20.52.236.250

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
33 reports
17 reporters · latest 5 years ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.52.236.250 has been reported 33 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
33 from 17 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 sigma
Web Spam Bad Web Bot Web App Attack
🇬🇧 oppidans.net
20.52.236.250 - - [30/Mar/2021:18:57:03 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 665 "-" "python-requests/2.25.1"
Port Scan Hacking Bad Web Bot
🇬🇧 sdos.es
"GET or HEAD Request with Body Content - 46"
Web App Attack
🇫🇷 security.rdmc.fr
Automatic report - Banned IP Access
Web App Attack
🇳🇱 mieg
Attempts to probe for or exploit a Drupal 7.78 site on url: /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/util/php/eval-stdin.php. Reported by the module https://www.drupal.org/project/abuseipdb.
Web App Attack
🇫🇷 security.rdmc.fr
Automatic report - Banned IP Access
Web App Attack
🇳🇱 mieg
Attempts to probe for or exploit a Drupal 7.78 site on url: /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/util/php/eval-stdin.php. Reported by the module https://www.drupal.org/project/abuseipdb.
Web App Attack
🇫🇷 Sam
20.52.236.250 - - [25/Mar/2021:01:14:40 +0100] "GET /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin HTTP/1.1" 404 424 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...
Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sam
20.52.236.250 - - [24/Mar/2021:12:31:37 +0100] "GET /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin HTTP/1.1" 404 424 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...
Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii
16 attempts against mh-modsecurity-ban on sonic
Brute-Force Web App Attack
🇳🇱 Savvii
16 attempts against mh-modsecurity-ban on twig
Brute-Force Web App Attack
🇩🇪 ViMProTech
Unauthorized connection attempt detected, IP banned.
Hacking Bad Web Bot Web App Attack
🇮🇪 RoboSOC
Drupal Core Remote Code Execution Vulnerability , PTR: PTR record not found
Hacking
🇩🇪 ps-center
MYH,DEF GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin
Bad Web Bot Web App Attack
🇳🇱 Savvii
21 attempts against mh-misbehave-ban on pluto
Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.141
🇫🇷 45.77.61.56
🇺🇸 20.65.202.19
🇦🇷 186.96.198.129
🇧🇾 178.172.246.234
🇵🇭 136.158.122.234
🇺🇸 66.132.224.15
🇬🇧 5.252.83.205
🇳🇱 193.47.62.69
🇧🇷 187.87.144.234
🇧🇷 177.137.215.192
🇺🇸 174.68.48.77
🇰🇷 125.130.102.172
🇻🇳 116.110.155.94
🇮🇳 103.231.44.170
🇭🇰 101.36.122.18
🇨🇳 36.131.210.82
🇺🇸 35.254.205.253
🇷🇺 31.173.2.182
🇳🇱 195.178.110.228
feedback