JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.201.123

20.203.201.123

Neutral Activity

197 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇨🇭 Switzerland

City

Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.203.201.123 has been reported 197 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.203.201.123:

This IP address has been reported a total of 197 times from 56 distinct sources. 20.203.201.123 was first reported on October 28th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Little Iguana	2022-11-22 19:38:17 (3 years ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇩🇪 Createline	2022-11-22 16:01:39 (3 years ago)	Scanning for environment files: "/.env" 20.203.201.123 - - [22/Nov/2022:07:33:24 +0100] "GET /.env ... show more Scanning for environment files: "/.env" 20.203.201.123 - - [22/Nov/2022:07:33:24 +0100] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 772 6328 20.203.201.123 - - [22/Nov/2022:07:33:24 +0100] "GET /.env.example HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 238 578 20.203.201.123 - - [22/Nov/2022:07:33:24 +0100] "GET /blog/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 1314 1125 20.203.201.123 - - [22/Nov/2022:07:33:24 +0100] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 1313 1125 20.203.201.123 - - [22/Nov/2022:07:33:25 +0100] "GET /laravel/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 1317 1125 show less	Web App Attack
🇩🇪 Stefan Dreher	2022-11-22 06:49:12 (3 years ago)	20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windo ... show more 20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /.env.example HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /.env.example HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [22/Nov/2022:12:49:11 +0100] "GET /blog/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" ... show less	Hacking Brute-Force
🇩🇪 HERA - Operations	2022-11-22 02:35:26 (3 years ago)	club-herrmann - searching for vulnerable scripts: phpinfo 2022/11/22 07:35:25	Web App Attack
🇩🇪 debaba	2022-11-22 02:10:37 (3 years ago)		Brute-Force Web App Attack
Anonymous	2022-11-21 19:14:30 (3 years ago)	20.203.201.123 - - [18/Nov/2022:03:32:53 +0100] "GET /laravel/.env HTTP/1.1" 404 1493 "-" "Mozilla/5 ... show more 20.203.201.123 - - [18/Nov/2022:03:32:53 +0100] "GET /laravel/.env HTTP/1.1" 404 1493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [18/Nov/2022:03:32:53 +0100] "GET /docs/.env HTTP/1.1" 404 1493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [18/Nov/2022:03:32:53 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 1493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [22/Nov/2022:01:14:29 +0100] "GET /.env HTTP/1.1" 404 6016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" ... show less	Hacking Bad Web Bot
🇩🇪 iNetWorker	2022-11-21 11:53:04 (3 years ago)	trolling for resource vulnerabilities	Web App Attack
Anonymous	2022-11-21 11:30:34 (3 years ago)	Hacking Attempt (Website Honeypot)	Hacking Web App Attack
🇬🇧 Shane-Striking	2022-11-21 10:24:20 (3 years ago)	crawling for vulnerabilities GET /.env.example HTTP/1.1" 302	Hacking Bad Web Bot
🇩🇪 Trueforce Threat Report	2022-11-21 07:59:39 (3 years ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇩🇪 psauxit	2022-11-21 05:28:03 (3 years ago)	2022/11/21 13:28:02 [error] 19649#19649: 28408 access forbidden by rule, client: 20.203.201.123, se ... show more 2022/11/21 13:28:02 [error] 19649#19649: 28408 access forbidden by rule, client: 20.203.201.123, server: dedeoglupeynir.com, request: "GET /.env HTTP/1.1", host: "www.dedeoglupeynir.com" 2022/11/21 13:28:02 [error] 19649#19649: 28410 access forbidden by rule, client: 20.203.201.123, server: dedeoglupeynir.com, request: "GET /.env.example HTTP/1.1", host: "www.dedeoglupeynir.com" 2022/11/21 13:28:02 [error] 19649#19649: 28411 access forbidden by rule, client: 20.203.201.123, server: dedeoglupeynir.com, request: "GET /blog/.env HTTP/1.1", host: "www.dedeoglupeynir.com" ... show less	Hacking
🇳🇱 maxxsense	2022-11-21 05:18:12 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 20.203.201.123 (CH/Switzerland/-)	SQL Injection
🇩🇪 jasperedv.de	2022-11-21 01:53:58 (3 years ago)	Apache Login - Brutforcing	Brute-Force Web App Attack
🇩🇪 nextweb	2022-11-20 22:36:36 (3 years ago)	(PERMBLOCK) 20.203.201.123 (CH/Switzerland/Zurich/Zurich/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]) has ... show more (PERMBLOCK) 20.203.201.123 (CH/Switzerland/Zurich/Zurich/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]) has had more than 4 temp blocks in the last 86400 secs show less	Brute-Force
🇩🇪 Nightreaver	2022-11-20 19:56:13 (3 years ago)	20.203.201.123 - - [21/Nov/2022:01:56:12 0100] "GET /.env HTTP/1.1" 404 5697 "-" "Mozilla/5.0 (Wind ... show more 20.203.201.123 - - [21/Nov/2022:01:56:12 0100] "GET /.env HTTP/1.1" 404 5697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [21/Nov/2022:01:56:12 0100] "GET /.env.example HTTP/1.1" 404 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [21/Nov/2022:01:56:13 0100] "GET /blog/.env HTTP/1.1" 404 1063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [21/Nov/2022:01:56:12 0100] "GET /.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [21/Nov/2022:01:56:12 0100] "GET /.env.example HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 - - [21/Nov/2022:01:56:13 0100] "GET /blog/.env HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 20.203.201.123 -[...] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.85.230.216

🇬🇧 193.163.125.102

🇦🇷 170.155.150.129

🇮🇳 160.187.54.114

🇺🇸 151.240.43.63

🇺🇸 148.59.129.111

🇿🇦 105.186.237.182

🇸🇪 104.245.241.50

🇩🇪 69.5.169.184

🇩🇪 69.5.169.45

🇺🇸 66.132.195.21

🇺🇸 64.49.38.96

🇺🇸 52.165.92.220

🇮🇩 36.92.166.242

🇧🇪 34.22.217.224

🇺🇸 20.169.85.54

🇺🇸 20.168.11.148

🇺🇸 20.84.154.115

🇰🇷 221.162.3.197

🇺🇸 216.25.89.153