JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.65.110.82

Neutral Activity

Abuse confidence score ?

0% Low Risk

121 reports

68 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.65.110.82 has been reported 121 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.65.110.82

Export CSV

This IP address has been reported a total of 121 times from 68 distinct sources. 20.65.110.82 was first reported on February 2nd 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 UKFast Security	2022-03-19 12:53:14 (4 years ago)	Common web attack.	Web App Attack
Anonymous	2022-03-16 15:24:15 (4 years ago)	[Wed Mar 16 20:24:14.499930 2022] [:error] [pid 106337:tid 139719346206464] [client 20.65.110.82:561 ... show more [Wed Mar 16 20:24:14.499930 2022] [:error] [pid 106337:tid 139719346206464] [client 20.65.110.82:56141] [client 20.65.110.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "luiassociati.it"] [uri "/.env"] [unique_id "YjI5Xj53xa-D68UWTmnpAgAAAEU"] ... show less	Web App Attack
🇸🇪 webbfabriken	2022-03-16 12:24:03 (4 years ago)	Posting spam/hacking or other abusive activity. Attack reported by Webbfabiken Security API - WFSec ... show more Posting spam/hacking or other abusive activity. Attack reported by Webbfabiken Security API - WFSecAPI show less	Hacking
🇬🇧 dwmp	2022-03-16 11:23:33 (4 years ago)	Url probing: /administrator/	Web App Attack
Anonymous	2022-03-16 04:10:04 (4 years ago)	20.65.110.82 - - [16/Mar/2022:09:09:53 +0100] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1. ... show more 20.65.110.82 - - [16/Mar/2022:09:09:53 +0100] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.65.110.82 - - [16/Mar/2022:09:09:54 +0100] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.65.110.82 - - [16/Mar/2022:09:09:57 +0100] "GET /wp-content/plugins/emails-verification-for-woocommerce/readme.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.65.110.82 - - [16/Mar/2022:09:09:58 +0100] "GET /wp-content/plugins/mstore-api/readme.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.65.110.82 - - [16/Mar/2022:0 ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 www.tana.it	2022-03-15 16:18:46 (4 years ago)	PHP scan	Web App Attack
Anonymous	2022-03-15 09:13:49 (4 years ago)	[Tue Mar 15 14:13:48.812871 2022] [:error] [pid 42550:tid 139718826120960] [client 20.65.110.82:6376 ... show more [Tue Mar 15 14:13:48.812871 2022] [:error] [pid 42550:tid 139718826120960] [client 20.65.110.82:63762] [client 20.65.110.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "v-s-a.it"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YjCRDIMRGcKrQ9RHMDefXAAAAAo"] ... show less	Web App Attack
Anonymous	2022-03-15 05:40:08 (4 years ago)	[Tue Mar 15 10:40:07.918854 2022] [:error] [pid 42550:tid 139718792550144] [client 20.65.110.82:5718 ... show more [Tue Mar 15 10:40:07.918854 2022] [:error] [pid 42550:tid 139718792550144] [client 20.65.110.82:57185] [client 20.65.110.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.competio.it"] [uri "/.env"] [unique_id "YjBe94MRGcKrQ9RHMDeOHgAAAA4"] ... show less	Web App Attack
Anonymous	2022-03-15 02:40:10 (4 years ago)	[Tue Mar 15 07:40:09.545340 2022] [:error] [pid 42549:tid 139718230533888] [client 20.65.110.82:5911 ... show more [Tue Mar 15 07:40:09.545340 2022] [:error] [pid 42549:tid 139718230533888] [client 20.65.110.82:59112] [client 20.65.110.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mytiche.it"] [uri "/.env"] [unique_id "YjA0yV2y0aoWTjDyEtEY1gAAAFA"] ... show less	Web App Attack
🇬🇧 UKFast Security	2022-03-14 19:54:42 (4 years ago)	Multiple web server 500 error code (Internal Error).	Web App Attack
Anonymous	2022-03-14 18:15:46 (4 years ago)	[Mon Mar 14 23:15:46.483224 2022] [:error] [pid 2078:tid 139717752379136] [client 20.65.110.82:61686 ... show more [Mon Mar 14 23:15:46.483224 2022] [:error] [pid 2078:tid 139717752379136] [client 20.65.110.82:61686] [client 20.65.110.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "enproma.it"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yi--ksmfqv2rPNsJNvHKtQAAABg"] ... show less	Web App Attack
🇳🇱 tmiland	2022-03-13 18:23:47 (4 years ago)	(wordpress_404) WordPress Plugins Honeypot Trap 20.65.110.82 (US/United States/-): 2 in the last 360 ... show more (wordpress_404) WordPress Plugins Honeypot Trap 20.65.110.82 (US/United States/-): 2 in the last 3600 secs show less	Blog Spam Brute-Force Web App Attack
🇩🇪 ps-center	2022-03-13 18:14:55 (4 years ago)	MYH,DEF GET /administrator/language/en-GB/install.xml	Bad Web Bot Web App Attack
🇮🇪 netfactotum	2022-03-13 15:01:04 (4 years ago)		Hacking Web App Attack
🇬🇧 Lorenzo Nutini	2022-03-07 21:53:42 (4 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.65.110.82 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.65.110.82 (US/United States/-) show less	Port Scan

Showing 1 to 15 of 121 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.44.229.34

🇲🇦 196.115.61.41

🇩🇪 195.230.103.248

🇺🇸 192.236.189.210

🇭🇰 152.32.128.214

🇹🇭 147.50.103.212

🇨🇳 121.224.78.164

🇬🇧 92.20.56.47

🇺🇸 87.232.157.219

🇬🇧 84.69.203.81

🇬🇧 82.17.76.221

🇺🇸 74.244.147.36

🇮🇳 20.40.45.20

🇺🇸 207.90.244.26

🇺🇸 187.14.50.102

🇺🇸 172.58.8.147

🇵🇾 168.195.224.187

🇺🇸 165.154.254.21

🇺🇸 162.216.149.29

🇨🇳 117.36.231.242