JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.122.97.200

Neutral Activity

Abuse Confidence Score

0% Low Risk

46 reports

29 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.122.97.200 has been reported 46 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

46 from 29 distinct reporters

First reported

November 25th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rbot	2025-11-27 19:16:00 UTC · (11 months ago)	more than 20 404 requests for the file /wp-content/ai1wm-backups	Web App Attack
🇬🇧 openstrike.co.uk	2025-11-27 06:14:12 UTC · (11 months ago)	273 attacks on PHP URLs, Alfa URLs, env grabbing URLs, FCKeditor URLs: GET /.well-known/acme-challenge/xa.php HTTP/1.1 GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1 GET /user/.env HTTP/1.1 GET /admin/fckeditor/editor/filemanager/ HTTP/1.1	Hacking Web App Attack
🇬🇧 [email protected]	2025-11-27 00:45:00 UTC · (11 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-11-26 23:05:44 UTC · (11 months ago)	Auto-ban: 17 malicious requests on 2025-11-25 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇺🇸 kosada.com	2025-11-26 22:56:39 UTC · (11 months ago)	Web vulnerability probing: /1.php	Web App Attack
🇷🇺 OK	2025-11-26 22:53:02 UTC · (11 months ago)	HTTP/HTTPS	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 19:29:33 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:29:29.875832 2025] [security2:error] [pid 2982:tid 2982] [client 20.122.97.200:2628] ModS ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:29:29.875832 2025] [security2:error] [pid 2982:tid 2982] [client 20.122.97.200:2628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.midnightscribe.com"] [uri "/user/.env"] [unique_id "aSdVGTR1k0DAEwyMjsDU9AAAAAw"], referer: https://www.google.co.uk/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-11-26 19:26:27 UTC · (11 months ago)	trolling for resource vulnerabilities	Web App Attack
🇮🇳 dineshskt4all	2025-11-26 19:14:45 UTC · (11 months ago)	[Wed Nov 26 19:14:43.240834 2025] [proxy_fcgi:error] [pid 3437252:tid 136737724556992] [client 20.122.97.200:0] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/ ...	Brute-Force
🇬🇧 cybersteve99	2025-11-26 18:36:59 UTC · (11 months ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 18:13:11 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:13:07.683224 2025] [security2:error] [pid 5209:tid 5209] [client 20.122.97.200:1097] ModS ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:13:07.683224 2025] [security2:error] [pid 5209:tid 5209] [client 20.122.97.200:1097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.eurocs2.com"] [uri "/user/.env"] [unique_id "aSdDM_sFikrRh5jrzZ9pcgAAABw"], referer: https://www.bing.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 17:08:56 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 12:08:49.150124 2025] [security2:error] [pid 27870:tid 27870] [client 20.122.97.200:11467] M ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 12:08:49.150124 2025] [security2:error] [pid 27870:tid 27870] [client 20.122.97.200:11467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chiquy.com"] [uri "/user/.env"] [unique_id "aSc0IUaZVA9Y0la7HE-kAAAAAAg"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 15:12:46 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 10:12:40.403831 2025] [security2:error] [pid 4050576:tid 4050603] [client 20.122.97.200:7564 ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 10:12:40.403831 2025] [security2:error] [pid 4050576:tid 4050603] [client 20.122.97.200:7564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.conservativedemocrat.com"] [uri "/user/.env"] [unique_id "aScY6CTZ1m6HLLtPnQuAEwAAAJc"], referer: https://www.google.fr/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 14:16:24 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 09:16:19.799767 2025] [security2:error] [pid 26300:tid 26300] [client 20.122.97.200:3331] Mo ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 09:16:19.799767 2025] [security2:error] [pid 26300:tid 26300] [client 20.122.97.200:3331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gbcwoodbine.org"] [uri "/user/.env"] [unique_id "aScLs31Sz-44KwxrxiShpAAAAA0"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 12:23:15 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:23:11.024723 2025] [security2:error] [pid 27876:tid 27876] [client 20.122.97.200:9875] Mo ... show more (mod_security) mod_security (id:210492) triggered by 20.122.97.200 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:23:11.024723 2025] [security2:error] [pid 27876:tid 27876] [client 20.122.97.200:9875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rlarms.com"] [uri "/user/.env"] [unique_id "aSbxLyIWmgYdTS8NV82m5QAAAAE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 2001:9e8:525f:d300:d96e:dbb7:1fab:d909

🇺🇸 207.90.244.4

🇺🇸 162.216.149.33

🇺🇸 3.86.139.107

🇭🇰 118.193.39.103

🇨🇳 117.184.44.55

🇬🇧 104.248.163.97

🇺🇸 24.127.121.62

🇬🇧 2.57.17.42

🇩🇪 162.62.124.141

🇫🇮 147.185.133.141

🇬🇧 92.41.176.142

🇺🇸 13.86.117.25

🇺🇸 195.184.76.107

🇳🇱 195.178.110.102

🇬🇧 193.176.29.30

🇷🇴 193.46.255.86

🇺🇸 172.236.228.227

🇺🇸 162.216.149.7

🇷🇺 91.202.233.64