JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.56.111.20

2.56.111.20 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	HASAN YAVUZ
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216045
Domain Name	evozcdn.com
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.56.111.20

Whois 2.56.111.20

IP Abuse Reports for 2.56.111.20:

This IP address has been reported a total of 25 times from 20 distinct sources. 2.56.111.20 was first reported on June 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-04 22:38:07 (1 hour ago)	2.56.111.20 - - [05/Jun/2026:06:38:06 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (W ... show more 2.56.111.20 - - [05/Jun/2026:06:38:06 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 bsoft.de	2026-06-04 22:19:42 (1 hour ago)	2.56.111.20 - - [04/Jun/2026:23:16:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (W ... show more 2.56.111.20 - - [04/Jun/2026:23:16:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2.56.111.20 - - [05/Jun/2026:00:19:40 +0200] "GET /wp-login.php HTTP/1.1" 200 2980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2.56.111.20 - - [05/Jun/2026:00:19:41 +0200] "POST /wp-login.php HTTP/1.1" 200 3132 "https://kgsjw-freunde.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 tecnicorioja	2026-06-04 22:01:47 (1 hour ago)	wp-login attack [04/Jun/2026:21:02:44	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-04 19:15:08 (4 hours ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-06-04 18:57:05 (4 hours ago)	Bot / scanning and/or hacking attempts: [2/2] done, POST /wp-login.php HTTP/2.0, GET /wp-login.php H ... show more Bot / scanning and/or hacking attempts: [2/2] done, POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 factor1	2026-06-04 18:06:50 (5 hours ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
Anonymous	2026-06-04 17:34:31 (6 hours ago)	2.56.111.20 - - [04/Jun/2026:19:34:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 ...	Brute-Force Bad Web Bot
🇩🇪 LRob.fr	2026-06-04 16:15:14 (7 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇨🇿 huginet	2026-06-04 15:35:53 (8 hours ago)	2.56.111.20 - - [04/Jun/2026:17:35:52 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/5.0 ... show more 2.56.111.20 - - [04/Jun/2026:17:35:52 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2.56.111.20 - - [04/Jun/2026:17:35:52 +0200] "POST /wp-login.php HTTP/1.1" 200 9549 "https://centrum-eko-likvidace.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-04 14:56:34 (8 hours ago)	2.56.111.20 - - [04/Jun/2026:16:16:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 2.56.111.20 - - [04 ... show more 2.56.111.20 - - [04/Jun/2026:16:16:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 2.56.111.20 - - [04/Jun/2026:16:56:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 ... show less	Brute-Force Bad Web Bot
🇬🇧 spamverify.com	2026-06-04 14:52:11 (9 hours ago)	Honeypot Hit: xmlrpc.php	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-04 14:03:13 (9 hours ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 2.56.111.20 (TR/Turkey/-): 1 in the last 3600 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 2.56.111.20 (TR/Turkey/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇬🇧 spamverify.com	2026-06-04 13:45:33 (10 hours ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2026-06-04 12:24:14 (11 hours ago)	[04/Jun/2026:12:24:13 +0000] host=lovelyrender.app server=lovelyrender.app ip=2.56.111.20 method=POS ... show more [04/Jun/2026:12:24:13 +0000] host=lovelyrender.app server=lovelyrender.app ip=2.56.111.20 method=POST req=/xmlrpc.php uri=/index.php status=302 bytes=0 rt=0.075 urt=0.076 ref="-" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇺🇸 xmission.com	2026-06-04 11:46:20 (12 hours ago)	2.56.111.20 - - [04/Jun/2026:05:46:20 -0600] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (W ... show more 2.56.111.20 - - [04/Jun/2026:05:46:20 -0600] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:1400::1f5

🇺🇸 2602:80d:1008::3b

🇻🇪 190.97.230.198

🇸🇪 171.25.193.235

🇨🇳 111.225.149.242

🇷🇴 80.94.92.184

🇫🇷 62.138.3.40

🇺🇸 147.185.132.16

🇮🇩 103.15.226.202

🇺🇸 66.132.172.127

🇳🇱 45.148.10.206

🇳🇱 20.23.229.100

🇺🇸 205.210.31.104

🇺🇸 143.42.1.44

🇺🇸 142.248.80.72

🇩🇪 195.248.243.197

🇩🇪 178.105.163.37

🇺🇸 108.46.150.21

🇩🇪 217.234.92.249

🇱🇾 164.160.145.129