AbuseIPDB » 20.115.81.118

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.250.73, microsoft.com, or 5.188.10.0/24

20.115.81.118 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 63%: ?

63%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.115.81.118

Whois 20.115.81.118

IP Abuse Reports for 20.115.81.118:

This IP address has been reported a total of 49 times from 28 distinct sources. 20.115.81.118 was first reported on January 27th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Security_Whaller	20 Feb 2023	Malicious Activity	Hacking Brute-Force Web App Attack
Buster	15 Feb 2023	Repeated mass attack attempts on multiple sites blocked: Perm Blocked ASN & country	DDoS Attack Open Proxy Hacking Web App Attack
netfactotum	15 Feb 2023		Hacking Web App Attack
SecondEdge	14 Feb 2023	A web attack was detected from 20.115.81.118 (United States / Virginia / Tappahannock) against clien ... show moreA web attack was detected from 20.115.81.118 (United States / Virginia / Tappahannock) against client.second-edge.com (AWS Credentials Probe) over 5s. show less	Web App Attack
Jim Keir	14 Feb 2023	2023-02-14 07:14:28 20.115.81.118 File scanning, blocking 20.115.81.118 for 5 minutes	Web App Attack
CrystalMaker	13 Feb 2023	PHP vulnerability scan - GET /.aws/credentials; GET /phpinfo; GET /phpinfo.php; GET /.env.bak; GET / ... show morePHP vulnerability scan - GET /.aws/credentials; GET /phpinfo; GET /phpinfo.php; GET /.env.bak; GET /info.php; GET /config/aws.yml; GET /_profiler/phpinfo show less	Web App Attack
AC - Team	12 Feb 2023	20.115.81.118 - - [12/Feb/2023:13:32:08 -0300] "GET /.env.bak HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Wi ... show more20.115.81.118 - - [12/Feb/2023:13:32:08 -0300] "GET /.env.bak HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	11 Feb 2023	WEB_SERVER 403 Forbidden	Hacking
ozisp.com.au	10 Feb 2023	US_Microsoft_<33>1676051787 [1:2019526:5] ET WEB_SERVER WEB-PHP phpinfo access [Classification: Info ... show moreUS_Microsoft_<33>1676051787 [1:2019526:5] ET WEB_SERVER WEB-PHP phpinfo access [Classification: Information Leak] [Priority: 2] {TCP} 20.115.81.118:50115 show less	Hacking
niceshops.com	10 Feb 2023	Web Attack ([10/Feb/2023:15:55:19.684] GET /.aws/credentials)	Web App Attack
axllent	10 Feb 2023	Scanning for exploits - /.aws/credentials/	Hacking Web App Attack
niceshops.com	10 Feb 2023	Web Attack ([10/Feb/2023:15:03:13.447] GET /.aws/credentials)	Web App Attack
NoAbuseforU	10 Feb 2023	"Illegal file type,Illegal HTTP status in response"	Brute-Force
niceshops.com	10 Feb 2023	Web Attack ([10/Feb/2023:11:21:46.737] GET /.aws/credentials)	Web App Attack
Bay13	10 Feb 2023	f2b urlscanners	Hacking Web App Attack