JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.213.125.104

20.213.125.104 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.213.125.104

Whois 20.213.125.104

IP Abuse Reports for 20.213.125.104:

This IP address has been reported a total of 37 times from 25 distinct sources. 20.213.125.104 was first reported on July 11th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 mypatricks	2022-07-21 08:59:32 (4 years ago)	20.213.125.104 \| Port: 23754 \| DNS: 20.213.125.104 2022-07-21T12:59:31+00:00 UTC \| Unauthorized conn ... show more 20.213.125.104 \| Port: 23754 \| DNS: 20.213.125.104 2022-07-21T12:59:31+00:00 UTC \| Unauthorized connect attempts \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: AU/Australia/+08:00 72e41d3c3ae2aae4-SYD/Sydney, NSW, Australia 1 hits/0 secs Robots 0 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇨🇿 akac	2022-07-20 22:08:33 (4 years ago)	WordPress XML-RPC attack with username "time2help" and password "demodemo". Method Name: system.mult ... show more WordPress XML-RPC attack with username "time2help" and password "demodemo". Method Name: system.multicall, Route: wp.getUsersBlogs Request: POST /xmlrpc.php User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇨🇿 akac	2022-07-20 21:53:32 (4 years ago)	Probing for Windows Live Writer Manifest files (wlwmanifest.xml) Request: GET /wp-includes/wlwmanife ... show more Probing for Windows Live Writer Manifest files (wlwmanifest.xml) Request: GET /wp-includes/wlwmanifest.xml User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 eveng	2022-07-20 02:11:11 (4 years ago)	(wordpress) Failed wordpress login from 20.213.125.104 (AU/Australia/-)	Brute-Force
🇺🇸 TTWebhosting	2022-07-20 00:38:04 (4 years ago)	(mod_security) mod_security (id:225170) triggered by 20.213.125.104 (AU/Australia/New South Wales/Sy ... show more (mod_security) mod_security (id:225170) triggered by 20.213.125.104 (AU/Australia/New South Wales/Sydney/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
🇮🇩 top tap	2022-07-19 10:20:41 (4 years ago)	20.213.125.104 - - [19/Jul/2022:21:10:07 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5. ... show more 20.213.125.104 - - [19/Jul/2022:21:10:07 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [19/Jul/2022:21:10:08 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [19/Jul/2022:21:10:08 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [19/Jul/2022:21:10:09 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [19/Jul/2022:21:10:09 +0700] "POST //xmlrpc.php HTTP/1.0" 200 935 "-" "Mozilla/5.0 (Windows NT 10.0; show less	Web App Attack
🇧🇷 AC - Team	2022-07-19 05:31:11 (4 years ago)	20.213.125.104 - - [19/Jul/2022:06:31:10 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 433 ... show more 20.213.125.104 - - [19/Jul/2022:06:31:10 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 nextweb	2022-07-18 22:33:56 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.213.125.104 (AU/Australia/New South Wales/Sy ... show more (mod_security) mod_security (id:210410) triggered by 20.213.125.104 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇳🇱 CryptoYakari	2022-07-18 04:33:06 (4 years ago)	20.213.125.104 - - [18/Jul/2022:11:32:44 +0300] "GET / HTTP/1.0" 403 568 "-" "Mozilla/5.0 (Windows N ... show more 20.213.125.104 - - [18/Jul/2022:11:32:44 +0300] "GET / HTTP/1.0" 403 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [18/Jul/2022:11:32:45 +0300] "GET //?author=1 HTTP/1.0" 403 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 20.213.125.104 - - [18/Jul/2022:11:32:45 +0300] "GET //?author=2 HTTP/1.0" 403 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-07-17 05:00:56 (4 years ago)	20.213.125.104 - - [17/Jul/2022:06:01:00 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 480 ... show more 20.213.125.104 - - [17/Jul/2022:06:01:00 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 4808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 Ba-Yu	2022-07-16 10:16:45 (4 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇬🇧 Apache	2022-07-16 05:48:11 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.213.125.104 (AU/Australia/-): 5 in the last ... show more (mod_security) mod_security (id:210410) triggered by 20.213.125.104 (AU/Australia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
Anonymous	2022-07-15 02:49:39 (4 years ago)	Scanning	Port Scan
Anonymous	2022-07-15 02:01:42 (4 years ago)	[Fri Jul 15 08:01:37.536445 2022] [fcgid:warn] [pid 1020:tid 140663886681856] [client 20.213.125.104 ... show more [Fri Jul 15 08:01:37.536445 2022] [fcgid:warn] [pid 1020:tid 140663886681856] [client 20.213.125.104:51278] mod_fcgid: stderr: WP User : dmitriy authentication failure \| IP : 20.213.125.104 \| URL https://edburns.net/wp-admin/ [Fri Jul 15 08:01:38.834495 2022] [fcgid:warn] [pid 1020:tid 140663895074560] [client 20.213.125.104:51352] mod_fcgid: stderr: WP User : dmitriy authentication failure \| IP : 20.213.125.104 \| URL https://edburns.net/wp-admin/ [Fri Jul 15 08:01:41.496326 2022] [fcgid:warn] [pid 1020:tid 140665089050368] [client 20.213.125.104:51484] mod_fcgid: stderr: WP User : dmitriy authentication failure \| IP : 20.213.125.104 \| URL https://edburns.net/wp-admin/ ... show less	Brute-Force Web App Attack
🇬🇧 BRHosting	2022-07-14 21:16:02 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.107.202.81

🇸🇬 47.236.207.217

🇧🇷 201.17.133.138

🇺🇦 194.44.56.117

🇧🇷 189.36.133.70

🇸🇪 158.174.210.161

🇨🇳 153.0.87.0

🇫🇷 85.217.140.46

🇫🇷 85.217.140.4

🇫🇷 81.51.101.126

🇺🇦 79.143.45.75

🇦🇺 34.87.241.65

🇺🇸 20.40.254.159

🇬🇧 188.240.59.13

🇲🇽 187.192.86.212

🇺🇸 184.105.247.235

🇵🇭 124.104.142.105

🇯🇵 111.238.174.6

🇺🇸 75.175.172.91

🇨🇳 218.206.136.24