AbuseIPDB » 20.125.101.124

Check an IP Address, Domain Name, or Subnet

e.g. 34.232.62.64, microsoft.com, or 5.188.10.0/24

20.125.101.124 was found in our database!

This IP was reported 113 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.125.101.124

Whois 20.125.101.124

IP Abuse Reports for 20.125.101.124:

This IP address has been reported a total of 113 times from 61 distinct sources. 20.125.101.124 was first reported on March 18th 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Ivo Vynckier	16 hours ago	20.125.101.124 - - [30/Mar/2023:20:15:41 +0200] "GET /data/admin/allowurl.txt HTTP/1.1" 403 492 "-" ... show more20.125.101.124 - - [30/Mar/2023:20:15:41 +0200] "GET /data/admin/allowurl.txt HTTP/1.1" 403 492 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" show less	Hacking
CrystalMaker	20 hours ago	Vulnerability scan - GET /data/admin/allowurl.txt; GET /data/admin/allowurl.txt	Hacking
NoAbuseforU	21 hours ago	"HTTP protocol compliance failed"	Web App Attack
Security_Whaller	31 Mar 2023	Malicious Activity	Hacking Brute-Force Web App Attack
Anonymous	31 Mar 2023	20.125.101.124 - - \[31/Mar/2023:12:05:51 +0800\] \"GET /data/admin/allowurl.txt HTTP/1.1\" 404 5541 ... show more20.125.101.124 - - \[31/Mar/2023:12:05:51 +0800\] \"GET /data/admin/allowurl.txt HTTP/1.1\" 404 55416 \"-\" \"Mozilla/5.0 \(Windows NT 10.0\; WOW64\; rv:48.0\) Gecko/20100101 Firefox/48.0\" show less	Web App Attack
jcbriar	31 Mar 2023	Searching for vulnerable scripts	Hacking Web App Attack
MHuiG	31 Mar 2023	The IP has triggered Cloudflare WAF. action: skip source: firewallCustom clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: skip source: firewallCustom clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: US clientIP: 20.125.101.124 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /data/admin/allowurl.txt clientRequestQuery: datetime: 2023-03-30T23:53:20Z rayName: 7b04457d9a112ef9 ruleId: 936ce3b610d2450d9b3de5a4733a7fe9 userAgent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
ISPLtd	31 Mar 2023	20.125.101.124 - - [30/Mar/2023:18:39:48 -0600] "GET /data/admin/allowurl.txt ...	Hacking Web App Attack
jean	30 Mar 2023	GET /data/admin/allowurl.txt 404	Web App Attack
AvonleaConsulting	30 Mar 2023	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
GeekOnTheHill	30 Mar 2023	GET /data/admin/allowurl.txt HTTP/1.1	Hacking Web App Attack
AvonleaConsulting	30 Mar 2023	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
Unwasted	30 Mar 2023	Abusive content scan (abuse_score:>80)	Hacking Brute-Force Web App Attack
etu brutus	30 Mar 2023	20.125.101.124 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
Melanie Prough	30 Mar 2023	Host: 20.125.101.124 User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 ... show moreHost: 20.125.101.124 User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0 /data/admin/allowurl.txt show less	Hacking