JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.12.200.91

20.12.200.91 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.12.200.91

Whois 20.12.200.91

IP Abuse Reports for 20.12.200.91:

This IP address has been reported a total of 11 times from 8 distinct sources. 20.12.200.91 was first reported on July 13th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Tom Thayer	2024-07-15 10:52:00 (2 years ago)	Too many 404 requests for /radio.php	Hacking Brute-Force Web App Attack
🇫🇷 Sklurk	2024-07-14 06:08:04 (2 years ago)	Web App Attack	Web App Attack
Anonymous	2024-07-14 04:37:01 (2 years ago)	Bot / scanning and/or hacking attempts: GET /ae.php HTTP/1.1, GET /moon.php HTTP/1.1, GET /xmrlpc.ph ... show more Bot / scanning and/or hacking attempts: GET /ae.php HTTP/1.1, GET /moon.php HTTP/1.1, GET /xmrlpc.php HTTP/1.1, GET /wp-login.php?action=register HTTP/1.1, GET /updates.php HTTP/1.1, GET /radio.php HTTP/1.1, GET /404.php HTTP/1.1, GET /plugins.php HTTP/1.1, GET /bypass.php HTTP/1.1, GET /wp-activate.php HTTP/1.1 show less	Hacking Web App Attack
🇦🇺 Bay13	2024-07-14 04:17:28 (2 years ago)	f2b urlscanners	Port Scan Hacking Web App Attack
🇨🇦 Mediashaker	2024-07-14 04:17:14 (2 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.12.200.91 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.12.200.91 (US/United States/-) show less	Port Scan
Anonymous	2024-07-14 02:37:05 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-07-14 00:45:59 (2 years ago)	(mod_security) mod_security (id:210580) triggered by 20.12.200.91 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210580) triggered by 20.12.200.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 20:45:53.251089 2024] [security2:error] [pid 14208] [client 20.12.200.91:8968] [client 20.12.200.91] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/config.php" at ARGS_NAMES:Directnic/config.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|www.vitalitywebb.com\|F\|2"] [data "Matched Data: /config.php found within ARGS_NAMES:Directnic/config.php: directnic/config.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.vitalitywebb.com"] [uri "/"] [unique_id "ZpMfwafyaUfWVtb1oDpLYQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-14 00:26:09 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-14 00:00:25 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇧🇪 cmbplf	2024-07-13 22:01:49 (2 years ago)	8.921 requests in 1 hour (19h59m59s)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-07-13 21:29:10 (2 years ago)	(mod_security) mod_security (id:210580) triggered by 20.12.200.91 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210580) triggered by 20.12.200.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 17:29:03.550081 2024] [security2:error] [pid 25223] [client 20.12.200.91:6512] [client 20.12.200.91] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/config.php" at ARGS:action. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|stlouisdave.com\|F\|2"] [data "Matched Data: /config.php found within ARGS:action: weedivers1/config.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "stlouisdave.com"] [uri "/dive/index.php"] [unique_id "ZpLxn87DsaxnAyYnQIKZ2gAAACE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.75.215

🇮🇳 98.70.50.166

🇮🇷 95.38.195.30

🇩🇪 87.106.141.44

🇺🇦 46.164.148.190

🇲🇽 45.164.237.213

🇳🇱 45.148.10.59

🇳🇱 34.6.90.21

🇭🇰 20.205.97.67

🇮🇳 20.204.161.246

🇮🇳 20.204.110.107

🇳🇱 213.124.221.2

🇳🇱 195.178.110.26

🇩🇪 167.94.145.17

🇮🇳 167.71.229.198

🇨🇳 140.205.122.143

🇺🇸 138.89.120.31

🇺🇸 129.121.101.56

🇮🇳 122.168.123.73

🇭🇰 118.193.39.103