JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.151.175.120

20.151.175.120 was found in our database!

This IP was reported 601 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.151.175.120

Whois 20.151.175.120

IP Abuse Reports for 20.151.175.120:

This IP address has been reported a total of 601 times from 326 distinct sources. 20.151.175.120 was first reported on May 8th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-12 07:25:50 (3 weeks ago)	(caddyscan) Scanner path probe from 20.151.175.120 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 20.151.175.120 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:07:24:19 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:07:25:15 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:07:25:15 +0000] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:07:25:29 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:07:25:46 +0000] "GET /wp-admin/maint/maint.php HTTP/1.1" show less	Port Scan
🇮🇹 mgarofano80	2026-05-12 07:25:49 (3 weeks ago)		Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-12 07:06:46 (3 weeks ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 antlac1	2026-05-12 06:50:29 (3 weeks ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇨🇦 ISPLtd	2026-05-12 06:33:16 (3 weeks ago)	20.151.175.120 - - [12/May/2026:03:33:08 -0300] "GET /htaccess.php 20.151.175.120 - - [12/May/2026:0 ... show more 20.151.175.120 - - [12/May/2026:03:33:08 -0300] "GET /htaccess.php 20.151.175.120 - - [12/May/2026:03:33:16 -0300] "GET /uploads/autoload_classmap.php ... show less	Hacking Web App Attack
Anonymous	2026-05-12 06:15:39 (3 weeks ago)	This IP was detected by CrowdSec triggering local/abuseipdb-watchlist	Port Scan
🇵🇱 nfsec.pl	2026-05-12 06:10:20 (3 weeks ago)	20.151.175.120 - - [12/May/2026:06:10:17 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.151.175.120 - - [12/May/2026:06:10:17 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 387 "-" "-" 20.151.175.120 - - [12/May/2026:06:10:18 +0000] "GET /class-t.api.php HTTP/1.1" 403 387 "-" "-" 20.151.175.120 - - [12/May/2026:06:10:19 +0000] "GET /zwso.php HTTP/1.1" 403 387 "-" "-" 20.151.175.120 - - [12/May/2026:06:10:19 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 387 "-" "-" 20.151.175.120 - - [12/May/2026:06:10:20 +0000] "GET /class19.php HTTP/1.1" 403 387 "-" "-" ... show less	Web App Attack Exploited Host
🇫🇷 ELYAZ	2026-05-12 06:08:12 (3 weeks ago)	(y3) Failed access -byebye- from 20.151.175.120 (CA/Canada/-): (CF_ENABLE)	Hacking
🇦🇹 Pingger Shikkoken	2026-05-12 06:06:30 (3 weeks ago)	2026-05-12T06:06:30+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-12T06:06:30+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.151.175.120 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=18315 DF PROTO=TCP SPT=37984 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-12T06:06:31+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.151.175.120 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=18316 DF PROTO=TCP SPT=37984 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-12T06:06:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.151.175.120 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=18317 DF PROTO=TCP SPT=37984 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇸 Charlesiv	2026-05-12 06:01:26 (3 weeks ago)	Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /uploads/autoload_classmap.php Timestamp: 2026-05-12T06:00:31Z Ray ID: 9fa7341ad87760a9 UA: Empty string show less	Bad Web Bot
Anonymous	2026-05-12 05:52:57 (3 weeks ago)	(caddyscan) Scanner path probe from 20.151.175.120 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 20.151.175.120 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:05:50:23 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:05:51:33 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:05:51:34 +0000] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:05:52:01 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" [REDACTED] 200 2627 20.151.175.120 - - [12/May/2026:05:52:55 +0000] "GET /wp-admin/maint/maint.php HTTP/1.1" show less	Port Scan
🇫🇷 LRob.fr	2026-05-12 05:45:03 (3 weeks ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 Vianpyro	2026-05-12 05:35:49 (3 weeks ago)	Honeypot: 152 request(s) in 0 min. Paths: /wp-content/plugins/hellopress/wp_filemanager.php, /class- ... show more Honeypot: 152 request(s) in 0 min. Paths: /wp-content/plugins/hellopress/wp_filemanager.php, /class-t.api.php, /zwso.php, /wp-admin/css/colors/blue/index.php, /class19.php. Method(s): GET. ASN: 8075 (Microsoft Corporation). show less	Web App Attack Bad Web Bot Brute-Force Hacking
🇳🇱 i-turnradio.nl	2026-05-12 05:31:44 (3 weeks ago)	2026-05-12 @ 07:31:43 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-05-12 @ 07:31:43 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇬🇧 findlab	2026-05-12 05:30:02 (3 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 106 to 120 of 601 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇷 190.113.110.233

🇺🇸 165.227.21.75

🇺🇸 147.185.132.161

🇹🇭 125.27.12.122

🇩🇪 217.160.122.67

🇯🇵 210.171.212.149

🇮🇩 210.79.142.221

🇬🇧 193.163.125.254

🇯🇵 172.104.100.117

🇺🇸 147.185.132.18

🇺🇸 129.121.76.191

🇨🇳 101.96.199.69

🇸🇮 82.25.241.100

🇺🇸 66.132.172.191

🇳🇱 45.198.224.5

🇧🇷 20.226.60.108

🇬🇧 13.40.158.116

🇳🇱 5.255.122.197

🇮🇩 157.15.40.1

🇮🇩 138.252.183.27