JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.70.128.253

20.70.128.253

Neutral Activity

27 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇦🇺 Australia

City

Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.70.128.253 has been reported 27 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.70.128.253:

This IP address has been reported a total of 27 times from 21 distinct sources. 20.70.128.253 was first reported on June 22nd 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2022-07-14 01:15:36 (4 years ago)	doe-Security key failure	Hacking
Anonymous	2022-07-13 23:28:36 (4 years ago)	chaangnoifulda.de 20.70.128.253 [14/Jul/2022:05:28:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "- ... show more chaangnoifulda.de 20.70.128.253 [14/Jul/2022:05:28:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" chaangnoifulda.de 20.70.128.253 [14/Jul/2022:05:28:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Web App Attack
🇮🇱 Dolphi	2022-07-13 22:30:04 (4 years ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
Anonymous	2022-07-13 16:42:07 (4 years ago)	20.70.128.253 - - [13/Jul/2022:22:42:05 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 20.70.128.253 - - [13/Jul/2022:22:42:05 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.70.128.253 - - [13/Jul/2022:22:42:06 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.70.128.253 - - [13/Jul/2022:22:42:06 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.70.128.253 - - [13/Jul/2022:22:42:06 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.70.128.253 - - [13/Jul/2022:22:42:06 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack
🇪🇸 eliecer lario rivera	2022-07-13 15:45:20 (4 years ago)	(wordpress) Failed wordpress login from 20.70.128.253 (AU/Australia/-)	Brute-Force
🇬🇧 findlab	2022-07-13 10:15:09 (4 years ago)	Backdrop CMS module - Request: //wp-includes/wlwmanifest.xml	Bad Web Bot Web App Attack
🇩🇪 nextweb	2022-06-26 22:02:29 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.70.128.253 (AU/Australia/New South Wales/Syd ... show more (mod_security) mod_security (id:210410) triggered by 20.70.128.253 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇬🇧 BRHosting	2022-06-26 22:02:01 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇩🇪 ps-center	2022-06-26 17:25:05 (4 years ago)	ENG: Web Attack GET //wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 www.blocklist.de	2022-06-26 13:43:14 (4 years ago)	[2022-06-26T17:25:05+00:00] Detected: 20.70.128.253 ENG: Web Attack: GET //wp-includes/wlwmanifest.x ... show more [2022-06-26T17:25:05+00:00] Detected: 20.70.128.253 ENG: Web Attack: GET //wp-includes/wlwmanifest.xml [2022-06-24T02:34:47+00:00] Detected: 20.70.128.253 Sxxxxxxx: Web Attack: GET //wp-includes/wlwmanifest.xml [2022-06-23T22:55:40+00:00] Detected: 20.70.128.253 ENG: Web Attack: GET //wp-includes/wlwmanifest.xml ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=20.70.128.253 show less	Web Spam Blog Spam
🇩🇪 nextweb	2022-06-25 03:39:03 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.70.128.253 (AU/Australia/New South Wales/Syd ... show more (mod_security) mod_security (id:210410) triggered by 20.70.128.253 (AU/Australia/New South Wales/Sydney/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 ChamberofCommerce.com	2022-06-24 01:09:02 (4 years ago)	Unauthorized Bot Spam - Based on Confidence Score of:96 - Per Minute Requests:36	Bad Web Bot
🇩🇪 ps-center	2022-06-23 22:55:40 (4 years ago)	ENG: Web Attack GET //wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 ps-center	2022-06-23 22:34:47 (4 years ago)	SS1: Web Attack GET //wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2022-06-23 17:18:01 (4 years ago)	[Thu Jun 23 23:17:58.892192 2022] [fcgid:warn] [pid 32565:tid 140631473100544] [client 20.70.128.253 ... show more [Thu Jun 23 23:17:58.892192 2022] [fcgid:warn] [pid 32565:tid 140631473100544] [client 20.70.128.253:53978] mod_fcgid: stderr: WP User : chasevandyke authentication failure \| IP : 20.70.128.253 \| URL https://www.tapastearo.com/wp-admin/ [Thu Jun 23 23:18:00.165697 2022] [fcgid:warn] [pid 32565:tid 140630969800448] [client 20.70.128.253:55131] mod_fcgid: stderr: WP User : chasevandyke authentication failure \| IP : 20.70.128.253 \| URL https://www.tapastearo.com/wp-admin/ [Thu Jun 23 23:18:01.395024 2022] [fcgid:warn] [pid 32365:tid 140630936229632] [client 20.70.128.253:56590] mod_fcgid: stderr: WP User : chasevandyke authentication failure \| IP : 20.70.128.253 \| URL https://www.tapastearo.com/wp-admin/ ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 190.89.55.250

🇷🇺 93.94.178.8

🇹🇷 78.185.251.39

🇺🇸 66.132.172.235

🇮🇳 2409:40e3:51:f490:8000::

🇳🇵 2404:7c00:65:953:68b5:1a32:9f21:8c4a

🇸🇬 2404:6800:4003:c04::128

🇬🇧 193.163.125.143

🇺🇸 147.182.171.54

🇩🇪 118.193.59.15

🇧🇩 103.234.200.252

🇭🇰 101.32.76.220

🇫🇷 85.217.140.10

🇫🇮 80.223.200.38

🇺🇸 64.62.197.189

🇫🇷 51.38.224.114

🇹🇭 49.49.192.144

🇺🇸 35.245.158.214

🇮🇪 34.250.127.92

🇬🇧 34.39.0.64