JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.215.52.168

20.215.52.168 was found in our database!

This IP was reported 954 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.215.52.168

Whois 20.215.52.168

IP Abuse Reports for 20.215.52.168:

This IP address has been reported a total of 954 times from 524 distinct sources. 20.215.52.168 was first reported on September 25th 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-09-30 18:19:39 (6 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 Viveronese	2026-09-30 17:57:52 (28 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇦🇹 penguin-solutions.at	2026-09-30 17:55:30 (30 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇮🇪 Coolnagour	2026-09-30 17:41:45 (44 minutes ago)	http-probing: /this_is_a_new_hello_world.php	Web App Attack
🇩🇪 FeG Deutschland	2026-09-30 17:32:43 (53 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇩🇪 svr	2026-09-30 17:29:39 (56 minutes ago)	Abusive Automated Web Scanner	Web App Attack
Anonymous	2026-09-30 17:04:19 (1 hour ago)		DNS Compromise DDoS Attack
🇩🇰 SaltySoftworks	2026-09-30 16:42:40 (1 hour ago)	User agent spoofing Page: /wp-content/plugins/hellopress/wp_filemanager.php	Spoofing Brute-Force Web App Attack Hacking
🇩🇰 ScamAware	2026-09-30 16:42:23 (1 hour ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 195. Unique request paths counted internally: 195. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇺🇸 FreeMyIP	2026-09-30 16:37:04 (1 hour ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇧🇷 Host One	2026-09-30 16:15:27 (2 hours ago)	Web vulnerability scanning: automated requests without User-Agent. Blocked by firewall on 5 differen ... show more Web vulnerability scanning: automated requests without User-Agent. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /8573.php, /nox.php, /test.php/wp-content/uploads/wp_live_chat/abruzi.php, /wb.php, /wp-admin/classwithtostring.php. Automated report. show less	Bad Web Bot Web App Attack
🇫🇷 guillaume illien	2026-09-30 16:06:08 (2 hours ago)	20.215.52.168 - - [30/Sep/2026:16:06:06 +0000] "GET /new4.php HTTP/1.1" 301 178 "-" "-" 20.215.52.16 ... show more 20.215.52.168 - - [30/Sep/2026:16:06:06 +0000] "GET /new4.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /aa.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /jk.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /gcqoa.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /plugin-editor.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /plugin-install.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:16:06:07 +0000] "GET /profile.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇫🇷 guillaume illien	2026-09-30 15:46:05 (2 hours ago)	20.215.52.168 - - [30/Sep/2026:15:36:04 +0000] "GET /wp-admin/network/users.php HTTP/1.1" 301 178 "- ... show more 20.215.52.168 - - [30/Sep/2026:15:36:04 +0000] "GET /wp-admin/network/users.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:36:04 +0000] "GET /ws66.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:46:03 +0000] "GET /wp-admin/network/edit.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:46:04 +0000] "GET /ws82.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:46:04 +0000] "GET /new.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:46:04 +0000] "GET /press.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:46:04 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇫🇷 guillaume illien	2026-09-30 15:25:58 (3 hours ago)	20.215.52.168 - - [30/Sep/2026:15:25:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.215.52.168 - - [30/Sep/2026:15:25:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:56 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:56 +0000] "GET /ccs.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:57 +0000] "GET /set.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:57 +0000] "GET /mode.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:57 +0000] "GET /ok.php HTTP/1.1" 301 178 "-" "-" 20.215.52.168 - - [30/Sep/2026:15:25:58 +0000] "GET /zoo.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇦🇺 2000cn.com.au	2026-09-30 15:09:27 (3 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 954 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇺🇸 170.106.67.167

🇵🇰 163.128.9.99

🇬🇦 154.119.210.100

🇵🇰 153.117.70.174

🇺🇸 143.14.6.111

🇩🇪 94.26.106.199

🇷🇺 77.91.65.79

🇵🇰 36.255.33.139

🇷🇴 2.57.121.112

🇺🇸 165.154.162.74

🇦🇹 86.59.84.55

🇵🇱 77.91.122.13

🇳🇱 45.148.10.141

🇵🇱 2a02:26f0:3780:18::5f65:74df

🇨🇳 223.78.122.108

🇩🇪 223.29.254.69

🇵🇱 193.8.187.15

🇺🇸 136.144.35.155

🇩🇪 104.248.132.98