AbuseIPDB » 112.196.20.252

Check an IP Address, Domain Name, or Subnet

e.g. 3.229.124.74, microsoft.com, or 5.188.10.0/24

112.196.20.252 was found in our database!

This IP was reported 233 times. Confidence of Abuse is 53%: ?

53%

ISP	Quadrant Televentures Limited
Usage Type	Fixed Line ISP
Domain Name	connectzone.in
Country	India
City	Mohali, Punjab

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 112.196.20.252

Whois 112.196.20.252

IP Abuse Reports for 112.196.20.252:

This IP address has been reported a total of 233 times from 44 distinct sources. 112.196.20.252 was first reported on June 18th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
etu brutus	23 Jul 2022	112.196.20.252 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
wnbhosting.dk	23 Jul 2022	WP xmlrpc [2022-07-22T13:47:12+02:00]	Hacking Web App Attack
Anonymous	21 Jul 2022	112.196.20.252 - - [21/Jul/2022:17:53:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 478 "-" "Mozilla/5.0 ... show more112.196.20.252 - - [21/Jul/2022:17:53:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 112.196.20.252 - - [21/Jul/2022:19:32:58 +0200] "POST /wp-login.php HTTP/1.1" 200 1715 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 112.196.20.252 - - [21/Jul/2022:23:12:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
Anonymous	18 Jul 2022	Brute Force Login Attempts	Hacking Brute-Force
wnbhosting.dk	18 Jul 2022	WP xmlrpc [2022-07-17T07:42:39+02:00]	Hacking Web App Attack
Anonymous	17 Jul 2022	112.196.20.252 - - [17/Jul/2022:10:37:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 478 "-" "Mozilla/5.0 ... show more112.196.20.252 - - [17/Jul/2022:10:37:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 112.196.20.252 - - [18/Jul/2022:01:32:06 +0200] "POST /wp-login.php HTTP/1.1" 200 1715 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 112.196.20.252 - - [18/Jul/2022:02:05:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1715 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
Anonymous	17 Jul 2022	spamd: identified spam	Email Spam
wnbhosting.dk	16 Jul 2022	WP xmlrpc [2022-07-15T20:01:11+02:00]	Hacking Web App Attack
websase.com	15 Jul 2022	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
wnbhosting.dk	15 Jul 2022	WP xmlrpc [2022-07-14T10:43:31+02:00]	Hacking Web App Attack
wnbhosting.dk	14 Jul 2022	WP xmlrpc [2022-07-13T16:59:26+02:00]	Hacking Web App Attack
akac	10 Jul 2022	WordPress XML-RPC attack with username "[login]" and password "". Method Name: system.multical ... show moreWordPress XML-RPC attack with username "[login]" and password "". Method Name: system.multicall, Route: wp.getUsersBlogs Request: POST /xmlrpc.php User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
akac	10 Jul 2022	Probing for the WordPress login endpoint. Request: GET /wp-login.php User-Agent: Mozilla ... show moreProbing for the WordPress login endpoint. Request: GET /wp-login.php User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
Anonymous	06 Jul 2022	XMLRPC Hack Attempts	Hacking Brute-Force
jasperedv.de	05 Jul 2022	Apache Login - Brutforcing	Brute-Force Web App Attack