JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.125.114.211

20.125.114.211 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.125.114.211

Whois 20.125.114.211

IP Abuse Reports for 20.125.114.211:

This IP address has been reported a total of 22 times from 20 distinct sources. 20.125.114.211 was first reported on May 25th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 wdmleds.com	2022-06-06 16:46:46 (4 years ago)	[Mon Jun 06 22:46:41.826930 2022] [authz_core:error] [pid 3509620:tid 140664255796992] [client 20.12 ... show more [Mon Jun 06 22:46:41.826930 2022] [authz_core:error] [pid 3509620:tid 140664255796992] [client 20.125.114.211:1536] AH01630: client denied by server configuration: /var/www/html/.env [Mon Jun 06 22:46:42.145974 2022] [authz_core:error] [pid 3509016:tid 140665144997632] [client 20.125.114.211:1537] AH01630: client denied by server configuration: /var/www/html/ [Mon Jun 06 22:46:45.420752 2022] [authz_core:error] [pid 3509622:tid 140665103034112] [client 20.125.114.211:1538] AH01630: client denied by server configuration: /var/www/html/vendor ... show less	Web Spam Brute-Force Bad Web Bot
🇱🇹 NotACaptcha	2022-06-05 17:52:50 (4 years ago)	webserver:80 [06/Jun/2022] "GET /.env HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; ... show more webserver:80 [06/Jun/2022] "GET /.env HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Web App Attack
Anonymous	2022-06-05 17:46:53 (4 years ago)	[Sun Jun 05 17:46:47.249887 2022] [authz_core:error] [pid 3164569:tid 140349590693632] [client 20.12 ... show more [Sun Jun 05 17:46:47.249887 2022] [authz_core:error] [pid 3164569:tid 140349590693632] [client 20.125.114.211:1536] AH01630: client denied by server configuration: /home/appowner/www/security/.env [Sun Jun 05 17:46:47.392136 2022] [authz_core:error] [pid 3164569:tid 140349615871744] [client 20.125.114.211:1537] AH01630: client denied by server configuration: /home/appowner/www/security/ [Sun Jun 05 17:46:47.612993 2022] [authz_core:error] [pid 3164569:tid 140350293448448] [client 20.125.114.211:1536] AH01630: client denied by server configuration: /home/appowner/www/security/.env [Sun Jun 05 17:46:47.843386 2022] [authz_core:error] [pid 3164569:tid 140349624264448] [client 20.125.114.211:1537] AH01630: client denied by server configuration: /home/appowner/www/security/ [Sun Jun 05 17:46:53.026086 2022] [authz_core:error] [pid 3164569:tid 140349657835264] [client 20.125.114.211:1538] AH01630: client denied by server configuration: /home/appowner/www/security/vendor ... show less	Brute-Force SSH
🇳🇿 physke	2022-06-05 17:13:55 (4 years ago)	REQUESTED PAGE: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web App Attack
🇩🇪 _ArminS_	2022-06-03 20:08:05 (4 years ago)	WEB-Scan 1088:80 detected 2022.06.03 22:08:05 blocked until 2022.07.23 15:10:52	Port Scan
🇩🇪 Justoneguy	2022-05-31 09:15:30 (4 years ago)	Automated report (2022-05-31T15:15:30+02:00). Unauthorised attempt to connect to WSO webshell detect ... show more Automated report (2022-05-31T15:15:30+02:00). Unauthorised attempt to connect to WSO webshell detected (host might be compromised). show less	Exploited Host Web App Attack
🇳🇱 CryptoYakari	2022-05-30 21:42:43 (4 years ago)	20.125.114.211 - - [31/May/2022:04:42:21 +0300] "GET /wp-load.php HTTP/1.0" 404 7820 "www.bing.com" ... show more 20.125.114.211 - - [31/May/2022:04:42:21 +0300] "GET /wp-load.php HTTP/1.0" 404 7820 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [31/May/2022:04:42:34 +0300] "GET /style.php HTTP/1.0" 404 2730 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [31/May/2022:04:42:34 +0300] "GET /wp-admin/style.php HTTP/1.0" 404 2751 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [31/May/2022:04:42:35 +0300] "GET /s_e.php HTTP/1.0" 404 2729 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [31/May/2022:04:42:35 +0300] "GET /s_ne.php HTTP/1.0" 404 2724 "www.bing.com" "wp_is_mobile" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 DAILYKANBAN.COM	2022-05-29 23:07:17 (4 years ago)	(mod_security) mod_security (id:1000001) triggered by 20.125.114.211 (US/United States/-): 2 in the ... show more (mod_security) mod_security (id:1000001) triggered by 20.125.114.211 (US/United States/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon May 30 03:03:55.689778 2022] [:error] [pid 2744669:tid 22883366610688] [client 20.125.114.211:0] [client 20.125.114.211] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/error.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /error.php?phpshells found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "dailykanban.com"] [uri "/error.php"] [unique_id "YpQ0G6b3vCWPwAYPTN-uqAAASQE"], referer: www.bing.com [Mon May 30 03:07:14.886279 2022] [:error] [pid 2744697:tid 22883368711936] [client 20.125.114.211:0] [client 20.125.114.211] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/up.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line show less	Web App Attack
Anonymous	2022-05-29 22:25:26 (4 years ago)	$f2bV_matches	Web App Attack
Anonymous	2022-05-29 13:48:53 (4 years ago)	port scan and connect, tcp 80 (http)	Port Scan
🇪🇸 10dencehispahard SL	2022-05-28 19:21:06 (4 years ago)	Abusive use detected	Brute-Force
🇳🇱 CryptoYakari	2022-05-28 19:00:53 (4 years ago)	20.125.114.211 - - [29/May/2022:02:00:45 +0300] "GET /wp-load.php HTTP/1.0" 404 7804 "www.bing.com" ... show more 20.125.114.211 - - [29/May/2022:02:00:45 +0300] "GET /wp-load.php HTTP/1.0" 404 7804 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [29/May/2022:02:00:46 +0300] "GET /style.php HTTP/1.0" 404 2729 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [29/May/2022:02:00:46 +0300] "GET /wp-admin/style.php HTTP/1.0" 404 2743 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [29/May/2022:02:00:48 +0300] "GET /s_e.php HTTP/1.0" 404 2755 "www.bing.com" "wp_is_mobile" 20.125.114.211 - - [29/May/2022:02:00:49 +0300] "GET /s_ne.php HTTP/1.0" 404 2733 "www.bing.com" "wp_is_mobile" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇬🇧 SecondEdge	2022-05-28 14:26:23 (4 years ago)	Web scan/attack: detected 4 distinct attempt(s) within a 12-hour window (Git Variable Scan)	Web App Attack
Anonymous	2022-05-27 17:09:29 (4 years ago)	Fail2Ban Auto Report of Attack	Port Scan Hacking
🇮🇪 netfactotum	2022-05-27 09:50:52 (4 years ago)		Hacking Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.164

🇺🇸 147.185.132.216

🇲🇽 189.203.231.7

🇲🇽 189.195.72.128

🇺🇸 185.180.141.54

🇳🇱 185.107.80.93

🇺🇸 162.216.149.164

🇮🇶 150.228.105.86

🇫🇮 147.185.133.128

🇰🇷 115.89.243.42

🇺🇸 104.12.19.114

🇱🇹 45.227.254.170

🇮🇷 2.189.137.234

🇵🇱 185.248.171.8

🇳🇱 185.242.226.8

🇨🇳 183.232.212.207

🇧🇷 170.78.119.72

🇺🇸 162.243.49.20

🇮🇩 158.140.173.76

🇮🇶 150.228.105.231