JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.125.96.254

20.125.96.254 was found in our database!

This IP was reported 178 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.125.96.254

Whois 20.125.96.254

IP Abuse Reports for 20.125.96.254:

This IP address has been reported a total of 178 times from 119 distinct sources. 20.125.96.254 was first reported on June 28th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-02 21:11:24 (1 minute ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
Anonymous	2026-07-02 20:43:48 (29 minutes ago)	20.125.96.254 - - [02/Jul/2026:22:39:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.125.96.254 - - [02/Jul/2026:22:39:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:01 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:09 +0200] "GET /archive.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:19 +0200] "GET /term.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:30 +0200] "GET /222.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:41 +0200] "GET /alfa.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:49 +0200] "GET /ioxi-o.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:40:58 +0200] "GET /aa.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:41:06 +0200] "GET /wp-mail.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:41:15 +0200] "GET /bolt.php HTTP/1.1" 404 492 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:41:22 +0200] "GET /b ... show less	DDoS Attack
🇩🇪 FeG Deutschland	2026-07-02 20:21:15 (51 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2026-07-02 20:14:41 (58 minutes ago)	20.125.96.254 - - [02/Jul/2026:22:14:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.125.96.254 - - [02/Jul/2026:22:14:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 710994 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 710746 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 710953 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:21 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 711226 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:23 +0200] "GET /222.php HTTP/1.1" 404 710783 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:25 +0200] "GET /222.php HTTP/1.1" 404 711190 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:25 +0200] "GET /alfa.php HTTP/1.1" 404 710785 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:27 +0200] "GET /alfa.php HTTP/1.1" 404 711176 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:28 +0200] "GET /ioxi-o.php HTTP/1.1" 404 710789 "-" "-" 20.125.96.254 - - [02/Jul/2026:22:14:30 +0200] "GET /ioxi-o ... show less	Bad Web Bot Web App Attack
🇩🇪 wpadm4	2026-07-02 19:53:21 (1 hour ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇨🇳 Peter Yu	2026-07-02 17:18:02 (3 hours ago)		Bad Web Bot Web App Attack
🇨🇭 Cybercat	2026-07-02 16:54:46 (4 hours ago)	CrowdSec detection: phnag/http-empty-ua	Hacking
🇳🇿 Antinson	2026-07-02 16:50:49 (4 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-07-02 13:53:46 (7 hours ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇫🇷 IRISIO	2026-07-02 13:35:52 (7 hours ago)	scans/SQL injection/spam posts : 226 queries	Web App Attack SQL Injection
🇦🇺 rubixstudios	2026-07-02 12:49:02 (8 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇩🇪 pscriptos	2026-07-02 12:39:18 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇵🇱 strefapi_com	2026-07-02 09:48:58 (11 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇳🇱 MM-bot	2026-07-02 07:20:07 (13 hours ago)	URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-07-02 09: ... show more URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-07-02 09:20:07 UTC+2) show less	Web App Attack Hacking
🇩🇪 AetherFox	2026-07-02 06:49:57 (14 hours ago)	AetherFox VoidGuard detected: [Thu Jul 02 06:49:56.917497 2026] [authz_core:error] [pid 3226034:tid ... show more AetherFox VoidGuard detected: [Thu Jul 02 06:49:56.917497 2026] [authz_core:error] [pid 3226034:tid 3226063] [client 20.125.96.254:26637] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 06:49:56.917551 2026] [authz_core:error] [pid 3226034:tid 3226063] [client 20.125.96.254:26637] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Thu Jul 02 06:49:57.062986 2026] [authz_core:error] [pid 3226034:tid 3226060] [client 20.125.96.254:26637] AH01630: client denied by server configuration: proxy:http://[MASKED]/this_is_a_new_hello_world.php [Thu Jul 02 06:49:57.063037 2026] [authz_core:error] [pid 3226034:tid 3226060] [client 20.125.96.254:26637] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Thu Jul 02 06:49:57.208558 2026] [authz_core:error] [pid 3226034:tid 3226064] [client 20.125.96.254:26637] AH01630: client denie ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 178 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇰🇪 41.60.238.126

🇬🇧 35.203.211.165

🇺🇸 2607:f8b0:4023:100f::12a

🇨🇳 180.76.55.21

🇸🇬 148.66.132.204

🇨🇴 143.105.99.92

🇧🇷 136.248.121.226

🇭🇰 103.81.170.118

🇺🇸 91.230.168.134

🇳🇱 91.92.40.27

🇷🇴 80.94.92.179

🇺🇸 52.176.124.177

🇹🇼 35.236.143.47

🇬🇧 35.203.210.89

🇧🇪 198.235.24.233

🇺🇾 186.55.131.81

🇺🇸 165.154.36.62

🇮🇳 152.59.142.241

🇫🇷 135.125.29.129