JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.204.48.248

20.204.48.248 was found in our database!

This IP was reported 231 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.204.48.248

Whois 20.204.48.248

IP Abuse Reports for 20.204.48.248:

This IP address has been reported a total of 231 times from 211 distinct sources. 20.204.48.248 was first reported on July 2nd 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-03 05:16:02 (8 minutes ago)	237 attacks on PHP URLs: GET /lib.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-07-03 04:17:57 (1 hour ago)	Wordpress malicious attack:[octascan]	Web App Attack
Anonymous	2026-07-03 00:05:07 (5 hours ago)	PHP file probing detected by Fail2Ban	Web App Attack
Anonymous	2026-07-03 00:02:41 (5 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 mc4bbs	2026-07-02 23:59:31 (5 hours ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404 UA=""; GET /wp-includes/blocks/post-comments-form/ -> 404 UA=""; GET /wp-admin/js/ -> 404 UA=""; GET /wp-admin/css/colour.php -> 404 UA=""; GET /wordpress/wp-admin/maint/ -> 404 UA="" show less	Web App Attack Hacking
🇺🇸 kuroneko_omu	2026-07-02 23:59:10 (5 hours ago)	Fail2Ban <webattack> jail detected 5 attempts against 20.204.48.248.	DDoS Attack Hacking Brute-Force Web App Attack
🇩🇪 gamingkante.xyz	2026-07-02 23:54:47 (5 hours ago)	[Fri Jul 03 01:54:46.147514 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] s ... show more [Fri Jul 03 01:54:46.147514 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/this_is_a_new_hello_world.php' not found or unable to stat [Fri Jul 03 01:54:46.460227 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/blurbs.php' not found or unable to stat [Fri Jul 03 01:54:46.622987 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/bajah.php' not found or unable to stat [Fri Jul 03 01:54:46.798442 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/a.php' not found or unable to stat [Fri Jul 03 01:54:46.960814 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/edit.php' not found or unable to stat [Fri Jul 03 01:54:47.122969 2026] [php:error] [pid 381552:tid 381552] [client 20.204.48.248:20247] script '/var/www/html/web/hosty.php' not found or unable to stat ... show less	Web App Attack
🇩🇪 Holger	2026-07-02 23:47:57 (5 hours ago)	WordPress WebAttack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 23:42:04 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 20.204.48.248 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 20.204.48.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:41:56.953908 2026] [security2:error] [pid 28971:tid 28971] [client 20.204.48.248:9238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "akb3RNRyPc1wlLy1fayY-AAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-07-02 23:35:20 (5 hours ago)	Domain : lfcgroup.com Rule : config 2026-07-02 23:33:09 79.171.39.6 GET /wp-content/plugins/hellopre ... show more Domain : lfcgroup.com Rule : config 2026-07-02 23:33:09 79.171.39.6 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.204.48.248 HTTP/1.1 - - www.lfcgroup.com 404 0 2 1395 90 567 - - show less	Hacking SQL Injection
🇪🇸 Francisco Vallejo	2026-07-02 23:30:49 (5 hours ago)	[Fri Jul 03 01:30:47.946650 2026] [authz_core:error] [pid 1393523:tid 127201855739584] [client 20.20 ... show more [Fri Jul 03 01:30:47.946650 2026] [authz_core:error] [pid 1393523:tid 127201855739584] [client 20.204.48.248:33443] AH01630: client denied by server configuration: proxy:https://localhost:3000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Jul 03 01:30:48.682694 2026] [authz_core:error] [pid 1393523:tid 127201847346880] [client 20.204.48.248:33443] AH01630: client denied by server configuration: proxy:https://localhost:3000/this_is_a_new_hello_world.php [Fri Jul 03 01:30:48.957756 2026] [authz_core:error] [pid 1393523:tid 127201362048704] [client 20.204.48.248:33443] AH01630: client denied by server configuration: proxy:https://localhost:3000/blurbs.php [Fri Jul 03 01:30:49.321699 2026] [authz_core:error] [pid 1393523:tid 127201353656000] [client 20.204.48.248:33443] AH01630: client denied by server configuration: proxy:https://localhost:3000/bajah.php [Fri Jul 03 01:30:49.598883 2026] [authz_core:error] [pid 1393523:tid 127201345263296] [client 20.204.48.248:33443] AH01630: cli ... show less	Brute-Force SSH
🇩🇪 Ba-Yu	2026-07-02 23:29:08 (5 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 ReyhZhao	2026-07-02 23:27:34 (5 hours ago)	Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was ... show more Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was identified within the request arguments, triggering a security rule designed to prevent application attacks. show less	Brute-Force
Anonymous	2026-07-02 23:10:02 (6 hours ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80	Port Scan Hacking
🇬🇧 thetomtaylor.co.uk	2026-07-02 23:07:02 (6 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.82.83.119

🇧🇪 198.235.24.194

🇨🇦 192.95.10.202

🇨🇳 183.253.115.83

🇨🇳 139.170.72.128

🇺🇸 64.62.197.70

🇺🇸 64.62.197.30

🇺🇸 49.51.204.105

🇮🇪 2603:1062:0:bd::12

🇹🇼 198.235.24.51

🇺🇸 195.184.76.162

🇮🇩 140.213.202.200

🇮🇩 114.122.7.125

🇺🇸 43.173.69.147

🇧🇷 38.191.150.133

🇬🇧 35.203.211.40

🇳🇱 2603:1026:1300:4::16

🇩🇪 213.209.159.225

🇩🇪 207.154.250.9

🇳🇱 193.176.31.201