AbuseIPDB » 185.20.33.125
185.20.33.125 was found in our database!
This IP was reported 856 times. Confidence of Abuse is 100%: ?
| ISP | GCI Network Solutions Limited |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS8851 |
| Domain Name | nasstar.com |
| Country | 🇬🇧 United Kingdom of Great Britain and Northern Ireland |
| City | Salford, England |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 185.20.33.125:
This IP address has been reported a total of 856 times from 99 distinct sources. 185.20.33.125 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇸🇬 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
|
Hacking Web App Attack | ||
| 🇸🇪 peterh |
185.20.33.125 - - [20/Jun/2026:02:23:35 +0200] "GET /admin/config.php HTTP/1.0" 404 461 "-" "xfa1"
|
Bad Web Bot Web App Attack Hacking | ||
| 🇬🇧 openstrike.co.uk |
8 attacks on PHP URLs:
GET /admin/config.php HTTP/1.1
|
Web App Attack | ||
| 🇫🇷 pm33 |
Probing for resource vulnerabilities HTTP(S)
|
Web App Attack | ||
| 🇨🇿 rawnullbyte |
|
Web App Attack | ||
| 🇩🇪 Hary74656 |
|
Bad Web Bot | ||
| Anonymous |
automatically banned
|
Brute-Force Web App Attack | ||
| 🇩🇪 lumbermatt_de |
Vulnerability exploit attack detected
|
Web App Attack | ||
| 🇨🇿 Honzas |
Unsolicited connection attemp, port 443/TCP
|
Brute-Force | ||
| 🇳🇱 ReyhZhao |
|
Brute-Force | ||
| 🇺🇸 crooze.net |
|
Web App Attack | ||
| Anonymous |
|
Hacking Web App Attack | ||
| 🇦🇹 services.org.pl |
|
Bad Web Bot Web App Attack | ||
| 🇩🇪 Mykola Spesivtsev |
HTTP Tarpit detected bot activity:TargetPort:80, Path:/admin/config.php, Method:GET, UA:xfa1
|
Port Scan Web App Attack Bad Web Bot | ||
| 🇫🇷 ingroscart.it |
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection |
Showing 1 to 15 of 856 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩