JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.235.120.216

Recent Activity

Abuse confidence score ?

100% Critical

917 reports

428 reporters · latest 5 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.235.120.216

Export CSV

This IP address has been reported a total of 917 times from 428 distinct sources. 20.235.120.216 was first reported on October 2nd 2026, and the most recent report was 5 hours ago. In the last 60 days, the top reporter locations were: Germany with 261 reports; United States of America with 116 reports; France with 107 reports. The most common categories in these recent reports were: Web App Attack 694 times; Brute-Force 235 times; Bad Web Bot 229 times; Hacking 202 times; Port Scan 62 times; Other 128 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 babajaga	2026-10-13 04:43:02 (5 hours ago)	Automated WordPress/vulnerability scanning against a non-PHP site: 93 probes to .php paths in 24h wi ... show more Automated WordPress/vulnerability scanning against a non-PHP site: 93 probes to .php paths in 24h with empty user-agent (carbonmeld.com). show less	Hacking Web App Attack
🇩🇪 Jochen Pretli	2026-10-12 20:43:53 (13 hours ago)	connection to honeypot	Email Spam Port Scan
🇨🇭 YF	2026-10-12 15:30:38 (18 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇪🇸 Francisco Vallejo	2026-10-12 14:31:17 (19 hours ago)	[Mon Oct 12 16:31:15.208435 2026] [core:info] [pid 338329:tid 338372] [client 20.235.120.216:11584] ... show more [Mon Oct 12 16:31:15.208435 2026] [core:info] [pid 338329:tid 338372] [client 20.235.120.216:11584] AH00128: File does not exist: /var/www/franvallejo/wp-content/plugins/hellopress/wp_filemanager.php [Mon Oct 12 16:31:15.559097 2026] [core:info] [pid 338329:tid 338369] [client 20.235.120.216:11584] AH00128: File does not exist: /var/www/franvallejo/this_is_a_new_hello_world.php [Mon Oct 12 16:31:16.196819 2026] [core:info] [pid 338329:tid 338374] [client 20.235.120.216:11584] AH00128: File does not exist: /var/www/franvallejo/f5.php [Mon Oct 12 16:31:16.583752 2026] [core:info] [pid 338329:tid 338363] [client 20.235.120.216:11584] AH00128: File does not exist: /var/www/franvallejo/3PJcpMFsD8B.php [Mon Oct 12 16:31:16.961491 2026] [core:info] [pid 338329:tid 338361] [client 20.235.120.216:11584] AH00128: File does not exist: /var/www/franvallejo/z70.php ... show less	Brute-Force SSH
🇬🇧 Mendip_Defender	2026-10-12 14:25:21 (19 hours ago)	20.235.120.216 - - [12/Oct/2026:15:25:20 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.235.120.216 - - [12/Oct/2026:15:25:20 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6418 "-" "-" 20.235.120.216 - - [12/Oct/2026:15:25:20 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5590 "-" "-" 20.235.120.216 - - [12/Oct/2026:15:25:21 +0100] "GET /ws.php HTTP/1.1" 404 5590 "-" "-" ... show less	Hacking Web App Attack
🇫🇮 YF	2026-10-12 13:31:00 (20 hours ago)	404 errors Vulnerability scan	Web App Attack
🇺🇸 abenage	2026-10-12 12:48:53 (21 hours ago)	20.235.120.216 - - [12/Oct/2026:06:48:53 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.235.120.216 - - [12/Oct/2026:06:48:53 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" show less	Bad Web Bot Web App Attack
🇩🇪 raph	2026-10-12 12:34:05 (21 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇺🇸 EmilGH	2026-10-12 12:12:11 (21 hours ago)	20.235.120.216 - - [12/Oct/2026:08:11:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.235.120.216 - - [12/Oct/2026:08:11:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4422 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:54 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:54 -0400] "GET /f5.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:54 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:55 -0400] "GET /z70.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:55 -0400] "GET /chosen.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:56 -0400] "GET /1.php?p= HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:56 -0400] "GET /radio.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:56 -0400] "GET /wp_blog_footer.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:08:11:57 -0400] "GET /b8.php HTTP/1.1" 404 466 "-" "-" 20.235.120.216 - - [12/Oct/2026:0 ... show less	Bad Web Bot Web App Attack
🇬🇧 Yosi	2026-10-12 11:45:43 (22 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 jasperedv.de	2026-10-12 10:55:22 (23 hours ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇿🇦 conure.sh	2026-10-12 10:36:13 (23 hours ago)	csagent: score 20.0: shell drop sweep x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 Gabriel Camargo	2026-10-12 09:41:16 (1 day ago)	20.235.120.216 - - [12/Oct/2026:04:41:08 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.235.120.216 - - [12/Oct/2026:04:41:08 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.235.120.216 - - [12/Oct/2026:04:41:12 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.235.120.216 - - [12/Oct/2026:04:41:15 -0500] "GET /ws.php HTTP/1.1" 301 178 "-" "-" ... show less	Brute-Force SSH
🇩🇪 netman	2026-10-12 08:36:20 (1 day ago)	HTTP: 20.235.120.216 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇳🇱 Alt255	2026-10-12 08:34:24 (1 day ago)	[ti-30al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-30al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 20.235.120.216 - - [12/Oct/2026:10:33:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 49567 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:32 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 43715 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:34 +0200] "GET /f5.php HTTP/1.1" 404 43715 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:36 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 43715 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:37 +0200] "GET /z70.php HTTP/1.1" 404 43715 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:39 +0200] "GET /chosen.php HTTP/1.1" 404 43715 "-" "-" 20.235.120.216 - - [12/Oct/2026:10:33:42 +0200] "GET /1.php HTTP/1.1" 404 4 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 917 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 45.3.47.155

🇺🇸 34.83.15.205

🇺🇸 2602:80d:1008::97

🇨🇳 220.174.30.77

🇨🇳 182.61.33.68

🇧🇷 177.124.155.4

🇺🇸 174.103.17.128

🇺🇸 172.232.15.250

🇫🇷 80.241.208.254

🇨🇿 77.48.134.67

🇺🇸 71.6.134.229

🇮🇩 36.37.73.242

🇩🇪 34.141.84.198

🇺🇸 34.75.195.92

🇲🇽 189.217.130.86

🇨🇭 185.195.71.244

🇹🇼 165.154.227.8

🇩🇰 152.115.137.98

🇭🇰 119.28.84.193

🇮🇳 110.235.233.37