JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.118.172.148

20.118.172.148 was found in our database!

This IP was reported 304 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.118.172.148

Whois 20.118.172.148

IP Abuse Reports for 20.118.172.148:

This IP address has been reported a total of 304 times from 251 distinct sources. 20.118.172.148 was first reported on March 4th 2022, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 CryptoYakari	2026-08-16 03:22:10 (4 minutes ago)	[Sun Aug 16 06:22:06.375613 2026] [proxy_fcgi:error] [pid 3748696:tid 3748701] [client 20.118.172.14 ... show more [Sun Aug 16 06:22:06.375613 2026] [proxy_fcgi:error] [pid 3748696:tid 3748701] [client 20.118.172.148:0] AH01071: Got error 'Primary script unknown' [Sun Aug 16 06:22:06.610914 2026] [proxy_fcgi:error] [pid 3748697:tid 3748736] [client 20.118.172.148:0] AH01071: Got error 'Primary script unknown' [Sun Aug 16 06:22:06.847509 2026] [proxy_fcgi:error] [pid 3748697:tid 3748738] [client 20.118.172.148:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
Anonymous	2026-08-16 03:19:48 (6 minutes ago)	access denied too many times (more than 12 attempts in 60 seconds) ...	Web App Attack Brute-Force
🇫🇷 guillaume illien	2026-08-16 03:07:04 (19 minutes ago)	20.118.172.148 - - [16/Aug/2026:03:06:59 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.118.172.148 - - [16/Aug/2026:03:06:59 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:01 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:02 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:02 +0000] "GET /edit.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:03 +0000] "GET /w.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:03 +0000] "GET /file.php HTTP/1.1" 301 178 "-" "-" 20.118.172.148 - - [16/Aug/2026:03:07:03 +0000] "GET /adminfuns.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 Mundo Bueno	2026-08-16 03:01:34 (25 minutes ago)	[ISILIA Protection v2.1] Tentative d'accès: /shell.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10.0 ... show more [ISILIA Protection v2.1] Tentative d'accès: /shell.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-16 03:00:28 (26 minutes ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇩🇪 SiyCah	2026-08-16 03:00:03 (26 minutes ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇳🇱 Roderic	2026-08-16 02:44:34 (42 minutes ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇺🇸 CollideTech	2026-08-16 02:42:18 (44 minutes ago)	probing for vulnerabilities	Web App Attack
🇫🇮 Daniel Baer	2026-08-16 02:40:02 (46 minutes ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-admin-interface-probing alert_id: 3940 events ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-admin-interface-probing alert_id: 3940 events: 3 created_at: 2026-08-16T02:38:50Z message: Ip 20.118.172.148 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 5.23606984s) at 2026-08-16 02:38:49.961512883 +0000 UTC target_uri: ["/admin.php","/adminfuns.php","/wp-admin"] method: ["GET"] status: ["404"] user_agent: ["-"] show less	Bad Web Bot Web App Attack
🇨🇦 arsonist	2026-08-16 02:33:05 (53 minutes ago)	This IP accessed the path /wp-content/plugins/hellopress/wp_filemanager.php, which is banned. Powere ... show more This IP accessed the path /wp-content/plugins/hellopress/wp_filemanager.php, which is banned. Powered by ListenCaddy show less	Bad Web Bot Web App Attack
🇩🇪 auridh	2026-08-16 02:28:25 (58 minutes ago)	Ip 20.118.172.148 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 7.465003177s ... show more Ip 20.118.172.148 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 7.465003177s) at 2026-08-16 00:22:02.259795533 +0000 UTC show less	Web App Attack
🇺🇸 cwytech	2026-08-16 02:27:14 (59 minutes ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
Anonymous	2026-08-16 02:24:55 (1 hour ago)	Automatically blocked after 1 security event. Observed web-shell or malicious-file probes. Source: C ... show more Automatically blocked after 1 security event. Observed web-shell or malicious-file probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇺🇸 conrad10781	2026-08-16 02:24:00 (1 hour ago)	nginx-4xx	Web App Attack
Anonymous	2026-08-16 02:19:47 (1 hour ago)	[15-Aug-2026 22:19:45 America/New_York] Page Not Found: wp_filemanager.php [20.118.172.148] [15-Aug- ... show more [15-Aug-2026 22:19:45 America/New_York] Page Not Found: wp_filemanager.php [20.118.172.148] [15-Aug-2026 22:19:46 America/New_York] Page Not Found: this_is_a_new_hello_world.php [20.118.172.148] ... show less	Brute-Force

Showing 1 to 15 of 304 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.123

🇬🇧 172.70.163.27

🇧🇷 168.90.24.68

🇨🇮 154.0.30.137

🇮🇳 223.228.237.75

🇧🇪 198.235.24.166

🇬🇧 194.50.235.145

🇳🇱 188.166.10.98

🇵🇾 186.12.184.133

🇺🇸 172.58.132.159

🇺🇸 167.71.87.14

🇺🇸 162.216.150.66

🇩🇪 130.12.180.126

🇰🇷 121.189.198.60

🇨🇳 120.85.182.227

🇮🇳 114.143.111.39

🇲🇾 47.250.132.49

🇸🇬 45.78.194.186

🇺🇸 20.65.105.233

🇺🇸 216.25.89.103