JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.210.128.230

20.210.128.230 was found in our database!

This IP was reported 223 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.210.128.230

Whois 20.210.128.230

IP Abuse Reports for 20.210.128.230:

This IP address has been reported a total of 223 times from 194 distinct sources. 20.210.128.230 was first reported on July 7th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 zam	2026-07-08 23:07:45 (3 minutes ago)	20.210.128.230 - - [08/Jul/2026:23:07:40 +0000] "GET //wp-content/cong.php HTTP/1.1" 404 236	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-08 23:05:35 (5 minutes ago)	2026-07-09 @ 01:05:34 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-09 @ 01:05:34 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
Anonymous	2026-07-08 23:02:43 (8 minutes ago)	(PERMBLOCK) 20.210.128.230 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Port ... show more (PERMBLOCK) 20.210.128.230 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇧 Blake	2026-07-08 22:56:54 (14 minutes ago)	20.210.128.230 "-" "-" - [08/Jul/2026:22:56:53 +0000] "GET /wp-content/plugins/hellopress/wp_fileman ... show more 20.210.128.230 "-" "-" - [08/Jul/2026:22:56:53 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "-" ATTACK ... show less	Web App Attack
🇺🇸 antlac1	2026-07-08 22:50:17 (21 minutes ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2026-07-08 22:46:09 (25 minutes ago)	[08/Jul/2026:22:46:09 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=20.210 ... show more [08/Jul/2026:22:46:09 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=20.210.128.230 method=GET req=/wp-content/uploads/2021/02/index.php uri=/wp-content/uploads/2021/02/index.php status=404 bytes=27 rt=0.001 urt=0.001 ref="-" ua="-" ... show less	Web App Attack Bad Web Bot
🇩🇪 AetherFox	2026-07-08 22:40:04 (31 minutes ago)	AetherFox VoidGuard detected: [Wed Jul 08 22:40:01.110841 2026] [authz_core:error] [pid 4155082:tid ... show more AetherFox VoidGuard detected: [Wed Jul 08 22:40:01.110841 2026] [authz_core:error] [pid 4155082:tid 4155104] [client 20.210.128.230:45340] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-content/plugins/hellopress/wp_filemanager.php [Wed Jul 08 22:40:01.817575 2026] [authz_core:error] [pid 4155082:tid 4155117] [client 20.210.128.230:45340] AH01630: client denied by server configuration: proxy:https://[MASKED]/this_is_a_new_hello_world.php [Wed Jul 08 22:40:02.276808 2026] [authz_core:error] [pid 4155082:tid 4155095] [client 20.210.128.230:45340] AH01630: client denied by server configuration: proxy:https://[MASKED]/ip.php [Wed Jul 08 22:40:02.936192 2026] [authz_core:error] [pid 4155082:tid 4155085] [client 20.210.128.230:45340] AH01630: client denied by server configuration: proxy:https://[MASKED]/fw/faiyy.php [Wed Jul 08 22:40:04.196428 2026] [authz_core:error] [pid 4155082:tid 4155114] [client 20.210.128.230:45340] AH01630: c ... show less	Bad Web Bot Web App Attack
🇵🇱 Roper123	2026-07-08 22:36:18 (34 minutes ago)	Web app attack	Web App Attack
🇫🇷 tecnoacquisti.com	2026-07-08 22:31:13 (40 minutes ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-08 22:27:14 (44 minutes ago)	20.210.128.230 - - [09/Jul/2026:01:26:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.210.128.230 - - [09/Jul/2026:01:26:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 251 "-" "-" 20.210.128.230 - - [09/Jul/2026:01:27:10 +0300] "GET //wp-content/cong.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-08 22:25:46 (45 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇩🇪 netclix.gr	2026-07-08 22:22:56 (48 minutes ago)	(aggressive_scan) Aggressive Web Exploit Scan 20.210.128.230 (JP/Japan/-): 5 in the last 4600 secs; ... show more (aggressive_scan) Aggressive Web Exploit Scan 20.210.128.230 (JP/Japan/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.210.128.230 - - [09/Jul/2026:01:22:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-" 20.210.128.230 - - [09/Jul/2026:01:22:44 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-" 20.210.128.230 - - [09/Jul/2026:01:22:44 +0300] "GET //ip.php HTTP/1.1" 404 808 "-" "-" 20.210.128.230 - - [09/Jul/2026:01:22:45 +0300] "GET /fw/faiyy.php HTTP/1.1" 404 808 "-" "-" 20.210.128.230 - - [09/Jul/2026:01:22:46 +0300] "GET /wp-temp.php HTTP/1.1" 404 808 "-" "-" show less	Port Scan
🇫🇷 solution.it	2026-07-08 22:16:14 (55 minutes ago)	[Thu Jul 09 00:16:14.078612 2026] [php7:error] [pid 15655:tid 15655] [client 20.210.128.230:17019] s ... show more [Thu Jul 09 00:16:14.078612 2026] [php7:error] [pid 15655:tid 15655] [client 20.210.128.230:17019] script '/var/www/html/blog.solution.it/this_is_a_new_hello_world.php' not found or unable to stat show less	Web App Attack
🇩🇪 wpadm4	2026-07-08 22:00:11 (1 hour ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-08 21:59:54 (1 hour ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking

Showing 1 to 15 of 223 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.122.115.9

🇺🇸 216.25.89.78

🇨🇳 106.12.22.213

🇷🇺 46.164.216.89

🇬🇧 35.203.210.158

🇧🇷 201.18.68.42

🇩🇪 194.31.223.71

🇨🇳 118.145.82.180

🇺🇸 98.84.200.43

🇨🇦 85.217.149.16

🇨🇳 39.154.11.145

🇳🇱 193.176.31.197

🇵🇰 175.107.1.53

🇮🇩 103.78.105.162

🇺🇸 54.89.226.110

🇺🇸 23.59.176.208

🇺🇸 165.22.47.52

🇺🇸 162.216.150.24

🇧🇬 91.191.209.46

🇳🇱 45.148.10.157