AbuseIPDB » 209.20.170.152
209.20.170.152
This IP was reported 24 times. Confidence of
Abuse
is 5% : ?
ISP
truview LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS203020
Domain Name
truviewllc.com
Country
🇪🇸
Spain
City
Paracuellos de Jarama, Madrid
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 209.20.170.152 :
This IP address has been reported a total of
24
times from
4 distinct
sources.
209.20.170.152 was first reported on
June 1st 2025 , and the most recent report was
6 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-02 04:16:45
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:16:35.591202 2026] [security2:error] [pid 24091:tid 24192] [client 209.20.170.152:42847] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kettlehill.kettlehill.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.kettlehill.com"] [uri "/\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini"] [unique_id "akXmI9CAl3_9ufpTltjRfQAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 02:06:39
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:06:31.293099 2026] [security2:error] [pid 7577:tid 7682] [client 209.20.170.152:32807] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/logs/error.log"] [unique_id "ahzpJ46nP6TlQzUBlJvP4AAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 11:32:47
(5 months ago)
(mod_security) mod_security (id:240950) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240950) triggered by 209.20.170.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:32:30.154481 2026] [security2:error] [pid 16721:tid 16873] [client 209.20.170.152:40497] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||autoconfig.kettlehill.kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "autoconfig.kettlehill.kettlehill.com"] [uri "/secure/QueryComponentRendererValue!Default.jspa"] [unique_id "aX85zrZSDMB2xJcUTnRbFQAAAoo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2025-11-14 02:52:42
(7 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-11-10 08:26:22
(7 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-11-09 06:52:15
(7 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-11-08 05:25:51
(7 months ago)
Web App Attack
Web App Attack
2025-11-05 11:36:42
(7 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇫🇷
Sklurk
2025-11-04 13:30:09
(7 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-31 16:30:22
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-30 15:11:01
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-29 00:17:53
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-24 04:30:57
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-23 02:28:44
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-10-20 08:16:13
(8 months ago)
Web App Attack
Web App Attack
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: