JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.163.121.129

Neutral Activity

Abuse Confidence Score

0% Low Risk

42 reports

38 reporters · latest 4 years ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.163.121.129 has been reported 42 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

42 from 38 distinct reporters

First reported

August 25th 2022

Most recent report

4 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-09-18 13:37:15 UTC · (4 years ago)	spamd: identified spam	Email Spam
🇺🇸 bigbikefan	2022-09-16 21:56:33 UTC · (4 years ago)	microsoft hackers... //sito/wp-includes/wlwmanifest.xml //cms/wp-includes/wlwmanifest.xml //site/wp-includes/wlwmanifest.xml //wp2/wp-includes/wlwmanifest.xml //media/wp-includes/wlwmanifest.xml //shtml/test/wp-includes/wlwmanifest.xml //tes ... show more microsoft hackers... //sito/wp-includes/wlwmanifest.xml //cms/wp-includes/wlwmanifest.xml //site/wp-includes/wlwmanifest.xml //wp2/wp-includes/wlwmanifest.xml //media/wp-includes/wlwmanifest.xml //shtml/test/wp-includes/wlwmanifest.xml //test/wp-includes/wlwmanifest.xml //wp1/wp-includes/wlwmanifest.xml //shop/wp-includes/wlwmanifest.xml //2021/wp-includes/wlwmanifest.xml //2020/wp-includes/wlwmanifest.xml //2019/wp-includes/wlwmanifest.xml //news/wp-includes/wlwmanifest.xml //wp/wp-includes/wlwmanifest.xml //website/wp-includes/wlwmanifest.xml //wordpress/wp-includes/wlwmanifest.xml //web/wp-includes/wlwmanifest.xml //blog/wp-includes/wlwmanifest.xml //xmlrpc.php?rsd //wp-includes/wlwmanifest.xml show less	Hacking Brute-Force
🇦🇺 Martlark	2022-09-16 20:57:39 UTC · (4 years ago)	Flask-IPban - exploit URL requested:/wp-includes/wlwmanifest.xml	Web App Attack
🇵🇾 TrotskyBoss	2022-09-16 20:41:39 UTC · (4 years ago)	WordPress Brute Force Attacks	Web Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2022-09-15 21:06:07 UTC · (4 years ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇩🇪 Trueforce Threat Report	2022-09-15 19:52:06 UTC · (4 years ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇳🇱 Arnold Maarten	2022-09-15 13:24:22 UTC · (4 years ago)	20.163.121.129 (US/United States/-), more than 5 Apache 403 hits	Hacking
🇩🇪 mxinfra	2022-09-14 15:32:28 UTC · (4 years ago)	Fail2Ban triggered by plesk-modsecurity Wed 14 Sep 2022 09:32:35 PM CEST	Hacking Brute-Force Web App Attack
🇳🇱 MacLotsen	2022-09-13 02:24:48 UTC · (4 years ago)	[Tue Sep 13 08:24:23.723663 2022] [access_compat:error] [pid 91922] [client 20.163.121.129:51354] AH01797: client denied by server configuration: /var/www/ingestoffer.nl/wp-admin/admin-ajax.php [Tue Sep 13 08:24:46.391169 2022] [access_compat:error] ... show more [Tue Sep 13 08:24:23.723663 2022] [access_compat:error] [pid 91922] [client 20.163.121.129:51354] AH01797: client denied by server configuration: /var/www/ingestoffer.nl/wp-admin/admin-ajax.php [Tue Sep 13 08:24:46.391169 2022] [access_compat:error] [pid 91922] [client 20.163.121.129:51138] AH01797: client denied by server configuration: /var/www/ingestoffer.nl/wp-admin/admin-ajax.php [Tue Sep 13 08:24:47.592280 2022] [access_compat:error] [pid 92322] [client 20.163.121.129:53330] AH01797: client denied by server configuration: /var/www/ingestoffer.nl/wp-admin/admin-ajax.php ... show less	Brute-Force Web App Attack
🇬🇧 mangomad	2022-09-10 06:29:29 UTC · (4 years ago)	Repeated Apache mod_security rule triggers	Brute-Force Web App Attack
🇩🇪 neverdown.eu	2022-09-09 10:25:03 UTC · (4 years ago)	(XMLRPC) WP XMLPRC Attack 20.163.121.129 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.163.121.129 - - [09/Sep/2022:17:24:54 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 301 707 "-" "Mozilla/5 ... show more (XMLRPC) WP XMLPRC Attack 20.163.121.129 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.163.121.129 - - [09/Sep/2022:17:24:54 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 301 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" show less	Port Scan
🇯🇵 weils.net	2022-09-09 09:59:06 UTC · (4 years ago)	2022-09-09 21:59:05(GMT+8) - //cms/wp-includes/wlwmanifest.xml	Bad Web Bot
🇧🇪 taivas.nl	2022-09-09 09:32:06 UTC · (4 years ago)	Bad_requests	Bad Web Bot
🇩🇪 Avocuard	2022-09-09 09:24:40 UTC · (4 years ago)	Attempt to access wlwmanifest.xml \| Ignores robots.txt \| User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36	Bad Web Bot
🇺🇸 Fox River Dan	2022-09-09 09:05:23 UTC · (4 years ago)	20.163.121.129 - - [08/Sep/2022:23:21:24 -0500] "GET /public/default.wct/wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "(no ... show more 20.163.121.129 - - [08/Sep/2022:23:21:24 -0500] "GET /public/default.wct/wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "(node: 0)" 20.163.121.129 - - [08/Sep/2022:23:21:24 -0500] "GET /public/default.wct/site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "(node: 0)" 20.163.121.129 - - [08/Sep/2022:23:21:24 -0500] "GET /public/default.wct/cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "(node: 0)" 20.163.121.129 - - [08/Sep/2022:23:21:24 -0500] "GET /public/default.wct/sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8465 "-" show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 180.93.193.100

🇺🇸 172.174.129.234

🇸🇬 168.144.35.202

🇮🇳 152.59.78.3

🇨🇳 118.213.150.46

🇻🇳 116.103.26.80

🇵🇱 91.236.172.11

🇲🇾 49.124.155.162

🇺🇸 173.225.203.192

🇺🇸 162.213.253.54

🇵🇭 124.106.88.192

🇨🇳 116.179.32.212

🇮🇳 106.219.147.175

🇫🇷 85.217.140.52

🇺🇸 47.211.238.226

🇺🇸 2a10:7b00:b82f:c337:ef98:d184:405a:9835

🇳🇱 193.47.62.110

🇫🇮 170.168.31.200

🇩🇪 94.183.174.99

🇹🇷 88.247.206.213