JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.249.74.71

20.249.74.71

Neutral Activity

91 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.249.74.71 has been reported 91 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.249.74.71:

This IP address has been reported a total of 91 times from 47 distinct sources. 20.249.74.71 was first reported on September 22nd 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxxsense	2022-10-09 15:20:16 (3 years ago)	(wordpress) Failed wordpress login from 20.249.74.71 (KR/South Korea/-)	Brute-Force
Anonymous	2022-10-09 00:48:01 (3 years ago)	(wordpress) Failed wordpress login from 20.249.74.71 (KR/South Korea/-)	Brute-Force
Anonymous	2022-10-08 18:58:21 (3 years ago)	chaangnoifulda.de 20.249.74.71 [09/Oct/2022:00:58:19 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" ... show more chaangnoifulda.de 20.249.74.71 [09/Oct/2022:00:58:19 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" chaangnoifulda.de 20.249.74.71 [09/Oct/2022:00:58:20 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Web App Attack
🇩🇪 rh24	2022-10-08 15:02:07 (3 years ago)	(wordpress) Failed wordpress login from 20.249.74.71 (KR/South Korea/-): (CF_ENABLE)	Brute-Force
🇩🇪 F242	2022-10-08 14:05:29 (3 years ago)	Oct 8 20:05:27 mx1 wordpress(meddlstadl.de)[16970]: Authentication attempt for unknown user giria f ... show more Oct 8 20:05:27 mx1 wordpress(meddlstadl.de)[16970]: Authentication attempt for unknown user giria from 20.249.74.71 ... show less	Web App Attack
🇩🇪 F242	2022-10-08 11:35:25 (3 years ago)	Oct 8 17:35:23 mx1 wordpress(meddlstadl.de)[9604]: Authentication attempt for unknown user giria fr ... show more Oct 8 17:35:23 mx1 wordpress(meddlstadl.de)[9604]: Authentication attempt for unknown user giria from 20.249.74.71 ... show less	Web App Attack
🇩🇪 F242	2022-10-08 11:05:16 (3 years ago)	Oct 8 17:05:15 mx1 wordpress(meddlstadl.de)[14132]: XML-RPC authentication attempt for unknown user ... show more Oct 8 17:05:15 mx1 wordpress(meddlstadl.de)[14132]: XML-RPC authentication attempt for unknown user giria from 20.249.74.71 ... show less	Web App Attack
🇩🇪 sf-noh.de	2022-10-08 07:01:21 (3 years ago)	20.249.74.71 - - [08/Oct/2022:13:01:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 724 "-" "Mozilla/5.0 ... show more 20.249.74.71 - - [08/Oct/2022:13:01:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.249.74.71 - - [08/Oct/2022:13:01:19 +0200] "POST //wp-login.php HTTP/1.1" 200 16075 "https://sf-noh.de//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking
🇩🇪 nextweb	2022-10-08 02:07:23 (3 years ago)	(mod_security) mod_security (id:244600) triggered by 20.249.74.71 (KR/South Korea/Seoul/Seoul/-/[AS8 ... show more (mod_security) mod_security (id:244600) triggered by 20.249.74.71 (KR/South Korea/Seoul/Seoul/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇩🇪 nextweb	2022-10-07 23:14:31 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 20.249.74.71 (KR/South Korea/Seoul/Seoul/-/[AS8 ... show more (mod_security) mod_security (id:210492) triggered by 20.249.74.71 (KR/South Korea/Seoul/Seoul/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 zorrigas	2022-10-07 21:00:53 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 20.249.74.71 (KR/South Korea/-): 5 in the last ... show more (mod_security) mod_security (id:210492) triggered by 20.249.74.71 (KR/South Korea/-): 5 in the last 3600 secs show less	Brute-Force
🇩🇪 maxxsense	2022-10-07 15:47:34 (3 years ago)	(wordpress) Failed wordpress login from 20.249.74.71 (KR/South Korea/-)	Brute-Force
🇪🇸 10dencehispahard SL	2022-10-06 00:54:09 (3 years ago)	Abusive use detected	Brute-Force
🇩🇪 ANDREAS LYTOS	2022-10-05 17:50:54 (3 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.249.74.71 (KR/South K ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.249.74.71 (KR/South Korea/-) show less	Port Scan
🇬🇧 yvoictra	2022-10-05 17:31:38 (3 years ago)	20.249.74.71 - - [05/Oct/2022:23:31:23 +0200] "GET /.remote HTTP/1.1" 404 6946 "https://www.google.c ... show more 20.249.74.71 - - [05/Oct/2022:23:31:23 +0200] "GET /.remote HTTP/1.1" 404 6946 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.249.74.71 - - [05/Oct/2022:23:31:24 +0200] "GET /.local HTTP/1.1" 404 6944 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.249.74.71 - - [05/Oct/2022:23:31:24 +0200] "GET /.production HTTP/1.1" 404 6946 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.249.74.71 - - [05/Oct/2022:23:31:26 +0200] "POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6975 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.249.74.71 - - [05/Oct/2022:23:31:26 +0200] "POST //api/ ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.13.93.230

🇳🇱 195.178.110.30

🇨🇳 175.19.74.166

🇨🇳 113.80.96.4

🇺🇸 97.107.134.181

🇩🇪 85.239.149.72

🇱🇹 62.60.130.253

🇺🇸 54.204.71.163

🇨🇳 27.155.172.24

🇭🇰 223.17.1.118

🇳🇱 142.93.224.178

🇨🇳 123.178.210.75

🇳🇱 45.148.10.247

🇺🇸 20.29.59.46

🇭🇰 165.154.41.47

🇺🇸 159.118.143.117

🇺🇸 152.32.207.124

🇸🇬 101.47.156.170

🇺🇸 100.29.192.94

🇺🇸 73.155.8.124