AbuseIPDB » 20.81.238.37

20.81.238.37 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 20.81.238.37

Whois 20.81.238.37

IP Abuse Reports for 20.81.238.37:

This IP address has been reported a total of 52 times from 32 distinct sources. 20.81.238.37 was first reported on November 1st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
gurnip	2024-11-01 09:32:07 (2 months ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
Starburst SysOp Team	2024-11-01 09:12:47 (2 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 20.81.238.37 (US/United States/-): 1 in ... show more(mod_security-custom) mod_security (id:210492) triggered by 20.81.238.37 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Fri Nov 01 09:12:43.954629 2024] [:error] [pid 2281982:tid 2282096] [client 20.81.238.37:54280] [client 20.81.238.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "46.250.231.211"] [uri "/.env"] [unique_id "ZySbizHj5iGMsiwk7Q1TigAAAII"] show less	Hacking
Shadymint	2024-11-01 08:50:55 (2 months ago)	url probing from IP marked as abusive	Web App Attack
Starburst SysOp Team	2024-11-01 08:40:50 (2 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 20.81.238.37 (US/United States/-): 1 in ... show more(mod_security-custom) mod_security (id:210492) triggered by 20.81.238.37 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Fri Nov 01 08:40:48.985380 2024] [:error] [pid 3407107:tid 3407150] [client 20.81.238.37:55171] [client 20.81.238.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "46.250.241.20"] [uri "/.env"] [unique_id "ZySUEKEjrhQCy9m5MY7jowAAAA4"] show less	Hacking
enpepet	2024-11-01 08:27:15 (2 months ago)	GENERAL: parametres: [url:env=] UA:python-requests/2.28.1 URL:http://85.234.130.216/.env	Port Scan Hacking Brute-Force Bad Web Bot
myintarweb	2024-11-01 08:10:39 (2 months ago)	20.81.238.37 - - [01/Nov/2024:08:10:38 +0000] 80 "GET /.env HTTP/1.1" 403 1480 "-" "python-requests/ ... show more20.81.238.37 - - [01/Nov/2024:08:10:38 +0000] 80 "GET /.env HTTP/1.1" 403 1480 "-" "python-requests/2.28.1" ... show less	Hacking Bad Web Bot Web App Attack
webbfabriken	2024-11-01 07:38:08 (2 months ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam