JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.125.136.128

20.125.136.128 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.125.136.128

Whois 20.125.136.128

IP Abuse Reports for 20.125.136.128:

This IP address has been reported a total of 132 times from 42 distinct sources. 20.125.136.128 was first reported on April 26th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇸 ISPLtd	2023-05-14 17:52:33 (3 years ago)	20.125.136.128 - - [14/May/2023:14:52:33 -0300] "GET /wp-admin/css/ ...	Hacking Web App Attack
🇵🇱 get-money.pl	2023-05-14 06:26:16 (3 years ago)	20.125.136.128 - - [14/May/2023:02:28:47 +0200] "GET /files/ HTTP/1.1" 404 9407 "binance.com"	DDoS Attack Hacking Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2023-05-13 22:40:07 (3 years ago)	winesbydesign.com.au:443 20.125.136.128 - - [14/May/2023:08:37:26 +1000] "GET /wp-content/uploads/20 ... show more winesbydesign.com.au:443 20.125.136.128 - - [14/May/2023:08:37:26 +1000] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 5667 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" winesbydesign.com.au:443 20.125.136.128 - - [14/May/2023:08:37:31 +1000] "GET /wp-content/uploads/2023/04/ HTTP/1.1" 403 5667 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" winesbydesign.com.au:443 20.125.136.128 - - [14/May/2023:08:37:35 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 5203 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" winesbydesign.com.au:443 20.125.136.128 - - [14/May/2023:08:37:42 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 403 5667 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Saf ... show less	Web App Attack
🇺🇸 ANTI SCANNER	2023-05-13 15:54:26 (3 years ago)	Scanner : /wp-admin/css/	Web Spam
🇦🇺 MAGIC	2023-05-13 14:24:23 (3 years ago)	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
🇩🇪 mxinfra	2023-05-13 11:26:53 (3 years ago)	Fail2Ban triggered by apache-auth Sat 13 May 2023 01:26:53 PM CEST	Hacking Brute-Force Web App Attack
🇩🇪 iNetWorker	2023-05-13 06:28:36 (3 years ago)	trolling for resource vulnerabilities	Web App Attack
🇻🇳 Xuan Can	2023-05-12 23:40:41 (3 years ago)	(mod_security) mod_security (id:20000222) triggered by 20.125.136.128 (US/United States/-): 1 in the ... show more (mod_security) mod_security (id:20000222) triggered by 20.125.136.128 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 13 06:40:34.414834 2023] [security2:error] [pid 2877:tid 47001701975808] [client 20.125.136.128:49702] [client 20.125.136.128] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-admin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "47"] [id "20000222"] [severity "CRITICAL"] [hostname "pavietnam.com"] [uri "/wp-admin/css/"] [unique_id "ZF7OctBDHxxzqiUkOdDuqgAAAQ4"], referer: binance.com show less	Brute-Force SSH
🇮🇩 RasyiidWho	2023-05-12 23:30:21 (3 years ago)	ip112.20 . 20.125.136.128 - - [13/May/2023:06:30:21 +0700] "GET /wp-admin/css/ HTTP/1.1" 200 24295 " ... show more ip112.20 . 20.125.136.128 - - [13/May/2023:06:30:21 +0700] "GET /wp-admin/css/ HTTP/1.1" 200 24295 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2023-05-12 04:15:58 (3 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2023-05-11 08:09:51 (3 years ago)	mareeshefford.com:443 20.125.136.128 - - [11/May/2023:18:06:12 +1000] "GET /wp-content/uploads/2023/ ... show more mareeshefford.com:443 20.125.136.128 - - [11/May/2023:18:06:12 +1000] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 5870 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" mareeshefford.com:443 20.125.136.128 - - [11/May/2023:18:06:19 +1000] "GET /wp-content/uploads/2023/04/ HTTP/1.1" 403 5870 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" mareeshefford.com:443 20.125.136.128 - - [11/May/2023:18:06:26 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 5406 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" mareeshefford.com:443 20.125.136.128 - - [11/May/2023:18:06:34 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 403 5870 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Web App Attack
Anonymous	2023-05-11 04:15:29 (3 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2023-05-10 04:15:59 (3 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2023-05-09 04:15:50 (3 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2023-05-08 04:16:50 (3 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 48.217.235.68

🇩🇪 34.159.82.207

🇺🇸 195.184.76.4

🇮🇩 163.7.13.17

🇺🇸 72.188.250.152

🇺🇸 66.132.172.37

🇺🇸 57.141.20.61

🇪🇸 46.24.47.94

🇻🇳 27.74.81.196

🇺🇸 192.255.149.28

🇵🇦 186.75.40.88

🇦🇷 181.89.94.19

🇺🇸 147.185.132.248

🇳🇱 109.160.32.83

🇺🇸 70.184.72.161

🇱🇹 62.60.130.253

🇹🇭 58.64.14.146

🇺🇸 45.55.178.48

🇺🇸 192.185.179.153

🇻🇳 113.190.211.185