This IP address has been reported a total of
141
times from
117 distinct
sources.
20.221.59.215 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 37
reports;
United States of America
with 23
reports;
France
with 22
reports.
The most common categories in these recent reports were:
Web App Attack
89
times;
Hacking
41
times;
Bad Web Bot
34
times;
Port Scan
31
times;
Brute-Force
28
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
02-10-2026:16:25:52UTC [Caddy] Suspicious web request: uri:/.env,/.env.local,/wp-config.php,/.git/HE ...
show more02-10-2026:16:25:52UTC [Caddy] Suspicious web request: uri:/.env,/.env.local,/wp-config.php,/.git/HEAD (4 requests) tcp:80
show less
Detected via HAProxyScanner at 2026-10-02 12:29:01 UTC on destination port WEB (80/443). Repeated sc ...
show moreDetected via HAProxyScanner at 2026-10-02 12:29:01 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 7 application-level events across 6 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/80 (HTTP); 7 application-level events across 6 source port(s). Sensor(s): Tanner, H0neytr4p.
show less
2026-10-02T15:21:26.519012 mail-honeypot postfix/submission/smtpd[14828]: disconnect from unknown[20 ...
show more2026-10-02T15:21:26.519012 mail-honeypot postfix/submission/smtpd[14828]: disconnect from unknown[20.221.59.215] ehlo=1 auth=0/1 quit=1 commands=2/3
...
show less
