JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.214.252.128

20.214.252.128

Neutral Activity

18 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.214.252.128 has been reported 18 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.214.252.128:

This IP address has been reported a total of 18 times from 15 distinct sources. 20.214.252.128 was first reported on July 24th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇭 sumnone	2022-07-27 16:10:29 (4 years ago)	Wordpress vulnerability probing: Error 404. The requested page (//xmlrpc.php) was not found	Bad Web Bot Exploited Host Web App Attack
🇳🇱 CryptoYakari	2022-07-26 10:59:39 (4 years ago)	20.214.252.128 - - [26/Jul/2022:17:59:32 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 311 ... show more 20.214.252.128 - - [26/Jul/2022:17:59:32 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 3110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:17:59:32 +0300] "GET //xmlrpc.php?rsd HTTP/1.0" 404 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:17:59:34 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:17:59:34 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:17:59:34 +0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3 ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 dtorrer	2022-07-26 08:47:34 (4 years ago)	Dictionary attack on login resource.	Brute-Force
Anonymous	2022-07-26 08:45:10 (4 years ago)	[Tue Jul 26 14:42:00.529187 2022] [fcgid:warn] [pid 6237:tid 140093109040896] [client 20.214.252.128 ... show more [Tue Jul 26 14:42:00.529187 2022] [fcgid:warn] [pid 6237:tid 140093109040896] [client 20.214.252.128:58801] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.214.252.128 \| URL https://www.stefusto.com/wp-admin/ [Tue Jul 26 14:42:01.696467 2022] [fcgid:warn] [pid 6400:tid 140093204023040] [client 20.214.252.128:55115] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.214.252.128 \| URL https://www.stefusto.com/wp-admin/ [Tue Jul 26 14:42:03.228215 2022] [fcgid:warn] [pid 6237:tid 140092387596032] [client 20.214.252.128:55688] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.214.252.128 \| URL https://www.stefusto.com/wp-admin/ [Tue Jul 26 14:42:06.003949 2022] [fcgid:warn] [pid 6400:tid 140093195630336] [client 20.214.252.128:57014] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.214.252.128 \| URL https://www.stefusto.com/wp-admin/ [Tue Jul 26 14:42:07.155359 2022] [fcgid:warn] [pid 6400:tid 140091355817728] [clien ... show less	Brute-Force Web App Attack
🇱🇹 mypatricks	2022-07-26 07:47:06 (4 years ago)	20.214.252.128 \| Port: 47898 \| DNS: 20.214.252.128 2022-07-26T19:47:05+08:00 Asia/Singapore \| Unauth ... show more 20.214.252.128 \| Port: 47898 \| DNS: 20.214.252.128 2022-07-26T19:47:05+08:00 Asia/Singapore \| Unauthorized connect attempts \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: KR/South Korea/+09:00 730ce6065c19a7cf-ICN/Seoul, South Korea 1 hits/0 secs Robots 0 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇺🇸 tradenet	2022-07-26 06:20:50 (4 years ago)	20.214.252.128 - - [26/Jul/2022:05:20:43 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5. ... show more 20.214.252.128 - - [26/Jul/2022:05:20:43 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:05:20:44 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:05:20:44 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:05:20:45 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [26/Jul/2022:05:20:45 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show less	Bad Web Bot Web App Attack
🇬🇧 BRHosting	2022-07-26 05:22:05 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇩🇪 the-bot-terminator	2022-07-25 23:55:24 (4 years ago)	20.214.252.128 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, ... show more 20.214.252.128 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, brute force, exploits Repeat Offender Ban! show less	Bad Web Bot Web App Attack
🇬🇧 findlab	2022-07-25 21:15:29 (4 years ago)	Backdrop CMS module - Request: //wp-includes/wlwmanifest.xml	Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2022-07-25 09:26:07 (4 years ago)	Abusive use detected	Brute-Force
🇧🇷 AC - Team	2022-07-25 01:33:47 (4 years ago)	20.214.252.128 - - [25/Jul/2022:02:33:45 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 576 ... show more 20.214.252.128 - - [25/Jul/2022:02:33:45 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 the-bot-terminator	2022-07-24 17:19:40 (4 years ago)	20.214.252.128 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, ... show more 20.214.252.128 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, brute force, exploits Repeat Offender Ban! show less	Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2022-07-24 09:51:30 (4 years ago)	"GET /?author=2 HTTP/1.1" 404 "GET /wp-json/wp/v2/users/ HTTP/1.1" 404 "GET /wp-json/oembed/1.0/embe ... show more "GET /?author=2 HTTP/1.1" 404 "GET /wp-json/wp/v2/users/ HTTP/1.1" 404 "GET /wp-json/oembed/1.0/embed?url=http://james.[DOMAIN].info HTTP/1.1" 404 "POST /xmlrpc.php HTTP/1.1" 403 show less	Web App Attack
🇳🇱 CryptoYakari	2022-07-24 06:50:23 (4 years ago)	20.214.252.128 - - [24/Jul/2022:13:50:17 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 ... show more 20.214.252.128 - - [24/Jul/2022:13:50:17 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [24/Jul/2022:13:50:17 +0300] "GET /xmlrpc.php?rsd HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [24/Jul/2022:13:50:18 +0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [24/Jul/2022:13:50:18 +0300] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.214.252.128 - - [24/Jul/2022:13:50:18 +0300] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "- ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇻🇳 websase.com	2022-07-24 05:15:25 (4 years ago)	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 216.155.93.75

🇩🇪 150.241.77.28

🇳🇬 102.88.137.80

🇭🇺 87.229.65.144

🇬🇧 62.60.130.253

🇨🇴 38.210.184.147

🇺🇸 192.250.227.171

🇧🇷 191.252.100.25

🇦🇲 176.32.193.16

🇨🇳 139.189.115.243

🇮🇳 111.92.24.74

🇨🇦 85.217.149.74

🇹🇭 61.91.175.69

🇮🇳 14.139.220.130

🇸🇬 8.219.200.1

🇱🇹 213.176.26.186

🇦🇷 190.173.138.56

🇷🇺 91.102.219.240

🇵🇱 78.30.97.202

🇺🇸 66.132.195.42