JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.148.251

20.220.148.251 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.148.251

Whois 20.220.148.251

IP Abuse Reports for 20.220.148.251:

This IP address has been reported a total of 219 times from 191 distinct sources. 20.220.148.251 was first reported on June 27th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 djboddington	2026-06-27 13:57:10 (2 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇳🇱 vaddilyin	2026-06-27 13:50:34 (9 minutes ago)	{"ClientAddr":"20.220.148.251:2032","ClientHost":"20.220.148.251","ClientPort":"2032","ClientUsernam ... show more {"ClientAddr":"20.220.148.251:2032","ClientHost":"20.220.148.251","ClientPort":"2032","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":46318,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":46318,"RequestAddr":"data.vdkln.com","RequestContentSize":0,"RequestCount":281869,"RequestHost":"data.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-27T13:50:33.180915858Z","StartUTC":"2026-06-27T13:50:33.180915858Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-27T13:50:33Z"} {"ClientAddr":"20.220.148.251:2032","ClientHost":"20.220.148.251","ClientPort":"2032","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":47243,"GzipRatio":0,"OriginContentSize":0,"OriginDurati ... show less	Web App Attack
🇩🇪 macrob	2026-06-27 13:50:31 (9 minutes ago)	2026/06/27 13:50:28 [error] 106158#106158: 334266841 access forbidden by rule, client: 20.220.148.2 ... show more 2026/06/27 13:50:28 [error] 106158#106158: 334266841 access forbidden by rule, client: 20.220.148.251, server: finami.mx, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "finami.mx" 2026/06/27 13:50:29 [error] 106156#106156: 334267513 access forbidden by rule, client: 20.220.148.251, server: finami.mx, request: "GET /wp-includes/sodium_compat/ HTTP/2.0", host: "finami.mx" 2026/06/27 13:50:29 [error] 106156#106156: 334267519 access forbidden by rule, client: 20.220.148.251, server: finami.mx, request: "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/2.0", host: "finami.mx" ... show less	Web App Attack
🇫🇷 Lacrimosa99	2026-06-27 13:49:55 (9 minutes ago)	20.220.148.251 - - [27/Jun/2026:15:49:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.148.251 - - [27/Jun/2026:15:49:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6309 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:49:42 +0200] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 404 363 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:49:55 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 363 "-" "-" ... show less	Web Spam
🇩🇪 Nightreaver	2026-06-27 13:46:13 (13 minutes ago)	20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /scxy.php HTTP/1.1" 404 440 "-" "-" 20.220.148. ... show more 20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /scxy.php HTTP/1.1" 404 440 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /FWAZ.php HTTP/1.1" 404 440 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /wp-menhu.php?p= HTTP/1.1" 404 440 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /blurbs.php HTTP/1.1" 404 440 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:46:12 0200] "GET /ati.php?p= HTTP/1.1" 404 440 "-" "-"[...] show less	Bad Web Bot Web App Attack
🇫🇷 Delta-shop	2026-06-27 13:43:04 (16 minutes ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
Anonymous	2026-06-27 13:42:43 (16 minutes ago)	20.220.148.251 - - [27/Jun/2026:15:42:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.148.251 - - [27/Jun/2026:15:42:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:32 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:32 +0200] "GET /x.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:32 +0200] "GET /by.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:33 +0200] "GET /cxs.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:33 +0200] "GET /coffexium.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:34 +0200] "GET /asdf.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:34 +0200] "GET /red.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:35 +0200] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 404 61019 "-" "-" 20.220.148.251 - - [27/Jun/2026:15:42:36 +0200] "GET /footer.php HTTP/1.1" 404 61019 "-" ... show less	Web App Attack
🇺🇸 jcbriar	2026-06-27 13:40:25 (19 minutes ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-06-27 13:38:39 (21 minutes ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇰 swrlly	2026-06-27 13:37:12 (22 minutes ago)	1 unauthorized webserver connection	Web App Attack
🇦🇺 nzhost.co.nz	2026-06-27 13:31:55 (27 minutes ago)	$f2bV_matches	Hacking Brute-Force
🇫🇮 JimArchon72	2026-06-27 13:25:01 (34 minutes ago)	2026/06/27 13:24:54 "GET /wp-admin/js/index.php HTTP/1.1"	Web App Attack
🇮🇪 AutosOnShow	2026-06-27 13:23:05 (36 minutes ago)	blocked for webapp attack \| path requested: /wp-admin/css/colour.php \| seen at 2026-06-27 13:22:54.3 ... show more blocked for webapp attack \| path requested: /wp-admin/css/colour.php \| seen at 2026-06-27 13:22:54.389 \| show less	Web App Attack
🇫🇷 masterguru	2026-06-27 13:20:15 (39 minutes ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-135)	Hacking Web App Attack
Anonymous	2026-06-27 13:19:56 (39 minutes ago)	T: f2b 404 5x	Web App Attack

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.165.133.69

🇫🇷 172.71.134.92

🇹🇷 149.34.216.132

🇺🇸 147.185.132.187

🇺🇸 103.203.57.18

🇱🇻 81.30.98.144

🇳🇱 45.148.10.240

🇬🇪 2.57.217.229

🇺🇸 209.50.162.115

🇺🇿 195.158.26.59

🇨🇳 175.178.202.165

🇸🇬 172.253.236.212

🇫🇮 146.19.140.226

🇹🇼 111.70.9.87

🇫🇷 89.92.90.248

🇫🇷 85.217.140.31

🇳🇱 45.153.34.71

🇵🇰 27.96.92.231

🇩🇪 3.70.166.60

🇺🇸 216.25.89.144