JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.161.45.112

20.161.45.112 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 87%: ?

87%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.161.45.112

Whois 20.161.45.112

IP Abuse Reports for 20.161.45.112:

This IP address has been reported a total of 31 times from 25 distinct sources. 20.161.45.112 was first reported on February 20th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-09-02 22:05:30 (4 hours ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-09-02 21:50:25 (4 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-09-02 21:20:39 (5 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.161.45.112 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.161.45.112 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 paulo.apoloni	2026-09-02 21:15:45 (5 hours ago)	20.161.45.112 - - [02/Sep/2026:18:15:43 -0300] "GET /wp/wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5. ... show more 20.161.45.112 - - [02/Sep/2026:18:15:43 -0300] "GET /wp/wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.161.45.112 - - [02/Sep/2026:18:15:43 -0300] "GET /Auth/Login?ReturnUrl=%2Fwp%2Fwp-login.php HTTP/1.1" 200 1867 "https://bestplanetseguros.com.br/wp/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.161.45.112 - - [02/Sep/2026:18:15:43 -0300] "POST /wp/wp-login.php HTTP/1.1" 302 0 "https://bestplanetseguros.com.br/wp/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 20.161.45.112 - - [02/Sep/2026:18:15:44 -0300] "GET /Auth/Login?ReturnUrl=%2Fwp%2Fwp-login.php HTTP/1.1" 200 1865 "https://bestplanetseguros.com.br/wp/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Versio ... show less	Web App Attack
🇦🇺 A.i.D.A.N.N	2026-09-02 21:10:19 (5 hours ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇮🇹 VHosting	2026-09-02 21:10:03 (5 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-02 21:01:02 (5 hours ago)	...	Web App Attack
🇺🇸 WellSpring	2026-09-02 21:00:27 (5 hours ago)	wordpress scan on 740.today/wp/wp-login.php — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-09-02 20:52:40 (5 hours ago)	-:443 20.161.45.112 - - [02/Sep/2026:22:52:38 +0200] - "GET /wp/wp-login.php HTTP/1.1" 404 7360 "-" ... show more -:443 20.161.45.112 - - [02/Sep/2026:22:52:38 +0200] - "GET /wp/wp-login.php HTTP/1.1" 404 7360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" show less	Bad Web Bot
🇩🇪 LRob	2026-09-02 20:42:16 (6 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp/wp-login.php \| 2026-09-02 20:42 UTC show less	Hacking Web App Attack
🇵🇱 wielorzeczownik	2026-09-02 20:33:20 (6 hours ago)	3 failed attempts 2026-09-02 22:33:17 GET /wp/wp-login.php -> 404 2026-09-02 22:33:18 POST /wp/w ... show more 3 failed attempts 2026-09-02 22:33:17 GET /wp/wp-login.php -> 404 2026-09-02 22:33:18 POST /wp/wp-login.php -> 404 2026-09-02 22:33:19 POST /wp/xmlrpc.php -> 404 show less	Web App Attack Hacking
🇺🇸 ne1for23	2026-09-02 20:16:03 (6 hours ago)	20.161.45.112 - - [02/Sep/2026:20:16:02 +0000] "GET /wp/wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/ ... show more 20.161.45.112 - - [02/Sep/2026:20:16:02 +0000] "GET /wp/wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 4server	2026-09-02 20:15:36 (6 hours ago)	[WedSep0222:15:32.6591272026][security2:error][pid1911566:tid1911640][client20.161.45.112:0]ModSecur ... show more [WedSep0222:15:32.6591272026][security2:error][pid1911566:tid1911640][client20.161.45.112:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gagspettacolo.ch\"][uri\"/wp/xmlrpc.php\"][unique_id\"apiD5OEY1GeeKuUreIY3GQAAAM0\"] show less	Port Scan Brute-Force Web App Attack
🇮🇳 Mr.Singh	2026-08-29 09:30:35 (4 days ago)	NFT blocked 20.161.45.112 after 2 rejections on 29-Aug-2026.	Port Scan Brute-Force
🇨🇦 Arpan Sen	2026-08-29 08:59:02 (4 days ago)	Network port/address scan: probed 1 distinct port(s) across 20 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 20 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.6.36.220

🇰🇷 183.108.66.43

🇺🇸 73.43.184.216

🇺🇸 64.62.156.214

🇳🇱 45.148.10.157

🇬🇧 35.203.211.88

🇺🇸 195.184.76.53

🇩🇪 194.187.176.222

🇧🇷 192.178.95.21

🇬🇧 185.214.101.139

🇺🇸 185.141.119.73

🇺🇸 172.110.223.252

🇺🇸 162.216.149.176

🇰🇷 123.108.169.196

🇸🇬 84.75.150.172

🇱🇹 62.60.130.201

🇮🇳 49.43.229.167

🇸🇪 46.246.98.142

🇩🇪 43.157.14.6

🇬🇧 35.203.211.164