JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.221.120.24

68.221.120.24

Neutral Activity

14 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇪🇸 Spain

City

Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

68.221.120.24 has been reported 14 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 68.221.120.24:

This IP address has been reported a total of 14 times from 9 distinct sources. 68.221.120.24 was first reported on July 19th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 Lindsay Yoon	2024-07-30 00:00:00 (2 years ago)		Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇰🇷 Lindsay Yoon	2024-07-30 00:00:00 (2 years ago)		Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇷 conseilgouz	2024-07-29 12:06:29 (2 years ago)	ame-17 : Block hidden directories=>/.env(/)	Hacking
🇩🇪 FeG Deutschland	2024-07-29 09:03:01 (2 years ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
🇷🇺 ITShelter Security	2024-07-29 00:50:46 (2 years ago)	Restricted File Access Attempt 2024/07/29 03:50:46 +03:00 req: GET /.env HTTP/1.1, host: *.pro 202 ... show more Restricted File Access Attempt 2024/07/29 03:50:46 +03:00 req: GET /.env HTTP/1.1, host: .pro 2024/07/29 13:52:38 +03:00 req: GET /.env HTTP/1.1, host: **.pro show less	Bad Web Bot Web App Attack
🇫🇷 Bensay	2024-07-28 23:25:30 (2 years ago)	68.221.120.24 - - [29/Jul/2024:01:25:13 +0200] "GET /.env HTTP/1.1" 404 508 "-" "Mozilla/5.0 (Linux; ... show more 68.221.120.24 - - [29/Jul/2024:01:25:13 +0200] "GET /.env HTTP/1.1" 404 508 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 68.221.120.24 - - [29/Jul/2024:01:25:21 +0200] "GET /.env HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 68.221.120.24 - - [29/Jul/2024:01:25:24 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 496 "-" "python-requests/2.32.3" 68.221.120.24 - - [29/Jul/2024:01:25:26 +0200] "GET /.env HTTP/1.1" 404 500 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 68.221.120.24 - - [29/Jul/2024:01:25:29 +0200] "GET /vendor/phpunit/phpunit/src/Util/PH ... show less	Hacking Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-07-28 21:21:47 (2 years ago)	120 requests to *.env 109 requests to /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Brute-Force Bad Web Bot
🇰🇷 Lindsay Yoon	2024-07-28 00:00:00 (2 years ago)		Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2024-07-19 17:06:34 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 19 13:06:27.260209 2024] [security2:error] [pid 26998:tid 26998] [client 68.221.120.24:63143] [client 68.221.120.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dodojuice.com"] [uri "/.env"] [unique_id "ZpqdE5VTg-i0Xi80nn4sCAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-19 15:22:57 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 19 11:22:51.235159 2024] [security2:error] [pid 14149:tid 14149] [client 68.221.120.24:60454] [client 68.221.120.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.societasprivata.com"] [uri "/.env"] [unique_id "ZpqEy6b0zZyRuCNye3gAlwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Bensay	2024-07-19 13:43:20 (2 years ago)	68.221.120.24 - - [19/Jul/2024:15:42:57 +0200] "GET /.env HTTP/1.1" 404 508 "-" "Mozilla/5.0 (Linux; ... show more 68.221.120.24 - - [19/Jul/2024:15:42:57 +0200] "GET /.env HTTP/1.1" 404 508 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 68.221.120.24 - - [19/Jul/2024:15:43:00 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 508 "-" "python-requests/2.32.3" 68.221.120.24 - - [19/Jul/2024:15:43:11 +0200] "GET /.env HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 68.221.120.24 - - [19/Jul/2024:15:43:15 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 496 "-" "python-requests/2.32.3" 68.221.120.24 - - [19/Jul/2024:15:43:19 +0200] "GET /.env HTTP/1.1" 404 500 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 GabrielJST	2024-07-19 13:32:40 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 68.221.120.24 (-)	Bad Web Bot
🇩🇪 uhlhosting	2024-07-19 08:31:19 (2 years ago)	africanbushdoctorz.com 68.221.120.24 - - [19/Jul/2024:10:30:26.058464 +0200] "GET /.env HTTP/1.1" 40 ... show more africanbushdoctorz.com 68.221.120.24 - - [19/Jul/2024:10:30:26.058464 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" ZpokIl7DepEzrHTkhKETfQAAANM "-" /apache/20240719/20240719-1030/20240719-103026-ZpokIl7DepEzrHTkhKETfQAAANM 0 1276 md5:e98c4d83f3d4b2bc09cb701c72c649d0 africanbushdoctorz.com 68.221.120.24 - - [19/Jul/2024:10:30:26.372885 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" ZpokIl7DepEzrHTkhKETfwAAAM8 "-" /apache/20240719/20240719-1030/20240719-103026-ZpokIl7DepEzrHTkhKETfwAAAM8 0 1275 md5:36b9c631302aabe81cdb6fb5e7883d9b africanbushdoctorz.com 68.221.120.24 - - [19/Jul/2024:10:30:27.269536 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 199 "-" "-" ZpokI17DepEzrHTkhKETgQAAAM4 "-" /apache/20240719/20240719-1030/20240719-103027-ZpokI17DepEzrHTkhKETgQAAAM4 0 1899 md5:5491798146ca86f6f38b71b1f06d74e3 atec-bb.ch 68.221.120.24 - - [19/Jul/2024:10:31:18.309997 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" ZpokVgY9A_zxkzSZ1nIAegAAAA4 "-" /apache/20240719/20240 ... show less	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-07-19 05:43:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 68.221.120.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 19 01:42:55.334005 2024] [security2:error] [pid 5925:tid 5984] [client 68.221.120.24:63827] [client 68.221.120.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isa-logistics.com"] [uri "/.env"] [unique_id "Zpn83-x5lQfWfOKizow9QwAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.151

🇻🇳 103.82.21.8

🇺🇸 91.230.168.110

🇨🇱 200.86.248.161

🇨🇴 186.86.32.121

🇱🇹 141.98.10.205

🇺🇸 104.232.79.58

🇵🇰 103.31.94.153

🇮🇩 103.10.120.162

🇰🇪 102.208.164.146

🇺🇸 102.129.223.92

🇷🇺 95.25.16.101

🇷🇴 92.118.39.71

🇫🇷 91.231.89.234

🇫🇷 85.217.140.37

🇺🇸 65.49.1.164

🇧🇪 35.240.119.161

🇸🇬 35.198.250.158

🇺🇸 20.168.116.9

🇺🇸 216.180.246.220