JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.254.103.161

20.254.103.161 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.254.103.161

Whois 20.254.103.161

IP Abuse Reports for 20.254.103.161:

This IP address has been reported a total of 24 times from 20 distinct sources. 20.254.103.161 was first reported on September 22nd 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-10-07 02:42:08 (3 years ago)	Open Source CMS Configuration File Requests	Hacking Brute-Force
🇧🇷 AC - Team	2022-10-07 02:03:04 (3 years ago)	20.254.103.161 - - [07/Oct/2022:03:03:04 -0300] "GET /s_e.php HTTP/1.1" 404 1611 "www.bing.com" "wp_ ... show more 20.254.103.161 - - [07/Oct/2022:03:03:04 -0300] "GET /s_e.php HTTP/1.1" 404 1611 "www.bing.com" "wp_is_mobile" ... show less	Exploited Host Web App Attack
🇩🇪 iNetWorker	2022-10-05 13:48:40 (3 years ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇦 URAN Publishing Service	2022-10-05 07:51:39 (3 years ago)	20.254.103.161 - - [05/Oct/2022:14:51:32 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 274 "-" "Mozilla/ ... show more 20.254.103.161 - - [05/Oct/2022:14:51:32 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 20.254.103.161 - - [05/Oct/2022:14:51:38 +0300] "GET /wp-login.php?wp_lang=en_US&action=lostpassword HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2022-10-05 06:23:59 (3 years ago)	20.254.103.161 - - [05/Oct/2022:13:23:55 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 279 "-" "Mozilla/ ... show more 20.254.103.161 - - [05/Oct/2022:13:23:55 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 20.254.103.161 - - [05/Oct/2022:13:23:58 +0300] "GET /wp-login.php?wp_lang=en_US&action=lostpassword HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" ... show less	Web App Attack
🇧🇪 taivas.nl	2022-10-05 00:32:11 (3 years ago)	Many_bad_calls	Web App Attack
🇪🇸 10dencehispahard SL	2022-10-04 22:20:59 (3 years ago)	Abusive use detected	Brute-Force
🇺🇸 mnsf	2022-10-04 17:03:12 (3 years ago)	Request Overload (119)	Brute-Force Web App Attack
🇧🇪 Ivo Vynckier	2022-10-04 16:11:07 (3 years ago)	Brute-force CMS attack.	Brute-Force Web App Attack
🇧🇪 taivas.nl	2022-10-04 16:02:07 (3 years ago)	Bad_requests	Bad Web Bot
🇬🇧 NetW	2022-10-03 11:22:23 (3 years ago)	Scanning for WordPress exploits.	Web App Attack
🇭🇺 DumaNet	2022-10-02 22:07:07 (3 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2022 Oct 02. 14:20:15 Source IP: 20.254 ... show more Web app attack attempts, scanning for vulnerability. Date: 2022 Oct 02. 14:20:15 Source IP: 20.254.103.161 Portion of the log(s): 20.254.103.161 - [02/Oct/2022:14:20:14 +0200] "GET /admin/controller/extension/extension/alfacgiapi HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:14 +0200] "GET /admin/controller/extension/extension/ALFA_DATA HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:13 +0200] "GET /sites/default/files/cgialfa HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:13 +0200] "GET /sites/default/files/alfacgiapi HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:13 +0200] "GET /sites/default/files/ALFA_DATA HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:13 +0200] "GET /templates/beez3/cgialfa HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:20:13 +0200] "GET /templates/beez3/ show less	Web App Attack
🇭🇺 DumaNet	2022-10-02 21:51:28 (3 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2022 Oct 02. 14:09:27 Source IP: 20.254 ... show more Web app attack attempts, scanning for vulnerability. Date: 2022 Oct 02. 14:09:27 Source IP: 20.254.103.161 Portion of the log(s): 20.254.103.161 - [02/Oct/2022:14:09:26 +0200] "GET /wp-content/export.php HTTP/1.1" 404 555 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.254.103.161 - [02/Oct/2022:14:09:26 +0200] "GET /export.php HTTP/1.1" 404 555 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.254.103.161 - [02/Oct/2022:14:09:26 +0200] "GET /media-admin.php HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:09:25 +0200] "GET /wp-signin.php?dizo&ping HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:09:25 +0200] "GET /ups.php HTTP/1.1" 404 153 "www.bing.com" "wp_is_mobile" 20.254.103.161 - [02/Oct/2022:14:09:25 +0200] "GET /beence.php HTTP/1.1" 404 555 "www.bing.com" show less	Web App Attack
🇩🇪 EIC	2022-10-02 06:32:06 (3 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.254.103.161 (GB/Unite ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.254.103.161 (GB/United Kingdom/-) show less	Port Scan
🇩🇪 OiledAmoeba	2022-09-30 09:24:18 (3 years ago)	20.254.103.161 - - [30/Sep/2022:15:22:47 +0200] "www.ruhnke.cloud" "GET /style.php HTTP/1.1" 404 134 ... show more 20.254.103.161 - - [30/Sep/2022:15:22:47 +0200] "www.ruhnke.cloud" "GET /style.php HTTP/1.1" 404 13445 "www.bing.com" "wp_is_mobile" "-" 3.656 "-" 20.254.103.161 - - [30/Sep/2022:15:22:51 +0200] "www.ruhnke.cloud" "GET /wp-admin/style.php HTTP/1.1" 404 13448 "www.bing.com" "wp_is_mobile" "-" 3.673 "-" 20.254.103.161 - - [30/Sep/2022:15:22:55 +0200] "www.ruhnke.cloud" "GET /s_e.php HTTP/1.1" 404 13446 "www.bing.com" "wp_is_mobile" "-" 3.726 "-" 20.254.103.161 - - [30/Sep/2022:15:23:00 +0200] "www.ruhnke.cloud" "GET /s_ne.php HTTP/1.1" 404 13447 "www.bing.com" "wp_is_mobile" "-" 3.708 "-" 20.254.103.161 - - [30/Sep/2022:15:24:08 +0200] "www.ruhnke.cloud" "GET /1index.php HTTP/1.1" 404 13447 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "-" 3.597 "-" 20.254.103.161 - - [30/Sep/2022:15:24:12 +0200] "www.ruhnke.cloud" "GET /radio.php HTTP/1.1" 404 13447 "www.bing.com" "wp_is_mobile" "-" 3.666 "-" 20. ... show less	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1f16:119:be00:3ccb:eb95:d96e:d17e

🇷🇸 93.87.131.248

🇬🇧 35.203.210.105

🇺🇸 2607:f8b0:4004:1002::121

🇲🇩 217.156.66.34

🇮🇳 195.250.20.75

🇨🇳 180.76.233.159

🇺🇸 162.216.149.218

🇨🇳 117.140.54.134

🇳🇱 91.92.47.81

🇳🇱 91.92.40.66

🇺🇸 45.131.195.120

🇹🇿 41.59.128.222

🇦🇺 34.129.184.194

🇷🇴 2.57.122.238

🇮🇩 210.79.142.69

🇺🇸 184.105.139.124

🇺🇸 173.46.91.216

🇧🇷 168.0.114.179

🇸🇬 118.139.164.171