JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.218.138.217

20.218.138.217 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 80%: ?

80%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.218.138.217

Whois 20.218.138.217

IP Abuse Reports for 20.218.138.217:

This IP address has been reported a total of 34 times from 21 distinct sources. 20.218.138.217 was first reported on June 27th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-07 22:31:46 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-06 22:29:22 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-04 22:30:47 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-03 22:29:38 (1 week ago)		Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-03 12:58:51 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇧🇪 cmbplf	2026-07-03 08:57:08 (1 week ago)	1.566 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇪🇸 masterguru	2026-07-03 01:05:04 (1 week ago)	(PERMBLOCK) 20.218.138.217 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs (0- ... show more (PERMBLOCK) 20.218.138.217 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs (0-122) show less	Hacking
🇪🇸 masterguru	2026-07-03 00:04:30 (1 week ago)	(wplogin) Failed WordPress login from 20.218.138.217 (DE/Germany/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 SpaceHost-Server	2026-07-02 22:29:33 (1 week ago)		Brute-Force Web App Attack
Anonymous	2026-07-02 19:23:06 (1 week ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 13:30:13 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 20.218.138.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 20.218.138.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:30:08.640981 2026] [security2:error] [pid 17530:tid 17530] [client 20.218.138.217:63574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.daisydoesoap.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.daisydoesoap.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akZn4Cukfzxzb8JAMEGjKgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 09:56:30 (1 week ago)	20.218.138.217 - - [02/Jul/2026:11:56:29 +0200] "POST //wp-login.php HTTP/1.1" 200 8264 "https://www ... show more 20.218.138.217 - - [02/Jul/2026:11:56:29 +0200] "POST //wp-login.php HTTP/1.1" 200 8264 "https://www.koffer-zu-und-los.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.218.138.217 - - [02/Jul/2026:11:56:29 +0200] "POST //wp-login.php HTTP/1.1" 200 8264 "https://www.koffer-zu-und-los.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.218.138.217 - - [02/Jul/2026:11:56:29 +0200] "POST //wp-login.php HTTP/1.1" 200 8264 "https://www.koffer-zu-und-los.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 09:41:30 (1 week ago)	20.218.138.217 - - [02/Jul/2026:11:41:27 +0200] "POST //wp-login.php HTTP/1.1" 200 15657 "https://ur ... show more 20.218.138.217 - - [02/Jul/2026:11:41:27 +0200] "POST //wp-login.php HTTP/1.1" 200 15657 "https://urs-wittemann.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.218.138.217 - - [02/Jul/2026:11:41:28 +0200] "POST //wp-login.php HTTP/1.1" 200 15657 "https://urs-wittemann.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.218.138.217 - - [02/Jul/2026:11:41:29 +0200] "POST //wp-login.php HTTP/1.1" 200 15657 "https://urs-wittemann.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 WeekendWeb	2026-07-02 08:05:14 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇳🇱 Site.eu	2026-07-02 07:24:55 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.19.17.100

🇲🇦 197.153.57.103

🇧🇷 179.184.85.167

🇪🇸 212.30.33.242

🇮🇱 199.203.94.172

🇺🇸 184.105.247.250

🇮🇩 157.15.67.253

🇵🇰 110.39.63.12

🇮🇩 103.141.234.24

🇹🇷 94.154.43.56

🇬🇧 78.110.173.168

🇺🇸 44.52.252.32

🇵🇰 43.230.92.41

🇺🇸 18.221.112.208

🇮🇷 5.237.94.201

🇺🇸 2604:a880:2:d1:0:1:51de:c001

🇰🇷 211.106.133.202

🇩🇪 194.187.176.170

🇬🇧 193.163.125.14

🇩🇪 193.124.20.232