JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.113.92.109

20.113.92.109 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.113.92.109

Whois 20.113.92.109

IP Abuse Reports for 20.113.92.109:

This IP address has been reported a total of 19 times from 14 distinct sources. 20.113.92.109 was first reported on January 4th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 syokadmin	2022-02-12 18:55:32 (4 years ago)	(mod_security) mod_security (id:225170) triggered by 20.113.92.109 (DE/Germany/-): 1 in the last 360 ... show more (mod_security) mod_security (id:225170) triggered by 20.113.92.109 (DE/Germany/-): 1 in the last 3600 secs show less	Brute-Force
🇺🇸 DJ	2022-02-10 10:06:21 (4 years ago)	WP attack	Hacking Brute-Force Exploited Host Web App Attack
🇲🇾 syokadmin	2022-02-07 05:18:07 (4 years ago)	(mod_security) mod_security (id:225170) triggered by 20.113.92.109 (DE/Germany/-): 1 in the last 360 ... show more (mod_security) mod_security (id:225170) triggered by 20.113.92.109 (DE/Germany/-): 1 in the last 3600 secs show less	Brute-Force
🇬🇧 headwall	2022-02-05 02:24:47 (4 years ago)	Probe for WordPress internals file xmlrpc.php by client 20.113.92.109 on local port 443	Web App Attack
🇬🇧 headwall	2022-02-05 02:24:45 (4 years ago)	Attempted WordPress user enumeration by client 20.113.92.109	Web App Attack
🇬🇧 headwall	2022-02-05 02:24:45 (4 years ago)	Attempted WordPress user enumeration by client 20.113.92.109	Web App Attack
🇻🇳 vo tong	2022-02-04 09:15:53 (4 years ago)	//sito/wp-includes/wlwmanifest.xml	Hacking
🇨🇦 MonaNot	2022-02-03 10:05:22 (4 years ago)	Repeated POST /xmlrpc.php attempts	Hacking Brute-Force
🇺🇸 etu brutus	2022-02-02 08:41:51 (4 years ago)	[02/Feb/2022:08:41:50 -0500] clown.local 20.113.92.109 - - "GET /wp-includes/wlwmanifest.xml HTTP/1. ... show more [02/Feb/2022:08:41:50 -0500] clown.local 20.113.92.109 - - "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1236 [02/Feb/2022:08:41:50 -0500] clown.local 20.113.92.109 - - "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1236 [02/Feb/2022:08:41:50 -0500] clown.local 20.113.92.109 - - "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1236 ... show less	Hacking Brute-Force Web App Attack
🇫🇷 urmarcht	2022-02-02 06:06:43 (4 years ago)	Bot attack detected : webscan vurnerability	Web App Attack
🇺🇸 rellim.com	2022-01-28 05:13:47 (4 years ago)	Jan 28 02:13:45 alice kernel: HACK IN=enp4s0 OUT=enp1s0 MAC=c8:1f:66:36:c6:03:5c:45:27:60:d5:4a:08:0 ... show more Jan 28 02:13:45 alice kernel: HACK IN=enp4s0 OUT=enp1s0 MAC=c8:1f:66:36:c6:03:5c:45:27:60:d5:4a:08:00 SRC=20.113.92.109 DST=204.17.205.254 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=23516 DF PROTO=TCP SPT=58471 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 Jan 28 02:13:46 alice kernel: HACK IN=enp4s0 OUT=enp1s0 MAC=c8:1f:66:36:c6:03:5c:45:27:60:d5:4a:08:00 SRC=20.113.92.109 DST=204.17.205.254 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=23517 DF PROTO=TCP SPT=58471 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 Jan 28 02:13:46 alice kernel: HACK IN=enp4s0 OUT=enp1s0 MAC=c8:1f:66:36:c6:03:5c:45:27:60:d5:4a:08:00 SRC=20.113.92.109 DST=204.17.205.254 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=23518 DF PROTO=TCP SPT=59848 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 urmarcht	2022-01-28 03:24:22 (4 years ago)	Bot attack detected : webscan vurnerability	Web App Attack
🇩🇪 SpaceHost-Server	2022-01-27 11:54:26 (4 years ago)	20.113.92.109 - - [27/Jan/2022:17:54:24 +0100] "POST /xmlrpc.php HTTP/1.0" 200 731 "-" "Mozilla/5.0 ... show more 20.113.92.109 - - [27/Jan/2022:17:54:24 +0100] "POST /xmlrpc.php HTTP/1.0" 200 731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.113.92.109 - - [27/Jan/2022:17:54:24 +0100] "POST /xmlrpc.php HTTP/1.0" 200 731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.113.92.109 - - [27/Jan/2022:17:54:24 +0100] "POST /xmlrpc.php HTTP/1.0" 200 731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 urmarcht	2022-01-26 14:34:14 (4 years ago)	Bot attack detected : webscan vurnerability	Web App Attack
🇫🇷 geot	2022-01-26 09:03:54 (4 years ago)	54 requests, including : GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1 GET //wp1/wp-includes/wlwm ... show more 54 requests, including : GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1 GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1 GET //xmlrpc.php?rsd HTTP/1.1 GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1 GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1 GET //site/wp-includes/wlwmanifest.xml HTTP/1.1 GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1 GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1 GET //website/wp-includes/wlwmanifest.xml HTTP/1.1 GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1 GET //news/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.129

🇻🇳 123.30.106.64

🇰🇷 115.89.98.20

🇺🇸 64.62.197.70

🇵🇭 47.80.100.139

🇺🇸 44.170.238.10

🇲🇾 2402:1980:8ec:f9e0:11d1:143a:4f8:28ad

🇺🇸 192.3.1.46

🇲🇦 160.174.129.232

🇸🇪 155.4.245.222

🇺🇸 130.131.162.82

🇨🇳 121.205.88.12

🇨🇳 121.29.85.214

🇮🇷 94.182.134.147

🇨🇿 86.49.235.160

🇺🇸 64.62.197.185

🇺🇸 64.62.197.39

🇱🇹 62.60.130.219

🇳🇱 45.74.7.108

🇺🇸 45.40.137.53