JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.242.121.173

Neutral Activity

Abuse confidence score ?

0% Low Risk

74 reports

50 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.242.121.173 has been reported 74 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.242.121.173

Export CSV

This IP address has been reported a total of 74 times from 50 distinct sources. 20.242.121.173 was first reported on April 28th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Major Hostility	2023-05-11 22:22:59 (3 years ago)	"GET /.env HTTP/1.1" 404 "GET /.env HTTP/1.1" 404	Web App Attack
🇮🇪 RoboSOC	2023-05-11 20:42:27 (3 years ago)	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
Anonymous	2023-05-11 18:12:55 (3 years ago)	Configuration snooping (/.env): 20.242.121.173 - - [11/May/2023:19:12:55 +0100] "GET /.env HTTP/1.1 ... show more Configuration snooping (/.env): 20.242.121.173 - - [11/May/2023:19:12:55 +0100] "GET /.env HTTP/1.1" 200 234 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrows" show less	Hacking Web App Attack
🇩🇪 Avocuard	2023-05-11 16:59:49 (3 years ago)	Attempt to access .env \| Ignores robots.txt \| User agent: Mozilla/5.0 (Linux; U; Android 4.4.2; en-U ... show more Attempt to access .env \| Ignores robots.txt \| User agent: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 show less	Bad Web Bot
🇧🇪 taivas.nl	2023-05-10 04:32:13 (3 years ago)	Many_bad_calls	Web App Attack
🇨🇳 ThreatBook.io	2023-05-10 02:04:09 (3 years ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.242.121.173 2023-05-09 05:5 ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.242.121.173 2023-05-09 05:56:30 /.env 2023-05-09 05:56:30 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"]},"host":"ec2-3-90-15-101.compute-1.amazonaws.com","method":"POST","proto":"HTTP/1.1","remote_addr":"20.242.121.173:36448","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"} show less	Web App Attack
🇺🇸 Major Hostility	2023-05-09 16:39:05 (3 years ago)	"GET /.env HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-std ... show more "GET /.env HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 show less	Web App Attack
🇨🇦 nyclee.net	2023-05-09 15:10:57 (3 years ago)	WebServer Vunerability Probe ...	Hacking Web App Attack
🇱🇺 conseilgouz	2023-05-08 20:09:27 (3 years ago)	are-17 : Block hidden directories=>/.env(/)	Hacking
🇩🇪 Gwyneth Llewelyn	2023-05-08 01:27:52 (3 years ago)	20.242.121.173 - - [08/May/2023:02:27:47 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ... show more 20.242.121.173 - - [08/May/2023:02:27:47 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 2023/05/08 02:27:50 [error] 737479#737479: *307705 access forbidden by rule, client: 20.242.121.173, server: autonomy.gwynethllewelyn.net, request: "GET /.env HTTP/1.1", host: "getasecondlife.net.cdn.cloudflare.net" 20.242.121.173 - - [08/May/2023:02:27:50 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
🇩🇪 niceshops.com	2023-05-08 00:00:44 (3 years ago)	Web Attack ([08/May/2023:02:00:39.521] GET /.env)	Web App Attack
🇮🇸 ISPLtd	2023-05-07 15:44:10 (3 years ago)	20.242.121.173 - - [07/May/2023:12:44:09 -0300] "GET /.env ...	Hacking Web App Attack
🇺🇸 FireballDWF	2023-05-07 03:25:07 (3 years ago)	404 NOT FOUND	Web App Attack
🇮🇸 ISPLtd	2023-05-06 19:28:52 (3 years ago)	20.242.121.173 - - [06/May/2023:16:28:52 -0300] "GET /.env ...	Hacking Web App Attack
🇮🇪 RoboSOC	2023-05-05 18:07:53 (3 years ago)	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 159.223.229.138

🇦🇺 158.178.141.16

🇵🇱 146.59.18.78

🇺🇸 96.78.177.249

🇺🇸 68.225.62.216

🇹🇼 58.115.14.78

🇺🇸 45.79.207.110

🇺🇸 34.96.45.175

🇧🇷 190.115.84.25

🇩🇪 138.197.189.197

🇺🇸 135.131.153.149

🇵🇰 119.157.76.251

🇺🇸 66.228.40.98

🇨🇳 27.24.141.112

🇨🇳 180.153.91.15

🇮🇳 124.253.87.138

🇨🇦 85.217.149.4

🇺🇸 20.168.116.235

🇦🇷 200.105.111.26

🇫🇮 147.185.133.95