AbuseIPDB » 20.107.123.248

Check an IP Address, Domain Name, or Subnet

e.g. 3.236.107.249, microsoft.com, or 5.188.10.0/24

20.107.123.248 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 78%: ?

78%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.107.123.248

Whois 20.107.123.248

IP Abuse Reports for 20.107.123.248:

This IP address has been reported a total of 79 times from 49 distinct sources. 20.107.123.248 was first reported on March 3rd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
SiyCah	02 Jun 2022	[apache-modsecurity] Ban 20.107.123.248	Port Scan Hacking Brute-Force
vestibtech	30 May 2022	20.107.123.248 - - [30/May/2022:11:50:53 -0600] "GET /configs/config.ini HTTP/1.1" 301 453 "-" "-"<b ... show more20.107.123.248 - - [30/May/2022:11:50:53 -0600] "GET /configs/config.ini HTTP/1.1" 301 453 "-" "-" ... show less	Web App Attack
netfactotum	30 May 2022		Hacking Bad Web Bot Exploited Host Web App Attack
dwmosaics	27 May 2022	"GET /prod/.env HTTP/1.1" 301 523 "-" "-"	Brute-Force Web App Attack
blinx	27 May 2022	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
ut-addicted.com	27 May 2022	\[Fri May 27 14:23:42.428389 2022\] \[:error\] \[pid 19603:tid 139915485591296\] \[client 20.107.123 ... show more\[Fri May 27 14:23:42.428389 2022\] \[:error\] \[pid 19603:tid 139915485591296\] \[client 20.107.123.248:34386\] \[client 20.107.123.248\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "multitool.email"\] \[uri "/.env"\] \[unique_id "YpDCzr5wl80ePA7CEx6DaQAAAMA"\] show less	Brute-Force Web App Attack
nextweb	27 May 2022	(mod_security) mod_security (id:210492) triggered by 20.107.123.248 (NL/Netherlands/North Holland/Am ... show more(mod_security) mod_security (id:210492) triggered by 20.107.123.248 (NL/Netherlands/North Holland/Amsterdam/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
MSZ	26 May 2022	Fail2Ban triggered by plesk-modsecurity Thu 26 May 2022 06:43:12 PM CEST	Hacking Brute-Force Web App Attack
sebaro11	26 May 2022	Portscan on 80/TCP blocked by UFW	Port Scan
Anonymous	26 May 2022	Logfile match	Web App Attack
Anonymous	25 May 2022	Time: Wed May 25 15:38:08 2022 -0300 IP: 20.107.123.248 (NL/Netherlands/-) F ... show moreTime: Wed May 25 15:38:08 2022 -0300 IP: 20.107.123.248 (NL/Netherlands/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block show less	Web App Attack
MSZ	24 May 2022	Fail2Ban triggered by plesk-modsecurity Wed 25 May 2022 01:58:06 AM CEST	Hacking Brute-Force Web App Attack
inspectorperuano	24 May 2022	GET /vendor/laravel/.env HTTP/1.1	Web App Attack
alps.one	24 May 2022	(mod_security) mod_security (id:949110) triggered by 20.107.123.248 (NL/Netherlands/-): 5 in the las ... show more(mod_security) mod_security (id:949110) triggered by 20.107.123.248 (NL/Netherlands/-): 5 in the last 3600 secs show less	Brute-Force
Buster	24 May 2022	Mass attack attempts blocked: Perm Blocked ASN and country	DDoS Attack Hacking Brute-Force Web App Attack