JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.3.112.122

20.3.112.122 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.3.112.122

Whois 20.3.112.122

IP Abuse Reports for 20.3.112.122:

This IP address has been reported a total of 16 times from 8 distinct sources. 20.3.112.122 was first reported on June 16th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Pornomens	2023-07-15 20:33:09 (3 years ago)	20.3.112.122 - - [15/Jul/2023:22:32:55 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-request ... show more 20.3.112.122 - - [15/Jul/2023:22:32:55 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" 20.3.112.122 - - [15/Jul/2023:22:33:01 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" 20.3.112.122 - - [15/Jul/2023:22:33:09 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" ... show less	Web App Attack
🇮🇳 trentwiles.com	2023-07-05 11:51:27 (3 years ago)	Unauthorized connection attempt detected from IP address 20.3.112.122 to port 80 [BLR]	Port Scan Hacking
🇺🇸 jimhill10	2023-07-05 03:59:22 (3 years ago)	(mod_security) mod_security (id:332039) triggered by 20.3.112.122 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:332039) triggered by 20.3.112.122 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
🇳🇱 kumiko	2023-07-04 18:53:12 (3 years ago)	[2023-07-04 18:53:12] Probing for exploits [1 requests] "PROPFIND /data/ HTTP/1.1" 403	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Pornomens	2023-07-02 21:02:15 (3 years ago)	20.3.112.122 - - [02/Jul/2023:23:02:11 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-request ... show more 20.3.112.122 - - [02/Jul/2023:23:02:11 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" 20.3.112.122 - - [02/Jul/2023:23:02:14 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" 20.3.112.122 - - [02/Jul/2023:23:02:14 +0200] "PROPFIND /data/ HTTP/1.1" 403 473 "-" "python-requests/2.31.0" ... show less	Web App Attack
🇺🇸 trentwiles.com	2023-06-30 13:15:03 (3 years ago)	Unauthorized connection attempt detected from IP address 20.3.112.122 to port 80 [SFO]	Port Scan Hacking
🇦🇺 oh.mg	2023-06-24 12:47:32 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 20.3.112.122 (-): 1 in the last 3600 secs; Port ... show more (mod_security) mod_security (id:949110) triggered by 20.3.112.122 (-): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Sat Jun 24 12:47:25.634882 2023] [:error] [pid 3223408:tid 140475671430848] [client 20.3.112.122:60534] [client 20.3.112.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "170.64.170.178"] [uri "/data/"] [unique_id "ZJbl3cQoNVsASEz4R1Vg0QAAABg"] show less	Brute-Force SSH
Anonymous	2023-06-23 03:50:07 (3 years ago)	Unsollicted Connect (70 Times)	Bad Web Bot
Anonymous	2023-06-23 03:30:06 (3 years ago)	Unsollicted Connect (15 Times)	Bad Web Bot
🇸🇬 oh.mg	2023-06-22 07:40:21 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 20.3.112.122 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:949110) triggered by 20.3.112.122 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Thu Jun 22 07:40:18.465833 2023] [:error] [pid 357908:tid 140472121161408] [client 20.3.112.122:45638] [client 20.3.112.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "159.223.54.230"] [uri "/data/"] [unique_id "ZJP64luOyqotNoqyLOyHlgAAAIE"] show less	Brute-Force SSH
🇮🇳 oh.mg	2023-06-19 15:36:31 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 20.3.112.122 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:949110) triggered by 20.3.112.122 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Mon Jun 19 15:36:29.930074 2023] [:error] [pid 2351112:tid 139738665133760] [client 20.3.112.122:37984] [client 20.3.112.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "159.65.145.216"] [uri "/data/"] [unique_id "ZJB1_dIEDQ8AQrlZKHOF-gAAAFA"] show less	Brute-Force SSH
🇺🇸 PlexLads	2023-06-19 02:46:50 (3 years ago)	20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-request ... show more 20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" 20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" 20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" 20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" 20.3.112.122 - - [18/Jun/2023:19:46:48 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" 20.3.112.122 - - [18/Jun/2023:19:46:49 -0700] "PROPFIND /data/ HTTP/1.1" 405 465 "-" "python-requests/2.31.0" show less	Hacking Web App Attack
🇺🇸 jimhill10	2023-06-18 07:34:44 (3 years ago)	(mod_security) mod_security (id:332039) triggered by 20.3.112.122 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:332039) triggered by 20.3.112.122 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
🇳🇱 taivas.nl	2023-06-17 18:00:05 (3 years ago)	web_app_attack	Email Spam
🇳🇱 kumiko	2023-06-17 14:36:34 (3 years ago)	[2023-06-17 14:36:33] Probing for exploits [1 requests] "PROPFIND /data/ HTTP/1.1" 403	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 159.224.213.138

🇺🇸 142.93.27.133

🇨🇳 111.3.92.21

🇮🇱 95.35.216.25

🇰🇿 37.150.137.107

🇨🇭 37.120.213.13

🇧🇷 203.188.168.58

🇬🇧 185.157.232.100

🇦🇷 181.174.128.32

🇺🇸 165.154.255.63

🇬🇧 141.101.98.45

🇺🇸 136.65.39.93

🇮🇳 106.222.23.135

🇺🇸 72.202.225.72

🇺🇸 66.132.195.124

🇺🇸 52.248.41.39

🇭🇰 47.243.249.24

🇴🇲 37.41.10.74

🇨🇳 221.217.95.158

🇺🇸 216.228.28.159