AbuseIPDB » 20.70.181.122

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.125.76, microsoft.com, or 5.188.10.0/24

20.70.181.122 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 33%: ?

33%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.70.181.122

Whois 20.70.181.122

IP Abuse Reports for 20.70.181.122:

This IP address has been reported a total of 13 times from 7 distinct sources. 20.70.181.122 was first reported on May 11th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
tommygod.ddns.net	01 Jun 2022	[02/Jun/2022:03:54:53 +0000] Ypg0jf6ao_x7_84PeaCj2AAAAAY 20.70.181.122 56976 172.104.34.116 80 ... show more[02/Jun/2022:03:54:53 +0000] Ypg0jf6ao_x7_84PeaCj2AAAAAY 20.70.181.122 56976 172.104.34.116 80 [02/Jun/2022:03:54:54 +0000] Ypg0jgL6X3l_ACjLT6eBowAAAAM 20.70.181.122 57249 172.104.34.116 80 [02/Jun/2022:03:54:54 +0000] Ypg0jg93QL4Wyr2ZxNAt7gAAAAA 20.70.181.122 57411 172.104.34.116 443 [02/Jun/2022:03:54:54 +0000] Ypg0jmfrC-5m-b9ZA8fooQAAAAc 20.70.181.122 57873 172.104.34.116 443 ... show less	SQL Injection Brute-Force
ISPLtd	27 May 2022	20.70.181.122 - - [27/May/2022:05:00:55 -0300] "GET /.env ...	Hacking Web App Attack
ISPLtd	27 May 2022	20.70.181.122 - - [27/May/2022:02:41:55 -0300] "GET /.env ...	Hacking Web App Attack
4server	23 May 2022	[MonMay2321:43:51.3939802022][:error][pid28000:tid47092892534528][client20.70.181.122:49964][client2 ... show more[MonMay2321:43:51.3939802022][:error][pid28000:tid47092892534528][client20.70.181.122:49964][client20.70.181.122]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"189\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.224.50\"][uri\"/.env\"][unique_id\"Yovj95-vRRruLlgjHbRyRgAAAE8\"][MonMay2321:43:55.3657902022][:error][pid18826:tid47092909344512][client20.70.181.122:50039][client20.70.181.122]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\| show less	Port Scan Brute-Force Web App Attack
Maykson	23 May 2022	20.70.181.122 - - [23/May/2022:15:52:21 -0300] "GET /.env HTTP/1.1" 302 556 "-" "Mozilla/5.0 (X11; L ... show more20.70.181.122 - - [23/May/2022:15:52:21 -0300] "GET /.env HTTP/1.1" 302 556 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
ad5gb.com	21 May 2022	20.70.181.122 - - [21/May/2022:13:16:11 -0500] "GET http://216.158.226.10/.env HTTP/1.1" 404 297 000 ... show more20.70.181.122 - - [21/May/2022:13:16:11 -0500] "GET http://216.158.226.10/.env HTTP/1.1" 404 297 000 0 0 0 230 310 0 0 0 NONE FIN FIN ERR_INVALID_URL ... show less	Brute-Force
MrRage	20 May 2022	Unauthorized Connection On Port 443 From IP Address 20.70.181.122	Port Scan Hacking
ISPLtd	18 May 2022	20.70.181.122 - - [18/May/2022:05:52:45 -0300] "GET /.env ...	Hacking Web App Attack
4server	16 May 2022	[MonMay1608:58:41.8534982022][:error][pid26741:tid47306391045888][client20.70.181.122:52761][client2 ... show more[MonMay1608:58:41.8534982022][:error][pid26741:tid47306391045888][client20.70.181.122:52761][client20.70.181.122]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"189\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.224.50\"][uri\"/.env\"][unique_id\"YoH2IdYCQyH1di9xdsP_wgAAAVc\"][MonMay1608:58:43.2284442022][:error][pid26571:tid47306349020928][client20.70.181.122:53042][client20.70.181.122]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\| show less	Port Scan Brute-Force Web App Attack
ISPLtd	12 May 2022	20.70.181.122 - - [12/May/2022:11:43:52 -0300] "GET /.env ...	Hacking Web App Attack
MrRage	12 May 2022	Unauthorized Connection On Port 443 From IP Address 20.70.181.122	Port Scan Hacking
ISPLtd	12 May 2022	20.70.181.122 - - [12/May/2022:05:30:06 -0300] "GET /.env ...	Hacking Web App Attack
Ba-Yu	11 May 2022	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack