AbuseIPDB » 20.212.48.226

Check an IP Address, Domain Name, or Subnet

e.g. 3.229.124.74, microsoft.com, or 5.188.10.0/24

20.212.48.226 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 83%: ?

83%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.212.48.226

Whois 20.212.48.226

IP Abuse Reports for 20.212.48.226:

This IP address has been reported a total of 42 times from 31 distinct sources. 20.212.48.226 was first reported on June 20th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
acikbeyin.com	07 Jul 2022	plesk modsecurity	Hacking
Masterpiece	03 Jul 2022	Non-existent URL accessed: /search//search//search//search//search//search//search//search//search// ... show moreNon-existent URL accessed: /search//search//search//search//search//search//search//search//search//jobs/phpinfo.php///////// show less	Web App Attack
Masterpiece	03 Jul 2022	Non-existent URL accessed: /search//search//search//search//search//search//search//search//jobs/php ... show moreNon-existent URL accessed: /search//search//search//search//search//search//search//search//jobs/phpinfo.php//////// show less	Web App Attack
ozisp.com.au	03 Jul 2022	US_Microsoft_<33>1656860455 [1:2019526:5] ET WEB_SERVER WEB-PHP phpinfo access [Classification: Info ... show moreUS_Microsoft_<33>1656860455 [1:2019526:5] ET WEB_SERVER WEB-PHP phpinfo access [Classification: Information Leak] [Priority: 2] {TCP} 20.212.48.226:34376 show less	Hacking
Tyxak	03 Jul 2022	Auto reported by IDS	Web App Attack
Database.red	02 Jul 2022	[2022-07-02 21:19:56] Exploit probing - /wp-includes/js/jquery/jquery.js	Hacking Brute-Force Web App Attack
mypatricks	02 Jul 2022	20.212.48.226 \| Port: 26562 \| DNS: 20.212.48.226 2022-07-02T17:14:06+00:00 UTC \| Unauthorized connec ... show more20.212.48.226 \| Port: 26562 \| DNS: 20.212.48.226 2022-07-02T17:14:06+00:00 UTC \| Unauthorized connect attempts \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: SG/Singapore/+08:00 72490409bbf64d63-SIN/Singapore, Singapore 1 hits/0 secs Robots 0 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
mypatricks	01 Jul 2022	20.212.48.226 \| Port: 55708 \| DNS: 20.212.48.226 2022-07-02T10:03:48+08:00 Asia/Singapore \| Unauthor ... show more20.212.48.226 \| Port: 55708 \| DNS: 20.212.48.226 2022-07-02T10:03:48+08:00 Asia/Singapore \| Unauthorized connect attempts \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: SG/Singapore/+08:00 7243ce9bafc04dbc-SIN/Singapore, Singapore 1 hits/0 secs Robots 0 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
MHuiG	01 Jul 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: SG clientIP: 20.212.48.226 clientRequestHTTPHost: me.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /site/wp-admin/setup-config.php clientRequestQuery: ?step=0 datetime: 2022-07-01T10:39:39Z rayName: 723e84ddc8a5a02f ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
SleepyHosting	30 Jun 2022	(mod_security) mod_security (id:400010) triggered by 20.212.48.226 (US/United States/-): 5 in the la ... show more(mod_security) mod_security (id:400010) triggered by 20.212.48.226 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
RoboSOC	30 Jun 2022	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
blinx	30 Jun 2022	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
CryptoYakari	29 Jun 2022	20.212.48.226 - - [30/Jun/2022:06:51:42 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozil ... show more20.212.48.226 - - [30/Jun/2022:06:51:42 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:06:51:42 +0300] "GET /phpinfo.php HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:06:51:43 +0300] "GET /phpinfo HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:06:51:43 +0300] "GET /aws.yml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022: ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
CryptoYakari	29 Jun 2022	20.212.48.226 - - [30/Jun/2022:01:34:49 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozli ... show more20.212.48.226 - - [30/Jun/2022:01:34:49 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:01:34:49 +0300] "GET /phpinfo.php HTTP/1.0" 404 201 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:01:34:50 +0300] "GET /phpinfo HTTP/1.0" 404 3589 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022:01:34:50 +0300] "GET /info.php HTTP/1.0" 404 201 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.212.48.226 - - [30/Jun/2022: ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Maykson	29 Jun 2022	20.212.48.226 - - [29/Jun/2022:15:42:57 -0300] "GET /.env HTTP/1.1" 302 560 "https://www.google.com/ ... show more20.212.48.226 - - [29/Jun/2022:15:42:57 -0300] "GET /.env HTTP/1.1" 302 560 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" ... show less	Exploited Host Web App Attack