JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.215.254.185

Neutral Activity

Abuse confidence score ?

0% Low Risk

226 reports

196 reporters · latest 4 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.215.254.185 has been reported 226 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.215.254.185

This IP address has been reported a total of 226 times from 196 distinct sources. 20.215.254.185 was first reported on April 1st 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:10 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Holger	2026-04-10 04:34:58 (5 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2026-04-07 22:20:27 (5 months ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-04-04 12:06:43 (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: PL, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: PL, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-04-04 11:09:54 (5 months ago)	"GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-04-04 09:01:40 (5 months ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-04-04 05:14:17 (5 months ago)	86 attacks on PHP URLs: GET /hhxc.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2026-04-04 04:46:21 (5 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇭🇺 DumaNet	2026-04-04 03:40:00 (5 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 03. 19:10:35 Source IP: 20.215 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 03. 19:10:35 Source IP: 20.215.254.185 Portion of the log(s): 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /sid3.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /xsas.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /wp9.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /myfile.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /green.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /dass.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /8573.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /torsa1.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:32 +0200] "GET /tx78.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:19:10:31 +0200] "GET /gfd.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2026-04-04 03:17:00 (5 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 03. 18:31:32 Source IP: 20.215 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 03. 18:31:32 Source IP: 20.215.254.185 Portion of the log(s): 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /ws.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /wmore1.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /uuu.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /byypas.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /jga.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /wziar1.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /bgymj.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET /ortasekerli1.php HTTP/1.1" 404 153 "-" "-" 20.215.254.185 - [03/Apr/2026:18:31:31 +0200] "GET show less	Web App Attack
🇫🇷 Murazaki	2026-04-03 22:37:33 (5 months ago)	git.mehdibenadel.com 20.215.254.185 - - [03/Apr/2026:14:06:59 +0200] "GET /wp-content/plugins/hellop ... show more git.mehdibenadel.com 20.215.254.185 - - [03/Apr/2026:14:06:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 503 190 "-" "-" "-" ... show less	Hacking
🇪🇸 Gem	2026-04-03 22:16:11 (5 months ago)	Unauthorized web scan.	Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-03 22:00:33 (5 months ago)	Auto-ban: >3000 req/min op 2026-04-03	Web App Attack SSH Hacking
🇮🇹 [email protected]	2026-04-03 20:55:51 (5 months ago)	20.215.254.185 - - [03/Apr/2026:22:55:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.215.254.185 - - [03/Apr/2026:22:55:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 827 "-" "-" 20.215.254.185 - - [03/Apr/2026:22:55:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3993 "-" "-" ... show less	Web App Attack
🇩🇪 KiekerJan	2026-04-03 20:45:26 (5 months ago)	20.215.254.185 - - [03/Apr/2026:21:02:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.215.254.185 - - [03/Apr/2026:21:02:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.215.254.185 - - [03/Apr/2026:22:45:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.254.212.59

🇰🇷 211.253.37.225

🇮🇩 202.77.104.170

🇲🇦 196.119.150.5

🇵🇰 182.176.78.219

🇹🇹 181.118.50.16

🇨🇦 173.246.25.45

🇺🇸 162.216.150.120

🇫🇮 147.185.133.70

🇹🇭 147.50.231.135

🇰🇷 118.45.101.159

🇮🇳 106.214.8.201

🇫🇷 91.196.152.115

🇯🇵 43.130.228.73

🇺🇸 20.42.109.189

🇩🇪 213.209.159.20

🇰🇷 211.251.245.88

🇮🇩 163.7.4.109

🇺🇸 162.216.150.20

🇵🇰 153.117.33.155