AbuseIPDB » 20.219.167.125

20.219.167.125 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.219.167.125

Whois 20.219.167.125

IP Abuse Reports for 20.219.167.125:

This IP address has been reported a total of 106 times from 56 distinct sources. 20.219.167.125 was first reported on May 2nd 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2023-05-21 23:53:40 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/20.219.167.125<br / ... show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/20.219.167.125 2023-05-21 22:23:45 /.env 2023-05-21 22:23:45 /wp-content/ show less	Web App Attack
conseilgouz	2023-05-21 20:58:00 (1 year ago)	coe-7 : Trying access unauthorized files/dir=>/wordpress	Hacking
CryptoYakari	2023-05-21 19:37:28 (1 year ago)	20.219.167.125 - - [21/May/2023:22:31:25 +0300] "GET / HTTP/1.0" 403 568 "-" "-" 20.219.167.12 ... show more20.219.167.125 - - [21/May/2023:22:31:25 +0300] "GET / HTTP/1.0" 403 568 "-" "-" 20.219.167.125 - - [21/May/2023:22:37:26 +0300] "GET / HTTP/1.0" 403 568 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.219.167.125 - - [21/May/2023:22:37:26 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.0" 403 567 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
whitehoodie	2023-05-21 15:28:33 (1 year ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
iNetWorker	2023-05-21 13:56:06 (1 year ago)	trolling for resource vulnerabilities	Web App Attack
jormaster3k	2023-05-21 12:55:55 (1 year ago)	Attack against Apache (too many 404s)	Web App Attack
niceshops.com	2023-05-21 12:26:50 (1 year ago)	Web Attack ([21/May/2023:14:26:50.325] GET /.env)	Web App Attack
geot	2023-05-19 11:03:09 (1 year ago)	214 requests, including : GET /test HTTP/1.1 GET /main HTTP/1.1 POST /alfacgiapi/ ... show more214 requests, including : GET /test HTTP/1.1 GET /main HTTP/1.1 POST /alfacgiapi/perl.alfa HTTP/1.1 GET /testing HTTP/1.1 GET /<<removed>>.php?Fox=d3wL7 HTTP/1.1 GET /blog HTTP/1.1 GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1 GET /wordpress HTTP/1.1 GET /new HTTP/1.1 GET /wp HTTP/1.1 GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1 POST /wp-plain.php HTTP/1.1 GET /old HTTP/1.1 GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
Anonymous	2023-05-17 04:35:28 (1 year ago)	Request URI is a restricted URI detected by ModSecurity 2023-05-17 07:35:28	Hacking Bad Web Bot Web App Attack
CryptoYakari	2023-05-17 03:15:33 (1 year ago)	20.219.167.125 - - [17/May/2023:06:15:30 +0300] "GET / HTTP/1.0" 403 567 "-" "Mozlila/5.0 (Linux; An ... show more20.219.167.125 - - [17/May/2023:06:15:30 +0300] "GET / HTTP/1.0" 403 567 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.219.167.125 - - [17/May/2023:06:15:31 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.0" 403 568 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.219.167.125 - - [17/May/2023:06:15:31 +0300] "POST /wp-plain.php HTTP/1.0" 403 568 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
sumnone	2023-05-17 02:38:25 (1 year ago)	Wordpress vulnerability probing: Error 404. The requested page (/wp-content/themes/seotheme/db.php) ... show moreWordpress vulnerability probing: Error 404. The requested page (/wp-content/themes/seotheme/db.php) was not found show less	Bad Web Bot Exploited Host Web App Attack
0xffffffff	2023-05-17 02:15:19 (1 year ago)	[2023-05-17 05:15:18.063837] [authz_core:error] [pid 1470993:tid 140665975645760] [client 20.219.167 ... show more[2023-05-17 05:15:18.063837] [authz_core:error] [pid 1470993:tid 140665975645760] [client 20.219.167.125:0] AH01630: client denied by server configuration: /var/www//wp-content/themes/seotheme, referer www.google.com , error_notes:missing-php , URI:'/wp-content/themes/seotheme/db.php?u' [2023-05-17 05:15:18.082533] [authz_core:error] [pid 1470993:tid 140665984038464] [client 20.219.167.125:0] AH01630: client denied by server configuration: /var/www//ALFA_DATA, referer www.google.com , error_notes:alfa-shell , URI:'/ALFA_DATA/alfacgiapi/perl.alfa' show less	Bad Web Bot Web App Attack
mypatricks	2023-05-17 01:08:09 (1 year ago)	20.219.167.125 \| Port: 21962 \| DNS: 20.219.167.125 2023-05-17T09:08:08+08:00 Asia/Singapore \| Suspic ... show more20.219.167.125 \| Port: 21962 \| DNS: 20.219.167.125 2023-05-17T09:08:08+08:00 Asia/Singapore \| Suspicious User Abuse Activity \| UA: Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 HTTP/1.1 443 POST \| URL: /wp-plain.php \| Ref: www.google.com \| Country: IN/India/+05:00 IP City: Pune 7c87f7af1b4a85fa-BOM/Mumbai, India 1 hits/0 secs Robots 9 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
Donovan_DMC	2023-05-17 00:53:25 (1 year ago)	GET /wp-content/themes/seotheme/db.php?u - 20.219.167.125 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A ... show moreGET /wp-content/themes/seotheme/db.php?u - 20.219.167.125 (Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36) [wp-content]: WordPress Content Scanner [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack
Donovan_DMC	2023-05-17 00:53:25 (1 year ago)	POST /wp-plain.php - 20.219.167.125 (Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) App ... show morePOST /wp-plain.php - 20.219.167.125 (Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36) [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack