JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.248.185.52

20.248.185.52 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.248.185.52

Whois 20.248.185.52

IP Abuse Reports for 20.248.185.52:

This IP address has been reported a total of 30 times from 14 distinct sources. 20.248.185.52 was first reported on June 7th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-06-22 07:09:27 (4 years ago)	20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [22/Jun/2022:13:09:26 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack
🇫🇷 eliecer lario rivera	2022-06-16 20:58:50 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-)	Brute-Force
🇺🇸 appuni	2022-06-16 11:41:27 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-): (CF_ENABLE)	Brute-Force
🇩🇪 nextweb	2022-06-16 11:35:23 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.248.185.52 (AU/Australia/New South Wales/Syd ... show more (mod_security) mod_security (id:210410) triggered by 20.248.185.52 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇫🇷 eliecer lario rivera	2022-06-15 19:52:53 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-)	Brute-Force
Anonymous	2022-06-15 18:24:57 (4 years ago)	20.248.185.52 - - [16/Jun/2022:00:24:49 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 20.248.185.52 - - [16/Jun/2022:00:24:49 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [16/Jun/2022:00:24:49 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [16/Jun/2022:00:24:50 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [16/Jun/2022:00:24:50 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.248.185.52 - - [16/Jun/2022:00:24:50 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack
🇬🇧 BRHosting	2022-06-15 11:35:02 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇺🇸 appuni	2022-06-15 10:31:51 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-): (CF_ENABLE)	Brute-Force
🇨🇦 mitsurugi	2022-06-15 06:48:59 (4 years ago)	WordPress xmlrpc attack.	Brute-Force Web App Attack
🇩🇪 nextweb	2022-06-13 18:02:14 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.248.185.52 (AU/Australia/New South Wales/Syd ... show more (mod_security) mod_security (id:210410) triggered by 20.248.185.52 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇫🇷 eliecer lario rivera	2022-06-13 17:20:47 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-)	Brute-Force
🇬🇧 BRHosting	2022-06-13 16:46:04 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇸🇬 pusathosting.com	2022-06-13 14:25:29 (4 years ago)	uvcm 20.248.185.52 [14/Jun/2022:01:24:58 "-" "POST //xmlrpc.php 200 5973 20.248.185.52 [14/Jun/2022: ... show more uvcm 20.248.185.52 [14/Jun/2022:01:24:58 "-" "POST //xmlrpc.php 200 5973 20.248.185.52 [14/Jun/2022:01:24:59 "-" "POST //xmlrpc.php 200 5973 20.248.185.52 [14/Jun/2022:01:24:15 "-" "POST /xmlrpc.php 500 716 show less	Brute-Force Web App Attack
🇺🇸 appuni	2022-06-13 12:25:44 (4 years ago)	(wordpress) Failed wordpress login from 20.248.185.52 (AU/Australia/-): (CF_ENABLE)	Brute-Force
Anonymous	2022-06-12 12:54:55 (4 years ago)	chaangnoifulda.de 20.248.185.52 [11/Jun/2022:09:43:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 682 "- ... show more chaangnoifulda.de 20.248.185.52 [11/Jun/2022:09:43:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 682 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" chaangnoifulda.de 20.248.185.52 [11/Jun/2022:09:43:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.31

🇰🇿 185.78.233.42

🇺🇸 65.49.1.181

🇸🇬 47.236.233.179

🇵🇭 47.80.68.74

🇻🇳 2402:800:6341:c2a:ad41:5f0d:f529:a908

🇰🇷 220.124.230.188

🇺🇸 206.189.201.7

🇱🇹 194.165.16.166

🇻🇪 190.120.254.132

🇸🇬 188.166.241.224

🇷🇺 188.43.28.193

🇦🇷 186.38.26.5

🇺🇸 174.198.200.118

🇺🇸 173.15.22.211

🇺🇸 162.216.150.183

🇮🇳 157.119.116.10

🇳🇱 152.42.143.147

🇺🇸 147.185.132.60

🇺🇸 129.153.115.59