JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.213.116.244

Neutral Activity

Abuse confidence score ?

0% Low Risk

67 reports

38 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.213.116.244 has been reported 67 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.213.116.244

Export CSV

This IP address has been reported a total of 67 times from 38 distinct sources. 20.213.116.244 was first reported on May 21st 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 findlab	2022-06-18 19:55:01 (4 years ago)	Backdrop CMS module - Request: /phpinfo.php	Bad Web Bot Web App Attack
🇩🇪 expandmade.com	2022-06-18 11:15:04 (4 years ago)	[bie] - trolling for installation vulnerabilities [18/Jun/2022:15:15:03 "GET /_profiler/phpinfo"]	Web App Attack
🇩🇪 DAILYKANBAN.COM	2022-06-18 06:49:23 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 20.213.116.244 (AU/Australia/-): 2 in the last ... show more (mod_security) mod_security (id:949110) triggered by 20.213.116.244 (AU/Australia/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Jun 18 10:49:18.556703 2022] [:error] [pid 2382:tid 22477258176256] [client 20.213.116.244:0] [client 20.213.116.244] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/phpinfo.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /phpinfo.php found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "magicalmysteryplanttour.group"] [uri "/phpinfo.php"] [unique_id "Yq2trsHODtR9ln--2OHj3gAA1wM"] [Sat Jun 18 10:49:21.535686 2022] [:error] [pid 2382:tid 22477258176256] [client 20.213.116.244:0] [client 20.213.116.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKIN show less	Web App Attack
🇹🇷 baku.hosting	2022-06-17 20:01:37 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 20.213.116.244 (AU/Australia/-): 8 in the last ... show more (mod_security) mod_security (id:949110) triggered by 20.213.116.244 (AU/Australia/-): 8 in the last 3600 secs show less	Brute-Force
🇳🇱 CryptoYakari	2022-06-17 19:36:27 (4 years ago)	20.213.116.244 - - [18/Jun/2022:02:36:02 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozl ... show more 20.213.116.244 - - [18/Jun/2022:02:36:02 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [18/Jun/2022:02:36:15 +0300] "GET /phpinfo.php HTTP/1.0" 404 371 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [18/Jun/2022:02:36:16 +0300] "GET /phpinfo HTTP/1.0" 404 3759 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [18/Jun/2022:02:36:16 +0300] "GET /aws.yml HTTP/1.0" 404 3759 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [18/Jun/ ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2022-06-17 12:08:17 (4 years ago)	20.213.116.244 - - [17/Jun/2022:19:08:07 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozl ... show more 20.213.116.244 - - [17/Jun/2022:19:08:07 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:19:08:08 +0300] "GET /phpinfo.php HTTP/1.0" 404 371 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:19:08:09 +0300] "GET /phpinfo HTTP/1.0" 404 3759 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:19:08:10 +0300] "GET /aws.yml HTTP/1.0" 404 3759 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/ ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2022-06-16 23:07:33 (4 years ago)	20.213.116.244 - - [17/Jun/2022:06:07:23 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozl ... show more 20.213.116.244 - - [17/Jun/2022:06:07:23 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 8839 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:06:07:23 +0300] "GET /phpinfo.php HTTP/1.0" 404 371 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:06:07:24 +0300] "GET /phpinfo HTTP/1.0" 404 8839 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/2022:06:07:25 +0300] "GET /aws.yml HTTP/1.0" 404 3759 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [17/Jun/ ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇬🇧 Epimetheus	2022-06-16 22:28:08 (4 years ago)	Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /protected/.env ... show more Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /protected/.env UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
🇬🇧 Epimetheus	2022-06-16 22:08:08 (4 years ago)	Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /local/.env UA: ... show more Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /local/.env UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
🇬🇧 Epimetheus	2022-06-16 19:05:03 (4 years ago)	Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /config.js UA: ... show more Unauthorized access attempts: From: 20.213.116.244 Method: HTTP GET URI Path: /config.js UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
🇩🇪 conseilgouz	2022-06-16 15:42:10 (4 years ago)	doe-Security key failure(phpinfo.php)	Hacking
🇩🇪 nextweb	2022-06-15 22:41:37 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.213.116.244 (AU/Australia/New South Wales/Sy ... show more (mod_security) mod_security (id:210492) triggered by 20.213.116.244 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2022-06-15 18:00:22 (4 years ago)	Time: Wed Jun 15 18:34:39 2022 -0300 IP: 20.213.116.244 (AU/Australia/-) Failures: 5 (mo ... show more Time: Wed Jun 15 18:34:39 2022 -0300 IP: 20.213.116.244 (AU/Australia/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block show less	Web App Attack
🇧🇷 AC - Team	2022-06-15 10:37:52 (4 years ago)	20.213.116.244 - - [15/Jun/2022:11:37:56 -0300] "GET /.env HTTP/1.1" 403 3441 "-" "Mozlila/5.0 (Linu ... show more 20.213.116.244 - - [15/Jun/2022:11:37:56 -0300] "GET /.env HTTP/1.1" 403 3441 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Exploited Host Web App Attack
🇬🇷 JCB	2022-06-15 03:29:57 (4 years ago)	20.213.116.244 - - [15/Jun/2022:00:02:09 +0300] "GET /_profiler/phpinfo HTTP/1.1" 404 196 "-" "Mozli ... show more 20.213.116.244 - - [15/Jun/2022:00:02:09 +0300] "GET /_profiler/phpinfo HTTP/1.1" 404 196 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [15/Jun/2022:00:02:12 +0300] "GET /phpinfo.php HTTP/1.1" 404 196 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [15/Jun/2022:00:02:15 +0300] "GET /phpinfo HTTP/1.1" 404 196 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.213.116.244 - - [15/Jun/2022:00:02:17 +0300] "GET /aws.yml HTTP/1.1" 404 196 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.45.50.44

🇧🇷 205.210.31.252

🇬🇧 185.216.145.172

🇻🇳 171.243.150.143

🇺🇸 165.245.168.142

🇧🇩 157.10.243.18

🇩🇿 154.250.39.122

🇵🇰 154.81.235.111

🇸🇬 136.110.28.221

🇺🇸 131.186.5.113

🇩🇪 130.12.180.51

🇧🇩 104.28.208.84

🇺🇸 104.28.171.35

🇺🇸 104.28.153.3

🇮🇩 103.24.212.42

🇹🇷 95.12.107.32

🇫🇷 85.217.140.49

🇫🇷 85.217.140.13

🇺🇸 67.205.175.129

🇰🇷 52.141.7.184