AbuseIPDB » 20.245.238.242

20.245.238.242 was found in our database!

This IP was reported 529 times. Confidence of Abuse is 100%: ?

100%
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country United States of America
City San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

IP Abuse Reports for 20.245.238.242:

This IP address has been reported a total of 529 times from 99 distinct sources. 20.245.238.242 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp in UTC Comment Categories
4server
Hacking Web App Attack
rafled
post to xmlrpc
Web App Attack
SCHAPPY
Attack to wordpress xmlrpc
Web App Attack
LRob.fr
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot Web App Attack
tecnicorioja
POST /xmlrpc.php [26/Apr/2025:11:21:19
Brute-Force Web App Attack
Anonymous
SOHODE WEBEXPLOIT 20.245.238.242 (20.245.238.242)
Web App Attack
Anonymous
xmlrpc attack blocked attempt from fail2ban
...
Web App Attack
LRob.fr
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot Web App Attack
Jim Keir
2025-04-26 09:50:00 20.245.238.242 File scanning, blocking 20.245.238.242 for 5 minutes
Web App Attack
thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot Web App Attack
ingroscart.it
(wordpress) Failed wordpress login from 20.245.238.242 (US/United States/-)
Brute-Force
iNetWorker
trolling for resource vulnerabilities
Web App Attack
Rip
Failed Auth - Access Forbidden
...
Web App Attack
thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot Web App Attack

Showing 1 to 15 of 529 reports


Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs: