AbuseIPDB » 20.14.136.44

20.14.136.44 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Boydton, Virginia

Report 20.14.136.44

Whois 20.14.136.44

IP Abuse Reports for 20.14.136.44:

This IP address has been reported a total of 110 times from 64 distinct sources. 20.14.136.44 was first reported on November 26th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
LRob.fr	2024-12-07 23:30:19 (1 hour ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2024-12-07 22:29:48 (2 hours ago)	Aggressive web scan	Bad Web Bot Web App Attack
Christopher Hughes	2024-12-07 22:14:31 (2 hours ago)	[Sat Dec 07 22:14:31.296321 2024] [proxy_fcgi:error] [pid 2266021:tid 139914800789056] [client 20.14 ... show more[Sat Dec 07 22:14:31.296321 2024] [proxy_fcgi:error] [pid 2266021:tid 139914800789056] [client 20.14.136.44:2084] AH01071: Got error 'Primary script unknown' [Sat Dec 07 22:14:31.415433 2024] [proxy_fcgi:error] [pid 2266021:tid 139915908068928] [client 20.14.136.44:2084] AH01071: Got error 'Primary script unknown' [Sat Dec 07 22:14:31.534454 2024] [proxy_fcgi:error] [pid 2266021:tid 139916294927936] [client 20.14.136.44:2084] AH01071: Got error 'Primary script unknown' [Sat Dec 07 22:14:31.652624 2024] [proxy_fcgi:error] [pid 2266021:tid 139916320106048] [client 20.14.136.44:2084] AH01071: Got error 'Primary script unknown' [Sat Dec 07 22:14:31.771407 2024] [proxy_fcgi:error] [pid 2266021:tid 139915329267264] [client 20.14.136.44:2084] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Epimetheus	2024-12-07 21:50:08 (2 hours ago)	Unauthorized access attempts: From: 20.14.136.44 Method: HTT ... show moreUnauthorized access attempts: From: 20.14.136.44 Method: HTTP GET URI Path: /wp-includes/rest-api/about.php UA: "" show less	Web App Attack
robotstxt	2024-12-07 20:23:38 (4 hours ago)	20.14.136.44 - - [07/Dec/2024:20:22:51 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 62448 "-" rt="0. ... show more20.14.136.44 - - [07/Dec/2024:20:22:51 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 62448 "-" rt="0.283" "-" "-" h="monteroespinosaonline.com" sn="_" ru="/cgi-bin/about.php" u="/index.php" ucs="-" ua="unix:/var/run/php/monteroespinosa82.sock" us="404" uct="0.000" urt="0.283" 20.14.136.44 - - [07/Dec/2024:20:22:51 +0000] "GET /cgi-bin/file.php HTTP/1.1" 404 62448 "-" rt="0.284" "-" "-" h="monteroespinosaonline.com" sn="_" ru="/cgi-bin/file.php" u="/index.php" ucs="-" ua="unix:/var/run/php/monteroespinosa82.sock" us="404" uct="0.000" urt="0.284" 20.14.136.44 - - [07/Dec/2024:20:22:54 +0000] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 404 5 "-" rt="0.210" "-" "-" h="monteroespinosaonline.com" sn="_" ru="/cgi-bin/xmrlpc.php?p=" u="/index.php" ucs="-" ua="unix:/var/run/php/monteroespinosa82.sock" us="301" uct="0.000" urt="0.210" 20.14.136.44 - - [07/Dec/2024:20:22:51 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 62448 "-" "-" "-" 20.14.136.44 - - [07/Dec/2024:20:22:51 +0000] "GET /cgi-bin/file.php ... show less	Bad Web Bot
doll.gl	2024-12-07 20:13:21 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
Mendip_Defender	2024-12-07 18:08:41 (6 hours ago)	20.14.136.44 - - [07/Dec/2024:18:08:50 +0000] "GET /wp-includes/wp-load.php HTTP/2.0" 403 146 "-" "- ... show more20.14.136.44 - - [07/Dec/2024:18:08:50 +0000] "GET /wp-includes/wp-load.php HTTP/2.0" 403 146 "-" "-" 20.14.136.44 - - [07/Dec/2024:18:08:50 +0000] "GET /wp-includes/SimplePie/about.php HTTP/2.0" 403 146 "-" "-" ... show less	Hacking Web App Attack
Anonymous	2024-12-07 16:04:06 (8 hours ago)	Fail2Ban apache-noscript	Bad Web Bot
Gwyneth Llewelyn	2024-12-07 14:42:03 (9 hours ago)	20.14.136.44 - - [07/Dec/2024:14:42:01 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1117 "-" "-"	Bad Web Bot
theEngineer	2024-12-07 10:30:53 (14 hours ago)	[10:30:52] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, ... show more[10:30:52] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, 1749 other attacks previously recorded.) show less	Hacking Bad Web Bot Web App Attack
LRob.fr	2024-12-07 08:45:05 (15 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
R.G.	2024-12-07 02:19:46 (22 hours ago)	(ScanningForFiles) Scanning for files triggerd 20.14.136.44 (US/United States/-): 10 in the last 900 ... show more(ScanningForFiles) Scanning for files triggerd 20.14.136.44 (US/United States/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
conseilgouz	2024-12-07 01:08:22 (23 hours ago)	ame-Direct access to plugin not allowed	Hacking
uhlhosting	2024-12-07 00:48:25 (23 hours ago)	musashi.ninja 20.14.136.44 - - [07/Dec/2024:01:48:15.971310 +0100] "GET /wp-admin/includes/ HTTP/1.1 ... show moremusashi.ninja 20.14.136.44 - - [07/Dec/2024:01:48:15.971310 +0100] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "-" "-" Z1ObT_IntFMs4XBgmmJJkQAAAEQ "-" /apache/20241207/20241207-0148/20241207-014815-Z1ObT_IntFMs4XBgmmJJkQAAAEQ 0 1148 md5:e27796149b5897e3d652a52fbb178d2e musashi.ninja 20.14.136.44 - - [07/Dec/2024:01:48:17.963239 +0100] "GET /.well-known/plugins.php HTTP/1.1" 403 199 "-" "-" Z1ObUX8VdnzPRjo8pdlq6AAAAcU "-" /apache/20241207/20241207-0148/20241207-014817-Z1ObUX8VdnzPRjo8pdlq6AAAAcU 0 985 md5:c360d29acf2555ce9246300931bcc669 musashi.ninja 20.14.136.44 - - [07/Dec/2024:01:48:18.781368 +0100] "GET /.well-known/iwpairbj.php HTTP/1.1" 403 199 "-" "-" Z1ObUn8VdnzPRjo8pdlq6wAAAcs "-" /apache/20241207/20241207-0148/20241207-014818-Z1ObUn8VdnzPRjo8pdlq6wAAAcs 0 986 md5:3e05c0053ee74042ea6abe57c30e91bf musashi.ninja 20.14.136.44 - - [07/Dec/2024:01:48:24.111928 +0100] "GET /wp-mail.php HTTP/1.1" 403 2495 "-" "-" Z1ObV_IntFMs4XBgmmJJlAAAAEE "-" /apache/20241207/20241207-0148/202412 ... show less	DDoS Attack Brute-Force
theEngineer	2024-12-06 23:14:10 (1 day ago)	[23:14:08] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, ... show more[23:14:08] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, 1390 other attacks previously recorded.) show less	Hacking Bad Web Bot Web App Attack