JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.125.145.138

Neutral Activity

Abuse confidence score ?

0% Low Risk

98 reports

75 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.125.145.138 has been reported 98 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.125.145.138

Export CSV

This IP address has been reported a total of 98 times from 75 distinct sources. 20.125.145.138 was first reported on April 22nd 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 23p02732	2022-10-18 19:30:57 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇳🇱 23p02732	2022-10-16 19:31:29 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇳🇱 23p02732	2022-10-15 19:31:28 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇳🇱 23p02732	2022-10-13 19:31:29 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇵🇱 swiszczu	2022-10-13 01:04:15 (3 years ago)	Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 20.125.145.138 - - [ ... show more Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 20.125.145.138 - - [13/Oct/2022:07:04:11 +0200] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" "-" 20.125.145.138 - - [13/Oct/2022:07:04:11 +0200] "GET /conf/.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" "-" 20.125.145.138 - - [13/Oct/2022:07:04:12 +0200] "GET /wp-content/.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" "-" 20.125.145.138 - - [13/Oct/2022:07:04:12 +0200] "GET /wp-admin/.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Sa show less	Hacking Web App Attack
🇫🇷 someone	2022-10-12 21:29:31 (3 years ago)	:80 20.125.145.138 - - [13/Oct/2022:03:29:29 +0200] "GET /.env HTTP/1.1" 403 2821 "-" "Mozilla/5.0 ... show more :80 20.125.145.138 - - [13/Oct/2022:03:29:29 +0200] "GET /.env HTTP/1.1" 403 2821 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" show less	Web App Attack
🇺🇸 Major Hostility	2022-10-12 17:56:41 (3 years ago)	"GET /.env HTTP/1.1" 404 "GET /conf/.env HTTP/1.1" 404 "GET /wp-content/.env HTTP/1.1" 404 "GET /wp- ... show more "GET /.env HTTP/1.1" 404 "GET /conf/.env HTTP/1.1" 404 "GET /wp-content/.env HTTP/1.1" 404 "GET /wp-admin/.env HTTP/1.1" 404 "GET /library/.env HTTP/1.1" 404 "GET /new/.env HTTP/1.1" 404 "GET /vendor/.env HTTP/1.1" 404 "GET /old/.env HTTP/1.1" 404 "GET /local/.env HTTP/1.1" 404 "GET /api/.env HTTP/1.1" 404 "GET /blog/.env HTTP/1.1" 404 "GET /crm/.env HTTP/1.1" 404 "GET /admin/.env HTTP/1.1" 404 "GET /laravel/.env HTTP/1.1" 404 "GET /app/.env HTTP/1.1" 404 "GET /app/config/.env HTTP/1.1" 404 "GET /apps/.env HTTP/1.1" 404 "GET /audio/.env HTTP/1.1" 404 "GET /cgi-bin/.env HTTP/1.1" 404 "GET /backend/.env HTTP/1.1" 404 "GET /src%2 show less	Web App Attack
🇩🇪 clamehost.it	2022-10-12 00:43:31 (3 years ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇳🇱 23p02732	2022-10-11 22:41:54 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇱🇹 Evag Touf	2022-10-11 21:53:28 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 20.125.145.138 (US/United States/-)	SQL Injection
🇩🇪 host.tugatech.com.pt	2022-10-10 05:47:22 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.125.145.138 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:210492) triggered by 20.125.145.138 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
🇫🇷 GabrielJST	2022-10-09 17:19:01 (4 years ago)	(mod_security) mod_security triggered on hostname [redacted] 20.125.145.138 (US/United States/-): ( ... show more (mod_security) mod_security triggered on hostname [redacted] 20.125.145.138 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇷🇺 cybertailor	2022-10-09 05:23:07 (4 years ago)	20.125.145.138 - - [09/Oct/2022:14:23:05 +0500] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windo ... show more 20.125.145.138 - - [09/Oct/2022:14:23:05 +0500] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 20.125.145.138 - - [09/Oct/2022:14:23:05 +0500] "GET /conf/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 20.125.145.138 - - [09/Oct/2022:14:23:05 +0500] "GET /wp-content/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 20.125.145.138 - - [09/Oct/2022:14:23:06 +0500] "GET /wp-admin/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 20.125.145.138 - - [09/Oct/2022:14:23:06 +0500] "GET /library/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Port Scan
🇺🇸 secon2	2022-10-03 16:57:13 (4 years ago)	phpunit Remote Code Execution Vulnerability port 80 x4	Web App Attack
Anonymous	2022-09-30 18:45:53 (4 years ago)	CMS/WebApp Exploit attempt	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.64.4.209

🇺🇦 195.88.139.39

🇺🇸 147.182.179.211

🇨🇳 123.160.235.231

🇺🇸 85.208.96.207

🇺🇸 72.14.178.148

🇺🇸 68.186.186.212

🇺🇸 66.63.179.186

🇺🇸 199.165.159.31

🇺🇦 194.44.251.139

🇺🇸 159.223.148.59

🇰🇷 125.142.37.91

🇻🇳 118.69.191.195

🇺🇸 107.155.48.46

🇱🇹 93.115.25.135

🇮🇳 185.100.212.141

🇺🇸 162.216.149.232

🇮🇳 124.123.125.62

🇧🇪 34.14.41.194

🇨🇳 221.203.187.222