20.235.85.128
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇮🇳 India
- City
- Pune, Maharashtra
Abuse Reports
Total reports
72 from
54 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Web App Attack Brute-Force Bad Web Bot | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T05:48:31.000Z.
|
Web App Attack | |
| 🇩🇪 rh24 |
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 20.235.85.128 (IN/India/-)
|
Hacking | |
| 🇩🇪 thesimonmanuel |
20.235.85.128 - - [07/Nov/2026:22:42:57 +0530] "GET //wp-includes/ID3/license.txt HTTP/1.1" 200 1396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host Web App Attack | |
| 🇫🇷 Omar Martínez |
20.235.85.128 - - [07/Nov/2026:10:42:29 -0600] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
|
Phishing Email Spam Blog Spam | |
| 🇬🇧 NotCool |
(XMLRPC) WP XMLPRC Attack 20.235.85.128 (IN/India/-): 50 in the last 3600 secs
|
Web App Attack | |
| 🇦🇺 screwlooseit.com.au |
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
|
Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET //wp-includes/ID3/license.txt HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //feed/ HTTP/1.1
|
Hacking Web App Attack | |
| 🇩🇪 konseptit |
(wordpress) Failed wordpress login from 20.235.85.128 (IN/India/-)
|
Brute-Force | |
| 🇩🇪 dbmwebdesign |
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force Web App Attack | |
| 🇺🇸 bigwavedave |
Wordpress Attack
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇺🇸 Major Hostility |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown