1, GET /admin/images/slider/CUfcfoH.php HTTP/1.1, GET /wp-includes/blocks/edit.php HTTP/1.1, GET /wp-includes/theme-compat/about.php HTTP/1.1, GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1, GET /wp-admin/mah.php HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2025-03-25 01:50:13 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 20.7.169.23 (US/United States/-)	SQL Injection
🇺🇸 TPI-Abuse	2025-03-25 00:30:35 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.7.169.23 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 20.7.169.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 20:30:27.704932 2025] [security2:error] [pid 12249:tid 12249] [client 20.7.169.23:14584] [client 20.7.169.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|barrykrueger.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "barrykrueger.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-H5I5Vt0x00DkLV6g7gagAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-03-24 23:14:19 (1 year ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Vegascosmetics	2025-03-24 22:51:42 (1 year ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 22:44:57 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 20.7.169.23 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 20.7.169.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 18:44:54.069801 2025] [security2:error] [pid 3537430:tid 3537430] [client 20.7.169.23:16365] [client 20.7.169.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|tracdynamics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "tracdynamics.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-HgZrYLeZdf7TlBr2LjPQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 noxtec GmbH	2025-03-24 22:21:26 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.169.23 (US/United S ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.169.23 (US/United States/-) show less	Port Scan
🇫🇷 COMAITE	2025-03-24 21:42:49 (1 year ago)	Multiple web server 400 error codes from same source ip 20.7.169.23.	Web App Attack
🇲🇾 Rizzy	2025-03-24 21:02:03 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.118.196

🇫🇮 147.185.133.200

🇫🇷 104.23.225.38

🇮🇳 103.157.149.14

🇺🇸 92.204.128.28

🇺🇸 91.230.168.144

🇨🇦 85.217.149.61

🇺🇸 75.1.219.62

🇵🇱 54.37.235.85

🇺🇸 50.116.72.139

🇺🇦 31.202.95.23

🇨🇳 182.150.115.56

🇧🇷 177.223.38.155

🇬🇧 154.16.44.181

🇨🇳 112.44.243.191

🇺🇸 66.249.90.230

🇺🇸 66.132.195.124

🇺🇸 66.132.172.179

🇨🇳 58.37.196.39

🇬🇧 45.133.173.208