20.235.85.128

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
72 reports
54 reporters · latest 6 days ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇮🇳 India
City
Pune, Maharashtra
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
72 from 54 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 17 🇩🇪 Germany 15 🇫🇷 France 7
Most common categories Web App Attack 47 Brute-Force 29 Bad Web Bot 14 Hacking 10 Port Scan 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T05:48:31.000Z.
Web App Attack
🇩🇪 rh24
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 20.235.85.128 (IN/India/-)
Hacking
🇩🇪 thesimonmanuel
20.235.85.128 - - [07/Nov/2026:22:42:57 +0530] "GET //wp-includes/ID3/license.txt HTTP/1.1" 200 1396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host Web App Attack
🇫🇷 Omar Martínez
20.235.85.128 - - [07/Nov/2026:10:42:29 -0600] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ...
Phishing Email Spam Blog Spam
🇬🇧 NotCool
(XMLRPC) WP XMLPRC Attack 20.235.85.128 (IN/India/-): 50 in the last 3600 secs
Web App Attack
🇦🇺 screwlooseit.com.au
Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET //wp-includes/ID3/license.txt HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //feed/ HTTP/1.1
Hacking Web App Attack
🇩🇪 konseptit
(wordpress) Failed wordpress login from 20.235.85.128 (IN/India/-)
Brute-Force
🇩🇪 dbmwebdesign
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force Web App Attack
🇺🇸 bigwavedave
Wordpress Attack
Web App Attack
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇺🇸 Major Hostility
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.50
🇺🇸 185.191.171.15
🇺🇸 162.216.150.247
🇵🇰 153.117.14.169
🇨🇭 104.244.79.113
🇸🇬 47.82.50.188
🇺🇸 192.207.105.196
🇮🇳 168.144.122.128
🇺🇸 162.243.40.100
🇧🇩 103.41.245.87
🇩🇪 88.99.23.218
🇺🇸 66.132.224.238
🇸🇬 172.68.164.108
🇵🇱 172.64.198.151
🇺🇸 162.216.150.150
🇵🇱 162.158.102.167
feedback