JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.25.151.119

20.25.151.119 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 45%: ?

45%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.25.151.119

Whois 20.25.151.119

IP Abuse Reports for 20.25.151.119:

This IP address has been reported a total of 103 times from 53 distinct sources. 20.25.151.119 was first reported on April 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Nightreaver	2026-07-27 18:31:53 (3 days ago)	20.25.151.119 - - [27/Jul/2026:20:31:50 0200] "GET /.git/refs/heads/master HTTP/1.1" 404 457 "-" "M ... show more 20.25.151.119 - - [27/Jul/2026:20:31:50 0200] "GET /.git/refs/heads/master HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 20.25.151.119 - - [27/Jul/2026:20:31:51 0200] "GET /.git/refs/heads/main HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.25.151.119 - - [27/Jul/2026:20:31:51 0200] "GET /.git/index HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 20.25.151.119 - - [27/Jul/2026:20:31:52 0200] "GET /.env HTTP/1.1" 404 457 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.25.151.119 - - [27/Jul/2026:20:31:52 0200] "GET /.env.local HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"[...] show less	Bad Web Bot Web App Attack
🇩🇪 www.fransveldman.world	2026-07-15 11:35:29 (2 weeks ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇺🇸 micropedro	2026-07-01 07:33:32 (4 weeks ago)	6 incidents: malicious activity. First: 2026-06-17 01:30, Last: 2026-07-01 03:33 UTC. Triggers: ufw- ... show more 6 incidents: malicious activity. First: 2026-06-17 01:30, Last: 2026-07-01 03:33 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-07-01 07:31:02 (4 weeks ago)	4 incidents: malicious activity. First: 2026-06-10 00:30, Last: 2026-07-01 03:31 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-10 00:30, Last: 2026-07-01 03:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇦🇺 2000cn.com.au	2026-06-30 18:17:30 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-30 17:38:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 13:38:52.249265 2026] [security2:error] [pid 30846:tid 30869] [client 20.25.151.119:45073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.14"] [uri "/.git/HEAD"] [unique_id "akP_LKI0L2kIDHrRrik_mgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-30 16:49:59 (1 month ago)	2026-06-30 16:49:59 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇹🇭 Sawasdee	2026-06-30 13:57:06 (1 month ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-30 13:51:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 09:50:59.492419 2026] [security2:error] [pid 12041:tid 12041] [client 20.25.151.119:44830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.166"] [uri "/.git/HEAD"] [unique_id "akPJw9TRabhNDI9yWpVpnAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 12:57:57 (1 month ago)	2026-06-30 12:57:56 warning[2493226]: host unknown[20.25.151.119]: unauthorized access att ... show more 2026-06-30 12:57:56 warning[2493226]: host unknown[20.25.151.119]: unauthorized access attempted: tcp/8443 show less	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-06-30 12:55:41 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.25.151.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:55:37.526310 2026] [security2:error] [pid 22060:tid 22060] [client 20.25.151.119:45780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.18"] [uri "/.git/HEAD"] [unique_id "akO8yUEVxAtAYRhmoCf9OwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wolfemium	2026-06-30 12:55:34 (1 month ago)	20.25.151.119 - - [30/Jun/2026:15:55:23 +0300] "GET /wp-config.php HTTP/1.1" 302 138 "-" "Mozilla/5. ... show more 20.25.151.119 - - [30/Jun/2026:15:55:23 +0300] "GET /wp-config.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.25.151.119 - - [30/Jun/2026:15:55:24 +0300] "GET /wp-config.php.bak HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.25.151.119 - - [30/Jun/2026:15:55:28 +0300] "GET /phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.25.151.119 - - [30/Jun/2026:15:55:29 +0300] "GET /info.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 20.25.151.119 - - [30/Jun/2026:15:55:31 +0300] "GET /config.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124. ... show less	DDoS Attack
🇺🇸 xmission.com	2026-06-11 09:10:10 (1 month ago)	Blocked by UFW (TCP on 2086) Source port: 41984 TTL: 53 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2086) Source port: 41984 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 20.25.151.119) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cwytech	2026-06-11 09:06:39 (1 month ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: firewallservices/pf-scan-multi_ports.	Port Scan
Anonymous	2026-06-11 06:40:33 (1 month ago)	Port Scan	Port Scan

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.164.223

🇻🇪 200.8.9.171

🇺🇦 176.120.110.60

🇺🇸 162.216.149.73

🇨🇦 147.182.150.152

🇲🇳 103.57.93.80

🇵🇱 91.228.33.72

🇨🇦 45.3.40.137

🇺🇸 209.143.12.253

🇺🇸 208.109.38.143

🇲🇽 189.139.88.53

🇹🇷 151.135.226.93

🇨🇳 123.160.233.159

🇮🇩 110.35.80.116

🇺🇦 109.254.96.41

🇰🇷 106.243.155.71

🇩🇪 94.159.105.176

🇺🇸 65.49.20.68

🇺🇸 65.49.1.210

🇫🇷 46.202.79.204