JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.215.211.95

20.215.211.95 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.215.211.95

Whois 20.215.211.95

IP Abuse Reports for 20.215.211.95:

This IP address has been reported a total of 53 times from 48 distinct sources. 20.215.211.95 was first reported on July 26th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-07-26 16:23:11 (2 minutes ago)	[AUTORAVALT][[26/07/2026 - 13:23:11 -03:00 UTC] Attack from [Microsoft Corporation] [20.215.211.95] ... show more [AUTORAVALT][[26/07/2026 - 13:23:11 -03:00 UTC] Attack from [Microsoft Corporation] [20.215.211.95] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software ] ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-07-26 16:15:31 (10 minutes ago)	20.215.211.95 - - [26/Jul/2026:19:15:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.215.211.95 - - [26/Jul/2026:19:15:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 232 "-" "-" ... show less	Web App Attack
🇺🇸 lavnet.net	2026-07-26 16:15:29 (10 minutes ago)	20.215.211.95 - - [26/Jul/2026:16:15:28 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.215.211.95 - - [26/Jul/2026:16:15:28 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2066 "-" "-" 20.215.211.95 - - [26/Jul/2026:16:15:28 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 2031 "-" "-" 20.215.211.95 - - [26/Jul/2026:16:15:28 +0000] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 404 2028 "-" "-" 20.215.211.95 - - [26/Jul/2026:16:15:28 +0000] "GET /000.php HTTP/1.1" 403 2031 "-" "-" 20.215.211.95 - - [26/Jul/2026:16:15:29 +0000] "GET /tx79.php HTTP/1.1" 403 2031 "-" "-" 20.215.211.95 - - [26/Jul/2026:16:15:29 +0000] "GET /znuab.php HTTP/1.1" 403 2031 "-" "-" ... show less	Brute-Force
🇦🇹 penguin-solutions.at	2026-07-26 16:14:22 (11 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 raph	2026-07-26 16:10:54 (14 minutes ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-07-26 16:07:01 (18 minutes ago)	Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php ... show more Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php \| /000.php \| /public/mI35rZhMg1zJ1vuXdefault.php \| /tx79.php \| /this_is_a_new_hello_world.php \| /htrpu.php \| /wp-content/plugins/hellopress/wp_filemanager.php \| /znuab.php \| /sv.php \| /sboov.php \| /edit-tags.php \| /zone.php \| /wyzer1.php \| /bootstrap.php \| /wp-class.php \| /2x.php \| /menu.php \| /ws85.php \| /zc-954.php \| /584062352875874akp.php \| /60856e3a4findex.php. UTC: 2026-07-26 15:34:42. show less	Web App Attack
🇺🇸 Charlesiv	2026-07-26 16:00:14 (25 minutes ago)	Triggered Cloudflare WAF (botFight) from PL. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from PL. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /mjq.php Timestamp: 2026-07-26T14:17:02Z Ray ID: a214068d6e0f021b UA: Empty string show less	Bad Web Bot
🇩🇪 yvoictra	2026-07-26 15:57:38 (28 minutes ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing	Web App Attack
🇩🇪 Skyrider	2026-07-26 15:54:35 (31 minutes ago)	crowdsecurity/http-crawl-non_statics	Bad Web Bot
🇫🇷 masterguru	2026-07-26 15:54:26 (31 minutes ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.215.211.95 (PL/Poland/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.215.211.95 (PL/Poland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇮🇩 Burayot	2026-07-26 15:51:59 (33 minutes ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.215.211.95 (PL/Poland/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.215.211.95 (PL/Poland/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-26 15:46:44 (38 minutes ago)	20.215.211.95 - - [26/Jul/2026:17:46:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.215.211.95 - - [26/Jul/2026:17:46:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:40 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:40 +0200] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /000.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /tx79.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /znuab.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /htrpu.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /zone.php HTTP/1.1" 404 164 "-" "-" 20.215.211.95 - - [26/Jul/2026:17:46:41 +0200] "GET /sboov.php HTTP/1.1" 404 164 ... show less	Bad Web Bot Web App Attack
🇩🇪 on-com	2026-07-26 15:46:31 (39 minutes ago)	URL scan	Brute-Force Web App Attack
🇧🇪 Saec	2026-07-26 15:44:01 (41 minutes ago)	Jarvis auto-ban: CF top attacker on saec.me (48 hits, PL)	Port Scan Web App Attack
🇧🇾 lns.bz	2026-07-26 15:38:36 (47 minutes ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.205.34.19

🇩🇪 213.209.159.241

🇷🇴 193.32.162.27

🇩🇪 185.107.55.190

🇩🇪 77.22.70.198

🇭🇰 223.197.178.95

🇺🇸 74.125.224.70

🇺🇸 52.240.168.192

🇸🇬 47.79.206.61

🇳🇱 45.148.10.240

🇺🇸 13.219.37.54

🇱🇻 196.196.53.137

🇺🇸 107.175.17.24

🇪🇸 196.245.52.130

🇲🇽 187.174.238.116

🇺🇸 165.154.173.9

🇮🇳 122.167.115.76

🇳🇱 85.11.167.175

🇸🇬 47.79.205.209

🇮🇳 203.192.232.180