JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.217.195.13

Recent Activity

Abuse confidence score ?

100% Critical

75 reports

62 reporters · latest 37 minutes ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.217.195.13

Export CSV

This IP address has been reported a total of 75 times from 62 distinct sources. 20.217.195.13 was first reported on October 25th 2026, and the most recent report was 37 minutes ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; Netherlands with 11 reports; United States of America with 8 reports. The most common categories in these recent reports were: Web App Attack 61 times; Brute-Force 20 times; Bad Web Bot 19 times; Hacking 11 times; Port Scan 4 times; Other 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-10-26 15:42:55 (37 minutes ago)	(y3) Failed access -byebye- from 20.217.195.13 (IL/Israel/-): (CF_ENABLE)	Hacking
🇩🇰 donkzquixote	2026-10-26 15:06:25 (1 hour ago)	Scan for exploitable WordPress files/information, or other brute force attempts.	Web App Attack Brute-Force
🇮🇹 madaello	2026-10-26 14:13:52 (2 hours ago)	20.217.195.13 - - [26/Oct/2026:15:13:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.217.195.13 - - [26/Oct/2026:15:13:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4452 "-" "-" 20.217.195.13 - - [26/Oct/2026:15:13:51 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 212 "-" "-" 20.217.195.13 - - [26/Oct/2026:15:13:51 +0100] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 212 "-" "-" 20.217.195.13 - - [26/Oct/2026:15:13:51 +0100] "GET /radio.php HTTP/1.1" 404 212 "-" "-" 20.217.195.13 - - [26/Oct/2026:15:13:52 +0100] "GET /BDKR28WP.php HTTP/1.1" 404 212 "-" "-" ... show less	Port Scan
Anonymous	2026-10-26 13:18:46 (3 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 Epimetheus	2026-10-26 12:57:01 (3 hours ago)	Unauthorized access attempts: [GET] /vkdxmuds.php [GET] /wp-link-poer.php [GET] /MH.php [GET] /ma2. ... show more Unauthorized access attempts: [GET] /vkdxmuds.php [GET] /wp-link-poer.php [GET] /MH.php [GET] /ma2.php [GET] /wp-proxy.php [GET] /wp-admin/css/admin.php [GET] /c.php [GET] /5PJcpMFsD8B.php [GET] /analate.php [GET] /wp-admin/css/colors/midnight/about.php [GET] /wp-content/index.php [GET] /myglu20.php [GET] /wp-m.php [GET] /indo.php [GET] /lib.php [GET] /huya.php [GET] /functions.php [GET] /zr.php [GET] /geforce.php [GET] /xBrain.php [GET] /admin.php [GET] /fling.php [GET] /buy.php [GET] /goods.php [GET] /images.php [GET] /wp.php [GET] /wp-defender.php [GET] /wp-admin/images/admin.php [GET] /wsd.php [GET] //aa.php [GET] /xwpg.php [GET] /chosen.php [GET] /sallu.php [GET] /Component.php [GET] /k.php [GET] /adminfuns.php [GET] /hh.php [GET] /ana.php [GET] /wp-filemanager1.php [GET] /bro.php [GET] /f35.php [GET] /date.php [GET] /lanbai.php [GET] /file-B-G.php [GET] /ano.php [GET] /opsh.php [GET] /ccc.php [GET] /3PJcpMFsD8B.php [GET] /BDKR28WP.php [GET] /wp-content/plugins/hel ...(Truncated) show less	Web App Attack
🇦🇹 penguin-solutions.at	2026-10-26 12:38:40 (3 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 Séfora Srl	2026-10-26 12:15:00 (4 hours ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack
🇧🇷 Halux	2026-10-26 12:06:44 (4 hours ago)	20.217.195.13 Probing protected path or service	Web App Attack
🇳🇱 Alt255	2026-10-26 11:12:49 (5 hours ago)	[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 20.217.195.13 - - [26/Oct/2026:12:12:23 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 76203 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:25 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 70884 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:27 +0100] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 70884 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:28 +0100] "GET /radio.php HTTP/1.1" 404 70884 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:29 +0100] "GET /BDKR28WP.php HTTP/1.1" 404 70884 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:29 +0100] "GET /ccc.php HTTP/1.1" 404 70884 "-" "-" 20.217.195.13 - - [26/Oct/2026:12:12:30 +0100] "GET /opsh.php HTTP/1.1" 404 70884 "-" "-" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-26 09:54:12 (6 hours ago)	[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.217.195.13 - - \[26/Oct/2026:10:53:29 +0100\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 52739 "-" "-" 20.217.195.13 - - \[26/Oct/2026:10:53:30 +0100\] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47420 "-" "-" 20.217.195.13 - - \[26/Oct/2026:10:53:31 +0100\] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 47420 "-" "-" 20.217.195.13 - - \[26/Oct/2026:10:53:32 +0100\] "GET /radio.php HTTP/1.1" 404 47420 "-" "-" 20.217.195.13 - - \[26/Oct/2026:10:53:33 +0100\] "GET /BDKR28WP.php HTTP/1.1" 404 47420 "-" "-" 20.217.195.13 - - \[26/Oct/2026:10:53:34 +0100\] "GET /ccc.php HTTP/1.1" 404 47420 "-" "-" groningerglash ... show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-26 08:37:30 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 AetherFox	2026-10-26 08:35:01 (7 hours ago)	AetherFox VoidGuard detected: [Mon Oct 26 08:34:53.872915 2026] [security2:error] [pid 561053:tid 56 ... show more AetherFox VoidGuard detected: [Mon Oct 26 08:34:53.872915 2026] [security2:error] [pid 561053:tid 561061] [client 20.217.195.13:1205] [client 20.217.195.13] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "28"] [id "100051"] [msg "wp-content access blocked by AetherFox VoidGuard"] [hostname "draconigen.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "at8QrWf6QC1hcC63XljsNgAAAEU"] [Mon Oct 26 08:34:56.701152 2026] [security2:error] [pid 561054:tid 561086] [client 20.217.195.13:8737] [client 20.217.195.13] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "draconigen.net"] [uri "/this_is_a_new_hello_world.php ... show less	Hacking Bad Web Bot
🇮🇹 VHosting	2026-10-26 07:20:03 (9 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-10-26 07:14:05 (9 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-10-26 07:06:55 (9 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.195.35

🇳🇱 45.148.10.157

🇰🇷 220.92.96.27

🇰🇷 211.248.197.36

🇫🇷 185.202.108.94

🇧🇩 103.109.214.194

🇿🇦 102.64.32.119

🇺🇸 50.6.200.158

🇪🇨 45.187.0.116

🇻🇪 38.64.172.83

🇫🇷 38.60.134.127

🇺🇸 20.9.21.235

🇩🇪 213.209.159.108

🇲🇽 187.141.71.166

🇫🇮 155.212.39.166

🇨🇳 111.225.148.187

🇮🇩 103.155.47.50

🇧🇬 79.124.62.230

🇫🇷 78.192.21.78

🇨🇦 45.198.224.51