JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.151.109.130

20.151.109.130 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.151.109.130

Whois 20.151.109.130

IP Abuse Reports for 20.151.109.130:

This IP address has been reported a total of 82 times from 76 distinct sources. 20.151.109.130 was first reported on July 7th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 raph	2026-07-07 15:41:02 (3 minutes ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-07 15:36:23 (8 minutes ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇧🇪 cmbplf	2026-07-07 15:36:22 (8 minutes ago)	1.082 requests with url.path /wp-content/admin.php 554 requests with url.path config.php 478 re ... show more 1.082 requests with url.path /wp-content/admin.php 554 requests with url.path config.php 478 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php show less	Brute-Force Bad Web Bot
🇩🇪 kernel-error.de	2026-07-07 15:35:44 (8 minutes ago)	20.151.109.130 - - [07/Jul/2026:17:35:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.151.109.130 - - [07/Jul/2026:17:35:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:39 +0200] "GET /wp-includes/blocks/post-comments-form HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:40 +0200] "GET /wp-admin/js HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:40 +0200] "GET /wp-admin/css/colour.php HTTP/1.1" 404 146 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:41 +0200] "GET /wordpress/wp-admin/maint HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:42 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 146 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:42 +0200] "GET /wp-admin/css HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:42 +0200] "GET /wp-admin/css/colors/modern HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:35:43 +0200] "GET /wp-includes/blocks/details HTTP/1.1" 404 7671 "-" "-" 20.151.109.130 - - [07/Jul/2026:1 ... show less	Web App Attack
🇫🇷 Guardian	2026-07-07 15:33:47 (10 minutes ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning (x2) 20.151.109.130 [07/Jul/2026:15:33:46] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.151.109.130 [07/Jul/2026:15:33:46] "GET /this_is_a_new_hello_world.php HTTP/1.1" 20.151.109.130 [07/Jul/2026:15:33:47] "GET /admin.php HTTP/1.1" show less	Port Scan Web App Attack
🇨🇦 polycoda	2026-07-07 15:33:28 (10 minutes ago)	🔥 VERY AGGRESSIVE SCANNER probed over 300 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇩🇪 Ba-Yu	2026-07-07 15:32:47 (11 minutes ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-07-07 15:32:28 (11 minutes ago)	20.151.109.130 - - [07/Jul/2026:17:30:01 +0200] "GET /.well-known/about.php HTTP/1.1" 404 625 "-" "- ... show more 20.151.109.130 - - [07/Jul/2026:17:30:01 +0200] "GET /.well-known/about.php HTTP/1.1" 404 625 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:11 +0200] "GET ///admin.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:11 +0200] "GET /blurbs.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:12 +0200] "GET /bajah.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:12 +0200] "GET //a.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:12 +0200] "GET /edit.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:13 +0200] "GET //hosty.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:17:32:13 +0200] "GET /k.php HTTP/1.1" 404 491 "-" "-" 20.151.109.130 - - [07/Jul/2026:1 ... show less	DDoS Attack
Anonymous	2026-07-07 15:30:13 (14 minutes ago)	Fail2Ban repeated offender detected	Brute-Force
🇫🇷 Quarks Solutions	2026-07-07 15:29:18 (15 minutes ago)	crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 i-turnradio.nl	2026-07-07 15:29:10 (15 minutes ago)	2026-07-07 @ 17:29:10 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-07 @ 17:29:10 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇳🇱 wlt-blocker	2026-07-07 15:26:32 (17 minutes ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 conseilgouz	2026-07-07 15:26:21 (18 minutes ago)	ave-7 : Trying access unauthorized files/dir=>/wp-content/plugins/hellopress/wp_filemanager.php	Hacking
🇧🇷 dominioz	2026-07-07 15:23:59 (20 minutes ago)	2026-07-07 15:23:28 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.151.109.130 HTTP/1. ... show more 2026-07-07 15:23:28 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.151.109.130 HTTP/1.1 - - 404 1440 2026-07-07 15:23:28 GET /this_is_a_new_hello_world.php - - 20.151.109.130 HTTP/1.1 - - 404 1440 2026-07-07 15:23:28 GET /admin.php - - 20.151.109.130 HTTP/1.1 - - 404 1440 2026-07-07 15:23:28 GET /x.php - - 20.151.109.130 HTTP/1.1 - - 404 1440 ... show less	Web App Attack
Anonymous	2026-07-07 15:22:17 (22 minutes ago)	Fail2Ban nginx-botsearch on Security-Instance. Persistent malicious activity detected. Evidence: /va ... show more Fail2Ban nginx-botsearch on Security-Instance. Persistent malicious activity detected. Evidence: /var/log/nginx/access.log:20.151.109.130 - - [07/Jul/2026:17:22:16 +0200] "GET //cgi-bin/admin.php HTTP/1.1" 404 27 "-" "-" "-" /var/log/nginx/access.log:20.151.109.130 - - [07/Jul/2026:17:22:16 +0200] "GET //wp-content/BypassBest.php HTTP/1.1" 301 162 "-" "-" "-" /var/log/nginx/access.log:20.151.109.130 - - [07/Jul/2026:17:22:16 +0200] "GET //wp-content/BypassBest.php HTTP/1.1" 404 27 "-" "-" "-" /var/log/nginx/access.log:20.151.109.130 - - [07/Jul/2026:17:22:17 +0200] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" "-" /var/log/nginx/access.log:20.151.109.130 - - [07/Jul/2026:17:22:17 +0200] "GET /wp-content/ HTTP/1.1" 404 153 "-" "-" "-" show less	Bad Web Bot

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.190.35.163

🇨🇳 124.222.24.202

🇳🇱 45.148.10.152

🇩🇪 2a01:4f8:1c19:a57f::1

🇮🇳 122.168.123.73

🇨🇳 58.220.39.200

🇶🇦 20.173.116.24

🇧🇷 4.228.96.99

🇯🇵 203.25.124.98

🇺🇸 185.223.152.145

🇬🇧 185.216.145.184

🇮🇳 183.82.111.224

🇺🇸 162.216.150.123

🇲🇦 154.146.240.123

🇷🇴 80.94.92.55

🇺🇸 49.51.36.179

🇸🇬 47.84.198.76

🇮🇳 27.60.50.134

🇭🇰 23.249.28.115

🇰🇷 218.146.45.68