JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.122.97.142

Neutral Activity

Abuse Confidence Score

0% Low Risk

45 reports

27 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.122.97.142 has been reported 45 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

45 from 27 distinct reporters

First reported

November 25th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-11-27 20:10:09 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇺 paulshipley.com.au	2025-11-27 02:24:55 UTC · (11 months ago)	underconstruction.paulshipley.info:443 20.122.97.142 - - [27/Nov/2025:13:24:36 +1100] "GET /.well-known/ HTTP/1.1" 404 3399 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ver ... show more underconstruction.paulshipley.info:443 20.122.97.142 - - [27/Nov/2025:13:24:36 +1100] "GET /.well-known/ HTTP/1.1" 404 3399 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" underconstruction.paulshipley.info:443 20.122.97.142 - - [27/Nov/2025:13:24:37 +1100] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 466 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" underconstruction.paulshipley.info:443 20.122.97.142 - - [27/Nov/2025:13:24:37 +1100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 404 466 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" underconstruction.paulshipley.info:443 20.122.97.142 - - [27/Nov/2025:13:24:38 +1100] "GET /.w ... show less	Web App Attack
🇳🇱 Site.eu	2025-11-27 00:49:01 UTC · (11 months ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 [email protected]	2025-11-27 00:45:00 UTC · (11 months ago)	...	Brute-Force SSH
Anonymous	2025-11-27 00:33:03 UTC · (11 months ago)	20.122.97.142 - - [27/Nov/2025:01:32:33 +0100] "GET /1.php HTTP/1.1" 404 435 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [27/Nov/2 ... show more 20.122.97.142 - - [27/Nov/2025:01:32:33 +0100] "GET /1.php HTTP/1.1" 404 435 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [27/Nov/2025:01:32:33 +0100] "GET /403.php HTTP/1.1" 404 435 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [27/Nov/2025:01:32:33 +0100] "GET /aa.php HTTP/1.1" 404 435 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [27/Nov/2025:01:32:33 +0100] "GET /abcd.php HTTP/1.1" 404 435 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [27/Nov/2025:01:32:34 +0100] "GET /about.php HTTP/1.1" 404 435 "https://www.googl ... show less	DDoS Attack
🇳🇱 homeshowdomain.nl	2025-11-26 23:05:30 UTC · (11 months ago)	Auto-ban: 20 malicious requests on 2025-11-25 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇺🇸 mnsf	2025-11-26 23:05:13 UTC · (11 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2025-11-26 22:51:27 UTC · (11 months ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-11-26 20:10:07 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 19:26:57 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:26:52.941992 2025] [security2:error] [pid 24119:tid 24119] [client 20.122.97.142:6173] Mo ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:26:52.941992 2025] [security2:error] [pid 24119:tid 24119] [client 20.122.97.142:6173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabbathschoolguide.com"] [uri "/user/.env"] [unique_id "aSdUfDzS1QZaOoasC9brSwAAABA"], referer: https://www.google.de/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-11-26 19:01:01 UTC · (11 months ago)	20.122.97.142 - - [26/Nov/2025:21:00:32 +0200] "GET /cgi-bin/ HTTP/1.1" 404 439 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [26/ ... show more 20.122.97.142 - - [26/Nov/2025:21:00:32 +0200] "GET /cgi-bin/ HTTP/1.1" 404 439 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.122.97.142 - - [26/Nov/2025:21:01:01 +0200] "GET /cgi-bin/bypass.php HTTP/1.1" 404 439 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 18:50:51 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:50:46.397896 2025] [security2:error] [pid 24574:tid 24574] [client 20.122.97.142:4399] Mo ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:50:46.397896 2025] [security2:error] [pid 24574:tid 24574] [client 20.122.97.142:4399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gracefaerie.com"] [uri "/user/.env"] [unique_id "aSdMBhTI-rAdK4DtNp-ySQAAABM"], referer: https://duckduckgo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 antlac1	2025-11-26 18:43:14 UTC · (11 months ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2025-11-26 16:31:26 UTC · (11 months ago)	common exploit scan	Web App Attack
🇨🇭 zynex	2025-11-26 16:14:27 UTC · (11 months ago)	URL Probing: /filemanager/dialog.php	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 172.255.209.239

🇺🇸 137.184.217.254

🇵🇸 1.179.47.125

🇺🇸 203.161.35.165

🇹🇭 202.29.220.106

🇨🇿 185.91.116.125

🇺🇸 184.185.26.51

🇨🇳 171.37.194.100

🇺🇸 167.99.103.26

🇺🇸 159.89.54.205

🇺🇸 137.184.70.192

🇹🇭 125.25.123.225

🇫🇷 91.196.152.90

🇦🇷 45.175.162.167

🇳🇱 45.148.10.152

🇨🇳 39.79.125.144

🇨🇳 223.83.131.241

🇮🇳 182.95.12.178

🇧🇷 168.181.217.59

🇰🇷 125.130.102.172