AbuseIPDB » 20.191.253.29

20.191.253.29 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Australia
City	Sydney, New South Wales

Report 20.191.253.29

Whois 20.191.253.29

IP Abuse Reports for 20.191.253.29:

This IP address has been reported a total of 95 times from 67 distinct sources. 20.191.253.29 was first reported on November 3rd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
LRob.fr	2024-11-20 23:01:05 (1 week ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
LRob.fr	2024-11-18 23:01:56 (2 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
LRob.fr	2024-11-16 23:02:46 (2 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Roderic	2024-11-15 20:39:27 (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 20.191.253.29 (AU/Australia/-)	SQL Injection
paulshipley.com.au	2024-11-15 20:21:12 (2 weeks ago)	levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:20:54 +1100] "GET /admin/function.php H ... show morelevellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:20:54 +1100] "GET /admin/function.php HTTP/1.1" 404 99931 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:20:56 +1100] "GET /admin.php HTTP/1.1" 404 96414 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:20:57 +1100] "GET /config.php HTTP/1.1" 404 96412 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:20:59 +1100] "GET /about/function.php HTTP/1.1" 404 96442 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:21:01 +1100] "GET /lock.php HTTP/1.1" 404 96411 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:21:03 +1100] "GET /simple.php HTTP/1.1" 404 96412 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:21:05 +1100] "GET /radio.php HTTP/1.1" 404 96414 "-" "-" levellagiftware.com.au:443 20.191.253.29 - - [16/Nov/2024:07:21:06 +1100] "GET /wp-mail.php HTTP/1.1" 403 3212 "-" "-" levellagiftware.com.au:443 20.191.25 ... show less	Web App Attack
4server	2024-11-15 19:59:32 (2 weeks ago)	[FriNov1520:59:05.0979462024][security2:error][pid1985027:tid1985076][client20.191.253.29:0][client2 ... show more[FriNov1520:59:05.0979462024][security2:error][pid1985027:tid1985076][client20.191.253.29:0][client20.191.253.29]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/autoload_classmap.php\"][severity\"CRITICAL\"][hostname\"ggarchitetti.ch\"][uri\"/wp-content/uploads/autoload_classmap.php\"][unique_id\"ZzeoCXODagN_9JaxSklGIgAAAVM\"][FriNov1520:59:18.7228232024][security2:error][pid1985027:tid1985076][client20.191.253.29:0][client20.191.253.29]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfil show less	Port Scan Brute-Force Web App Attack
theEngineer	2024-11-15 18:11:16 (2 weeks ago)	[18:11:14] 4*: Exploit attempt against non-existent file - /admin/function.php	Hacking Bad Web Bot Web App Attack
Anonymous	2024-11-15 11:04:06 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-15 10:35:51 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_APACHE_403	Brute-Force SSH
Apache	2024-11-15 10:28:00 (2 weeks ago)	(mod_security) mod_security (id:20000010) triggered by 20.191.253.29 (AU/Australia/-): 5 in the last ... show more(mod_security) mod_security (id:20000010) triggered by 20.191.253.29 (AU/Australia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
WebpodsLLC	2024-11-15 09:29:25 (2 weeks ago)	Direction: in Trigger: LF_MODSEC;	Port Scan Brute-Force Web App Attack
ph	2024-11-15 08:58:38 (2 weeks ago)	Bad web bot attempting to run wp-content on non-WP site	Hacking Bad Web Bot Web App Attack
openstrike.co.uk	2024-11-15 06:12:40 (2 weeks ago)	399 attacks on PHP URLs: GET /xmrlpc.php?p= HTTP/1.1	Web App Attack
4server	2024-11-15 05:53:13 (2 weeks ago)	[FriNov1506:52:48.3600522024][security2:error][pid1984365:tid1984420][client20.191.253.29:0][client2 ... show more[FriNov1506:52:48.3600522024][security2:error][pid1984365:tid1984420][client20.191.253.29:0][client20.191.253.29]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/autoload_classmap.php\"][severity\"CRITICAL\"][hostname\"volcano.ch\"][uri\"/wp-content/uploads/autoload_classmap.php\"][unique_id\"ZzbhsJ88eWPQb4Trqa0NCwAAABc\"][FriNov1506:53:01.8943172024][security2:error][pid1984519:tid1984582][client20.191.253.29:0][client20.191.253.29]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexec show less	Port Scan Brute-Force Web App Attack
Roderic	2024-11-15 05:06:22 (2 weeks ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 20.191.253.29 (AU/Aust ... show more(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 20.191.253.29 (AU/Australia/-) show less	Port Scan