JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.127.75.252

20.127.75.252 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.127.75.252

Whois 20.127.75.252

IP Abuse Reports for 20.127.75.252:

This IP address has been reported a total of 207 times from 70 distinct sources. 20.127.75.252 was first reported on May 28th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-06-27 04:16:53 (4 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇨🇿 Milky	2022-06-27 01:15:04 (4 years ago)	8× attempts to log on to WP. However, we do not use WP. Last visit 2022-06-26 03:55:07	Web Spam Bad Web Bot Web App Attack
🇧🇪 illuminated technologies	2022-06-26 16:28:01 (4 years ago)	GET /wp-content/plugins/sid/up.php GET /wp-content/plugins/upspy/	Hacking Web App Attack
🇺🇸 SiliSoftware	2022-06-26 15:44:22 (4 years ago)	/wp-content/plugins/upspy/	Web App Attack
Anonymous	2022-06-26 04:15:47 (4 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇸🇬 Sofibox Cyberwatch	2022-06-26 04:09:29 (4 years ago)	[bad_ip: 20.127.75.252 [alert_level: High Risk [inbound(0)+outbound(11): 11 [target_port: 60790 [cla ... show more [bad_ip: 20.127.75.252 [alert_level: High Risk [inbound(0)+outbound(11): 11 [target_port: 60790 [class: Attempted Information Leak [msg: GPL WEB_SERVER 403 Forbidden [csf_block_status: ip-already-blocked [blcheck_ip_score: 96.3% (7/189) [blcheck_domain: "bl.fmb.la,all.s5h.net,dnsbl.spfbl.net,cbl.abuseat.org,sbl-xbl.spamhaus.org,xbl.spamhaus.org,zen.spa [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Port Scan
🇸🇬 Sofibox Cyberwatch	2022-06-26 03:51:31 (4 years ago)	[bad_ip: 20.127.75.252 [alert_level: Very High Risk [inbound(0)+outbound(6): 6 [target_port: 50126 [ ... show more [bad_ip: 20.127.75.252 [alert_level: Very High Risk [inbound(0)+outbound(6): 6 [target_port: 50126 [class: Web Application Attack [msg: ET WEB_SERVER Possible HTTP 403 XSS Attempt (Local Source) [csf_block_status: ip-already-blocked [blcheck_ip_score: 96.3% (7/189) [blcheck_domain: "bl.fmb.la,all.s5h.net,dnsbl.spfbl.net,cbl.abuseat.org,sbl-xbl.spamhaus.org,xbl.spamhaus.org,zen.spa [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Hacking
🇸🇬 Sofibox Cyberwatch	2022-06-26 03:36:12 (4 years ago)	[bad_ip: 20.127.75.252 [alert_level: High Risk [inbound(0)+outbound(1): 1 [target_port: 61262 [class ... show more [bad_ip: 20.127.75.252 [alert_level: High Risk [inbound(0)+outbound(1): 1 [target_port: 61262 [class: Attempted Information Leak [msg: GPL WEB_SERVER 403 Forbidden [csf_block_status: ip-already-blocked [blcheck_ip_score: 96.3% (7/189) [blcheck_domain: "bl.fmb.la,all.s5h.net,dnsbl.spfbl.net,cbl.abuseat.org,sbl-xbl.spamhaus.org,xbl.spamhaus.org,zen.spa [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Port Scan
🇧🇷 AC - Team	2022-06-26 02:21:57 (4 years ago)	20.127.75.252 - - [26/Jun/2022:03:21:56 -0300] "GET /xleet.php HTTP/1.1" 301 594 "-" "Mozilla/5.0 (M ... show more 20.127.75.252 - - [26/Jun/2022:03:21:56 -0300] "GET /xleet.php HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36" ... show less	Exploited Host Web App Attack
Anonymous	2022-06-26 01:47:00 (4 years ago)	$f2bV_matches	Brute-Force Web App Attack
Anonymous	2022-06-25 22:04:54 (4 years ago)	[Sun Jun 26 04:04:19.026575 2022] [:error] [pid 9932] [client 20.127.75.252:63867] script '/var/lib/ ... show more [Sun Jun 26 04:04:19.026575 2022] [:error] [pid 9932] [client 20.127.75.252:63867] script '/var/lib/nethserver/vhost/stephdl.dargels.de/xleet.php' not found or unable to stat [Sun Jun 26 04:04:25.329877 2022] [:error] [pid 2559] [client 20.127.75.252:62199] script '/var/lib/nethserver/vhost/stephdl.dargels.de/wp-js.php' not found or unable to stat [Sun Jun 26 04:04:42.396628 2022] [:error] [pid 26846] [client 20.127.75.252:62045] script '/var/lib/nethserver/vhost/stephdl.dargels.de/olux.php' not found or unable to stat [Sun Jun 26 04:04:47.645728 2022] [:error] [pid 29812] [client 20.127.75.252:61553] script '/var/lib/nethserver/vhost/stephdl.dargels.de/wp-2019.php' not found or unable to stat [Sun Jun 26 04:04:53.486942 2022] [:error] [pid 26845] [client 20.127.75.252:61013] script '/var/lib/nethserver/vhost/stephdl.dargels.de/error.php' not found or unable to stat ... show less	Brute-Force
🇸🇪 Lemmy	2022-06-25 16:01:59 (4 years ago)	apache-noscript	Web App Attack
Anonymous	2022-06-25 04:15:38 (4 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇨🇿 Milky	2022-06-25 01:17:41 (4 years ago)	3× attempts to log on to WP. However, we do not use WP. Last visit 2022-06-24 23:32:44	Web Spam Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-06-24 21:21:16 (4 years ago)	20.127.75.252 - - [24/Jun/2022:22:21:11 -0300] "GET /xleet.php HTTP/1.1" 404 9302 "-" "Mozilla/5.0 ( ... show more 20.127.75.252 - - [24/Jun/2022:22:21:11 -0300] "GET /xleet.php HTTP/1.1" 404 9302 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.16 Safari/537.36" ... show less	Exploited Host Web App Attack

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 182.213.66.196

🇫🇷 167.86.82.207

🇺🇸 158.94.187.84

🇵🇰 124.29.249.210

🇨🇳 123.178.210.40

🇺🇸 50.6.248.168

🇺🇸 40.119.41.94

🇮🇷 5.123.203.55

🇦🇺 2401:c080:1800:4f38:5400:4ff:fea6:6ba4

🇺🇸 147.185.132.255

🇨🇳 114.254.1.141

🇨🇳 114.106.146.77

🇬🇧 89.37.172.150

🇱🇹 62.60.130.219

🇧🇷 45.205.1.240

🇺🇸 45.146.55.156

🇺🇸 44.247.232.97

🇭🇰 42.200.66.164

🇺🇸 40.124.175.233

🇺🇸 199.127.63.58