JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.120.134.45

20.120.134.45 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.120.134.45

Whois 20.120.134.45

IP Abuse Reports for 20.120.134.45:

This IP address has been reported a total of 141 times from 25 distinct sources. 20.120.134.45 was first reported on March 28th 2023, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-18 06:16:36 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇮🇩 hermawan	2025-11-16 09:44:23 (8 months ago)	[Sun Nov 16 16:43:09.862704 2025] [security2:error] [pid 75619:tid 140184768116416] [client 20.120.1 ... show more [Sun Nov 16 16:43:09.862704 2025] [security2:error] [pid 75619:tid 140184768116416] [client 20.120.134.45:55936] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/monitoring-hari-tanpa-hujan-berturut-turut?id=471 HTTP/1.1 Request URI RAW = /index.php/monitoring-hari-tanpa-hujan-berturut-turut?id=471 Request Basename = monitoring-hari-tanpa-hujan-berturut-turut"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/monitoring-hari-tanpa-hujan-berturut-turut"] [unique_id "aRmcrcH45g3Htnl2DzWEzgAAAAE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[75676] [4NzzDrPCu3U ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-09 02:23:38 (8 months ago)	[Sun Nov 09 09:23:19.065844 2025] [security2:error] [pid 677956:tid 140440608044736] [client 20.120. ... show more [Sun Nov 09 09:23:19.065844 2025] [security2:error] [pid 677956:tid 140440608044736] [client 20.120.134.45:56771] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: type= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-of-all-tags/offline-artikel?format=feed&type=atom HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/offline-artikel?format=feed&type=atom Request Basename = offline-artikel"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/offline-artikel"] [unique_id "aQ_7FwhJPZ5rp0DZY3M2gQAAAYY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg ... show less	Hacking Web App Attack
🇫🇷 polido	2025-11-04 20:56:10 (8 months ago)	Unauthorized connection attempt to port 443 from 20.120.134.45	Port Scan
🇩🇪 FeG Deutschland	2025-10-22 10:55:05 (8 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇮🇩 hermawan	2025-10-21 15:39:38 (8 months ago)	[Tue Oct 21 22:39:05.693173 2025] [security2:error] [pid 174694:tid 139898795308736] [client 20.120. ... show more [Tue Oct 21 22:39:05.693173 2025] [security2:error] [pid 174694:tid 139898795308736] [client 20.120.134.45:27648] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: format= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-all-categories/515-klimatologi/analisis-klimatologi/monitoring/monitoring-curah-hujan?format=feed&type=rss HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-all-categories/515-klimatologi/analisis-klimatologi/monitoring/monitoring-curah-hujan?format=feed&type=rss Request Basena..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/515- ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2025-10-17 12:24:14 (9 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-10-16 19:44:52 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 20.120.134.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.120.134.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 15:44:46.986008 2025] [security2:error] [pid 881:tid 881] [client 20.120.134.45:56576] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nrvoutdoors.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nrvoutdoors.com"] [uri "/VETTERLI/Thumbs.db"] [unique_id "aPFLLvZ2ExabagyEbEMYxgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 1gz	2025-10-12 23:45:43 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 advena	2025-10-05 11:15:56 (9 months ago)	20.120.134.45 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-10-05T11:05:31Z after vio ... show more 20.120.134.45 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-10-05T11:05:31Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2025-10-02 03:55:02 (9 months ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 1gz	2025-09-26 23:41:44 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 advena	2025-09-23 03:31:00 (9 months ago)	20.120.134.45 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-23T03:26:24Z after vio ... show more 20.120.134.45 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-23T03:26:24Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2025-09-20 12:54:03 (10 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-09-11 23:54:02 (10 months ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 139.185.55.154

🇷🇴 80.94.95.211

🇷🇴 193.32.162.83

🇲🇽 189.167.213.172

🇺🇸 147.185.132.51

🇹🇼 128.14.239.38

🇵🇰 103.79.16.159

🇫🇷 80.11.68.14

🇳🇱 51.158.205.203

🇬🇧 195.96.139.53

🇩🇪 193.26.157.32

🇩🇪 167.94.146.44

🇺🇸 147.185.132.12

🇨🇳 123.178.210.183

🇮🇩 103.82.93.69

🇺🇸 91.230.168.159

🇫🇷 80.87.206.20

🇬🇧 51.38.71.55

🇳🇱 45.148.10.152

🇭🇰 45.116.76.138