JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.125.50.73

Neutral Activity

Abuse confidence score ?

0% Low Risk

20 reports

13 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.125.50.73 has been reported 20 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.125.50.73

Export CSV

This IP address has been reported a total of 20 times from 13 distinct sources. 20.125.50.73 was first reported on March 11th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 Lemmy	2022-03-29 09:30:47 (4 years ago)	apache-noscript	Web App Attack
🇩🇪 SpaceHost-Server	2022-03-27 02:27:35 (4 years ago)	20.125.50.73 - - [27/Mar/2022:08:12:32 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 ... show more 20.125.50.73 - - [27/Mar/2022:08:12:32 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.125.50.73 - - [27/Mar/2022:08:27:32 +0200] "POST //wp-login.php HTTP/1.0" 200 8978 "https://acadicta.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.125.50.73 - - [27/Mar/2022:08:27:32 +0200] "POST //wp-login.php HTTP/1.0" 200 8978 "https://acadicta.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.125.50.73 - - [27/Mar/2022:08:27:33 +0200] "POST //wp-login.php HTTP/1.0" 200 8978 "https://acadicta.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 SpaceHost-Server	2022-03-27 02:12:33 (4 years ago)	20.125.50.73 - - [27/Mar/2022:08:12:29 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 ... show more 20.125.50.73 - - [27/Mar/2022:08:12:29 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.125.50.73 - - [27/Mar/2022:08:12:30 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.125.50.73 - - [27/Mar/2022:08:12:31 +0200] "POST //xmlrpc.php HTTP/1.0" 200 930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Hacking Web App Attack
🇵🇱 auto_reporter	2022-03-26 03:58:02 (4 years ago)	Unauthorized port sweep	Port Scan
🇩🇪 Tamsy	2022-03-25 14:32:30 (4 years ago)	Web application attack	Web App Attack
🇫🇷 jk jk	2022-03-25 13:10:04 (4 years ago)	WAF_blocked	Hacking Web App Attack
🇩🇪 iNetWorker	2022-03-25 12:27:11 (4 years ago)	trolling for resource vulnerabilities	Web App Attack
🇭🇺 DumaNet	2022-03-24 02:16:55 (4 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2022 Mar 24. 02:21:58 Source IP: 20.125 ... show more Web app attack attempts, scanning for vulnerability. Date: 2022 Mar 24. 02:21:58 Source IP: 20.125.50.73 Portion of the log(s): 20.125.50.73 - [24/Mar/2022:02:21:57 +0100] "GET /11index.php HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.125.50.73 - [24/Mar/2022:02:21:54 +0100] "GET /1index.php 20.125.50.73 - [24/Mar/2022:02:21:52 +0100] "GET /wp-admin/setup-config.php 20.125.50.73 - [24/Mar/2022:02:21:50 +0100] "GET /alexuse.php 20.125.50.73 - [24/Mar/2022:02:21:48 +0100] "GET /alexus-mailer.php 20.125.50.73 - [24/Mar/2022:02:21:47 +0100] "GET /olux.php 20.125.50.73 - [24/Mar/2022:02:21:41 +0100] "GET /leaf.php 20.125.50.73 - [24/Mar/2022:02:21:40 +0100] "GET /leafmailer2.8.php 20.125.50.73 - [24/Mar/2022:02:21:37 +0100] "GET /leafmailer.php 20.125.50.73 - [24/Mar/2022:02:21:35 +0100] "GET /wp_wrong_datlib.php 20.125.50.73 - [24/Mar/2022:02:21:33 +0100] "GET /autoload_classmap.php show less	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2022-03-24 01:58:03 (4 years ago)	20.125.50.73 - - [23/Mar/2022:23:58:02 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 4427 " ... show more 20.125.50.73 - - [23/Mar/2022:23:58:02 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 4427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Web App Attack
🇭🇺 DumaNet	2022-03-23 21:52:04 (4 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2022 Mar 23. 10:20:32 Source IP: 20.125 ... show more Web app attack attempts, scanning for vulnerability. Date: 2022 Mar 23. 10:20:32 Source IP: 20.125.50.73 Portion of the log(s): 20.125.50.73 - [23/Mar/2022:10:20:31 +0100] "GET /wp_wrong_datlib.php HTTP/1.1" 404 125 "-" "python-requests/2.27.1" 20.125.50.73 - [23/Mar/2022:10:20:30 +0100] "GET /mt/pekok.php 20.125.50.73 - [23/Mar/2022:10:20:29 +0100] "GET /media-admin.php 20.125.50.73 - [23/Mar/2022:10:20:28 +0100] "GET /ups.php 20.125.50.73 - [23/Mar/2022:10:20:27 +0100] "GET /wikindex.php 20.125.50.73 - [23/Mar/2022:10:20:26 +0100] "GET /stindex.php 20.125.50.73 - [23/Mar/2022:10:20:25 +0100] "GET /admin.php 20.125.50.73 - [23/Mar/2022:10:20:24 +0100] "GET /new-index.php 20.125.50.73 - [23/Mar/2022:10:20:20 +0100] "GET /old-index.php 20.125.50.73 - [23/Mar/2022:10:20:19 +0100] "GET /content.php 20.125.50.73 - [23/Mar/2022:10:20:18 +0100] "GET /wp-admin.php 20.125.50.73 - [23/Mar/2022:10:20:17 +0100] "GET /3index.php show less	Web App Attack
🇦🇷 whost	2022-03-23 20:53:16 (4 years ago)	wp brute force	Brute-Force
🇪🇸 10dencehispahard SL	2022-03-20 06:10:53 (4 years ago)	Abusive use detected	Brute-Force
🇺🇸 mnsf	2022-03-19 06:05:12 (4 years ago)	Too many Status 40X (17)	Brute-Force Web App Attack
🇬🇧 headwall	2022-03-14 15:19:52 (4 years ago)	Attempted WordPress user enumeration by client 20.125.50.73	Web App Attack
🇫🇷 jk jk	2022-03-14 07:35:08 (4 years ago)	WAF_blocked	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.103.120.150

🇬🇧 194.50.235.157

🇸🇪 193.180.125.157

🇧🇷 191.210.72.37

🇨🇴 190.66.212.182

🇨🇳 125.86.25.198

🇨🇳 111.17.199.57

🇺🇸 104.165.187.231

🇫🇷 88.165.187.69

🇬🇧 77.67.26.17

🇺🇸 34.197.70.90

🇺🇸 20.64.99.167

🇻🇳 210.245.30.140

🇵🇷 209.91.226.135

🇦🇷 200.114.229.236

🇬🇧 193.163.125.86

🇦🇷 186.158.239.81

🇮🇸 185.40.122.250

🇺🇸 184.190.12.228

🇦🇷 181.26.140.140