JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.249.12.60

20.249.12.60

Neutral Activity

34 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.249.12.60 has been reported 34 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.249.12.60:

This IP address has been reported a total of 34 times from 25 distinct sources. 20.249.12.60 was first reported on July 6th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-07-13 00:18:40 (4 years ago)	chaangnoifulda.de 20.249.12.60 [07/Jul/2022:03:34:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" ... show more chaangnoifulda.de 20.249.12.60 [07/Jul/2022:03:34:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" chaangnoifulda.de 20.249.12.60 [07/Jul/2022:03:34:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇺🇸 tradenet	2022-07-10 19:50:16 (4 years ago)	20.249.12.60 - - [10/Jul/2022:18:50:03 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 ... show more 20.249.12.60 - - [10/Jul/2022:18:50:03 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [10/Jul/2022:18:50:04 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [10/Jul/2022:18:50:05 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [10/Jul/2022:18:50:07 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [10/Jul/2022:18:50:08 -0500] "POST //xmlrpc.php HTTP/2.0" 200 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0 ... show less	Bad Web Bot Web App Attack
🇮🇱 Dolphi	2022-07-10 19:00:03 (4 years ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇯🇵 koji	2022-07-09 18:51:53 (4 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 Federalist	2022-07-09 09:54:46 (4 years ago)	4 failed login attempts (2 lockout(s)) from IP 20.249.12.60 Last user attempted: autocrat IP was b ... show more 4 failed login attempts (2 lockout(s)) from IP 20.249.12.60 Last user attempted: autocrat IP was blocked for 100 hours show less	Web Spam Hacking Web App Attack
🇦🇺 HJ5Ss4Ju	2022-07-09 09:43:12 (4 years ago)	Blocked by Wordfence (SID 5)	Web App Attack
🇧🇷 AC - Team	2022-07-08 23:05:17 (4 years ago)	20.249.12.60 - - [09/Jul/2022:00:05:14 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 500 749 " ... show more 20.249.12.60 - - [09/Jul/2022:00:05:14 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 500 749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Exploited Host Web App Attack
🇸🇬 pusathosting.com	2022-07-08 20:40:06 (4 years ago)	can 20.249.12.60 [09/Jul/2022:07:36:33 "-" "POST //xmlrpc.php 200 609 20.249.12.60 [09/Jul/2022:07:3 ... show more can 20.249.12.60 [09/Jul/2022:07:36:33 "-" "POST //xmlrpc.php 200 609 20.249.12.60 [09/Jul/2022:07:36:33 "-" "POST //xmlrpc.php 200 609 20.249.12.60 [09/Jul/2022:07:36:33 "-" "POST //xmlrpc.php 403 402 show less	Brute-Force Web App Attack
🇩🇪 nextweb	2022-07-08 20:37:58 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.249.12.60 (KR/South Korea/Seoul/Seoul/-/[AS8 ... show more (mod_security) mod_security (id:210410) triggered by 20.249.12.60 (KR/South Korea/Seoul/Seoul/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2022-07-08 20:03:34 (4 years ago)	20.249.12.60 - - [09/Jul/2022:02:03:32 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10 ... show more 20.249.12.60 - - [09/Jul/2022:02:03:32 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [09/Jul/2022:02:03:32 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [09/Jul/2022:02:03:32 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [09/Jul/2022:02:03:33 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.249.12.60 - - [09/Jul/2022:02:03:33 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	Web App Attack
🇩🇪 conseilgouz	2022-07-08 19:45:09 (4 years ago)	doe-Security key failure	Hacking
🇩🇪 maxxsense	2022-07-08 19:30:58 (4 years ago)	(wordpress) Failed wordpress login from 20.249.12.60 (KR/South Korea/-)	Brute-Force
🇩🇪 rh24	2022-07-07 22:42:33 (4 years ago)	(wordpress) Failed wordpress login from 20.249.12.60 (KR/South Korea/-): (CF_ENABLE)	Brute-Force
🇬🇧 BRHosting	2022-07-07 22:35:02 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇨🇭 zynex	2022-07-07 22:25:26 (4 years ago)	URL Probing: /wp-includes/wlwmanifest.xml	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 188.166.122.89

🇮🇩 103.95.40.58

🇲🇽 187.141.71.166

🇨🇴 186.180.130.170

🇺🇸 167.99.157.3

🇵🇱 95.214.53.157

🇨🇱 34.176.249.14

🇸🇬 20.184.59.236

🇰🇷 211.251.245.88

🇳🇱 204.76.203.50

🇿🇦 172.209.217.209

🇧🇷 148.227.91.210

🇨🇳 114.241.210.242

🇧🇬 109.160.32.19

🇺🇸 34.186.253.156

🇮🇹 34.17.196.32

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇲🇦 196.74.129.26

🇩🇪 185.30.32.176

🇮🇳 122.187.230.68