JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.151.112.53

20.151.112.53 was found in our database!

This IP was reported 183 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.151.112.53

Whois 20.151.112.53

IP Abuse Reports for 20.151.112.53:

This IP address has been reported a total of 183 times from 155 distinct sources. 20.151.112.53 was first reported on May 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 phoenix1jl96	2026-05-26 11:26:33 (1 week ago)	2026/05/26 13:26:01 [error] 2308550#2308550: 351812 open() "/home/user-data/www/default/cgi-bin/ind ... show more 2026/05/26 13:26:01 [error] 2308550#2308550: 351812 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.151.112.53, server: autodiscover.lhbiogaz.org, request: "GET //cgi-bin/index.php HTTP/1.1", host: "autodiscover.lhbiogaz.org" 2026/05/26 13:26:03 [error] 2308550#2308550: *351812 open() "/home/user-data/www/default/cgi-bin/admin.php" failed (2: No such file or directory), client: 20.151.112.53, server: autodiscover.lhbiogaz.org, request: "GET //cgi-bin/admin.php HTTP/1.1", host: "autodiscover.lhbiogaz.org" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇫🇷 andreighitan	2026-05-26 11:25:50 (1 week ago)	Webshell probe LFI Docker API probe against WordPress hosting server	Web App Attack
🇺🇸 xmission.com	2026-05-26 11:24:57 (1 week ago)	Blocked by UFW (TCP on 80) Source port: 10871 TTL: 114 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 10871 TTL: 114 Packet length: 52 TOS: 0x00 This report (for 20.151.112.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 ghostwarriors	2026-05-26 11:20:03 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇨🇭 flaus	2026-05-26 11:18:08 (1 week ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-05-26 11:16:11 (1 week ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇨🇦 polycoda	2026-05-26 11:09:32 (1 week ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ❌ Excess ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) show less	Hacking Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-05-26 11:04:24 (1 week ago)	repeated unauthorized SSL VPN connection attempts	DDoS Attack Hacking Brute-Force
🇨🇿 Countryman	2026-05-26 11:04:24 (1 week ago)	repeated unauthorized SSL VPN connection attempts	DDoS Attack Hacking Brute-Force
🇦🇺 aranguren.org	2026-05-26 11:03:24 (1 week ago)	20.151.112.53 - - [26/May/2026:21:03:22 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.151.112.53 - - [26/May/2026:21:03:22 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 989 "-" "-" 20.151.112.53 - - [26/May/2026:21:03:22 +1000] "GET /x.php HTTP/1.1" 404 16 "-" "-" 20.151.112.53 - - [26/May/2026:21:03:22 +1000] "GET /201.php HTTP/1.1" 404 16 "-" "-" 20.151.112.53 - - [26/May/2026:21:03:23 +1000] "GET /ops.php HTTP/1.1" 404 16 "-" "-" 20.151.112.53 - - [26/May/2026:21:03:23 +1000] "GET /samll.php HTTP/1.1" 404 16 "-" "-" 20.151.112.53 - - [26/May/2026:21:03:23 +1000] "GET /ingfo.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇫🇮 YF	2026-05-26 11:03:06 (1 week ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 MPL	2026-05-26 11:01:34 (1 week ago)	tcp/80 (5 or more attempts)	Port Scan
🇩🇪 kernel-error.de	2026-05-26 11:00:59 (1 week ago)	20.151.112.53 - - [26/May/2026:13:00:45 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.151.112.53 - - [26/May/2026:13:00:45 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 X25519 - 20.151.112.53 - - [26/May/2026:13:00:52 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 X25519 - 20.151.112.53 - - [26/May/2026:13:00:52 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 X25519 - 20.151.112.53 - - [26/May/2026:13:00:53 +0200] "GET /wp-admin/css/colour.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 X25519 - 20.151.112.53 - - [26/May/2026:13:00:54 +0200] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 404 43894 "-" "-" www.kernel-error.de HTTP/1.1 https 0.085 0.084 404 unix:/var/run/php-fpm.sock TLSv1.3 TLS_AES_256_GCM_SH ... show less	Web App Attack
🇺🇸 kadour	2026-05-26 10:58:19 (1 week ago)	[Tue May 26 05:58:16.621992 2026] [proxy_fcgi:error] [pid 1043924:tid 1043961] [client 20.151.112.53 ... show more [Tue May 26 05:58:16.621992 2026] [proxy_fcgi:error] [pid 1043924:tid 1043961] [client 20.151.112.53:53604] AH01071: Got error 'Primary script unknown' [Tue May 26 05:58:16.690285 2026] [proxy_fcgi:error] [pid 1043924:tid 1043969] [client 20.151.112.53:53604] AH01071: Got error 'Primary script unknown' [Tue May 26 05:58:17.370680 2026] [proxy_fcgi:error] [pid 1043924:tid 1043957] [client 20.151.112.53:53604] AH01071: Got error 'Primary script unknown' [Tue May 26 05:58:17.434363 2026] [proxy_fcgi:error] [pid 1043924:tid 1043976] [client 20.151.112.53:53604] AH01071: Got error 'Primary script unknown' [Tue May 26 05:58:17.699298 2026] [proxy_fcgi:error] [pid 1043924:tid 1043968] [client 20.151.112.53:53604] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 Lino Project	2026-05-26 10:57:07 (1 week ago)	20.151.112.53 - - [26/May/2026:12:57:02 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.151.112.53 - - [26/May/2026:12:57:02 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 115754 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 76 to 90 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.230.210.231

🇿🇦 164.151.136.50

🇨🇳 112.46.207.141

🇭🇰 103.20.223.56

🇺🇸 71.6.134.229

🇳🇱 64.89.162.55

🇺🇸 64.62.156.53

🇮🇹 31.59.89.180

🇺🇸 23.254.150.7

🇳🇱 5.255.123.222

🇺🇸 2001:470:1:332::16

🇸🇪 195.178.191.5

🇧🇷 187.85.186.129

🇩🇪 161.35.74.94

🇳🇱 160.119.69.14

🇮🇩 157.15.67.253

🇸🇬 150.109.6.173

🇻🇳 103.1.210.25

🇺🇸 65.49.20.83

🇳🇱 45.142.193.161