JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.46.114.255

20.46.114.255 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.46.114.255

Whois 20.46.114.255

IP Abuse Reports for 20.46.114.255:

This IP address has been reported a total of 123 times from 89 distinct sources. 20.46.114.255 was first reported on June 30th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-02 22:29:35 (5 hours ago)		Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-07-01 22:00:24 (1 day ago)	POST /xmlrpc.php [01/Jul/2026:05:16:38	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 08:04:38 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:04:31.839571 2026] [security2:error] [pid 32417:tid 32417] [client 20.46.114.255:6173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 20.46.114.255 (+1 hits since last alert)\|onlinesuretybonds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "onlinesuretybonds.com"] [uri "/xmlrpc.php"] [unique_id "akTKDzbii5wXCLqinhjYvgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 07:40:49 (1 day ago)	(wordpress) Failed wordpress login from 20.46.114.255 (JP/Japan/-)	Brute-Force
🇨🇭 backslash	2026-07-01 07:06:02 (1 day ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-01 06:56:04 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 02:56:01.423102 2026] [security2:error] [pid 10214:tid 10214] [client 20.46.114.255:6406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 20.46.114.255 (+1 hits since last alert)\|futuresgrowhere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "futuresgrowhere.com"] [uri "/xmlrpc.php"] [unique_id "akS6Ab8NdZRS6DZ_C13L4QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 KnightIndustries	2026-07-01 06:55:26 (1 day ago)	2026-07-01T08:55:24.160424+02:00 milkyway wordpress(oldscarborough.com)[1669522]: XML-RPC authentica ... show more 2026-07-01T08:55:24.160424+02:00 milkyway wordpress(oldscarborough.com)[1669522]: XML-RPC authentication failure for joshua from 20.46.114.255 2026-07-01T08:55:25.132726+02:00 milkyway wordpress(oldscarborough.com)[1669534]: XML-RPC authentication failure for joshua from 20.46.114.255 2026-07-01T08:55:26.094962+02:00 milkyway wordpress(oldscarborough.com)[1668117]: XML-RPC authentication failure for joshua from 20.46.114.255 ... show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-01 06:53:15 (1 day ago)	(xmlrpc) Failed xmlrpc access from 20.46.114.255 (JP/Japan/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 dbmwebdesign	2026-07-01 06:45:46 (1 day ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-07-01 06:24:52 (1 day ago)	20.46.114.255 - - [01/Jul/2026:09:24:51 +0300] "GET /xmlrpc.php HTTP/1.1" 403 75 "-" "Mozilla/5.0 (W ... show more 20.46.114.255 - - [01/Jul/2026:09:24:51 +0300] "GET /xmlrpc.php HTTP/1.1" 403 75 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 06:23:32 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 02:23:27.346733 2026] [security2:error] [pid 29975:tid 29975] [client 20.46.114.255:6147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 20.46.114.255 (+1 hits since last alert)\|fundaciondamashcc.org.ec\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fundaciondamashcc.org.ec"] [uri "/xmlrpc.php"] [unique_id "akSyX3Y8bXBglsrzo68t_wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-07-01 05:55:25 (1 day ago)	(wplogin_block) Blocked WP-Login Access Attempt 20.46.114.255 (-): 1 in the last 86400 secs; Ports: ... show more (wplogin_block) Blocked WP-Login Access Attempt 20.46.114.255 (-): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.46.114.255 - - [01/Jul/2026:08:55:04 +0300] "GET /wp-login.php?redirect_to=https%3A%2F%2Fftiaxtomonosou.gr%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 lenz	2026-07-01 05:51:31 (1 day ago)	Jul 1 07:51:27 hosting wordpress(grupa-ddd.pl)[1200]: XML-RPC authentication failure for admin from ... show more Jul 1 07:51:27 hosting wordpress(grupa-ddd.pl)[1200]: XML-RPC authentication failure for admin from 20.46.114.255 Jul 1 07:51:27 hosting wordpress(grupa-ddd.pl)[1203]: XML-RPC authentication failure for admin from 20.46.114.255 Jul 1 07:51:28 hosting wordpress(grupa-ddd.pl)[1204]: XML-RPC authentication failure for admin from 20.46.114.255 Jul 1 07:51:29 hosting wordpress(grupa-ddd.pl)[1202]: XML-RPC authentication failure for admin from 20.46.114.255 Jul 1 07:51:30 hosting wordpress(grupa-ddd.pl)[1201]: XML-RPC authentication failure for admin from 20.46.114.255 ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:16:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 20.46.114.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:16:52.133008 2026] [security2:error] [pid 31244:tid 31244] [client 20.46.114.255:7177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 20.46.114.255 (+1 hits since last alert)\|67ronin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "67ronin.com"] [uri "/xmlrpc.php"] [unique_id "akSixK4OerDlXdhUWjNWZQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 omc	2026-07-01 05:14:05 (1 day ago)	Unauthorized file [PP]	Bad Web Bot

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.232.5.164

🇳🇱 185.226.197.99

🇨🇦 99.247.245.53

🇬🇧 194.164.91.60

🇨🇴 181.237.76.229

🇺🇦 178.212.96.77

🇨🇳 118.249.191.163

🇮🇩 103.97.101.25

🇺🇸 88.216.73.101

🇩🇪 69.5.169.176

🇪🇨 191.99.67.138

🇻🇪 181.191.227.148

🇭🇳 181.115.59.221

🇮🇩 158.140.182.5

🇲🇴 125.31.4.70

🇳🇱 92.63.197.5

🇺🇸 77.91.118.18

🇰🇷 61.72.55.130

🇲🇽 189.203.29.245

🇲🇽 187.140.176.44