This IP address has been reported a total of
267
times from
204 distinct
sources.
20.238.64.167 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Canada
with 11
reports.
The most common categories in these recent reports were:
Brute-Force
11
times;
SSH
11
times;
DDoS Attack
11
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
470 requests with url.path *config.php
415 requests with url.path */wp-content/plugins/hellopress/ ...
show more470 requests with url.path *config.php
415 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php
show less
{"level":"info","ts":1775803921.168867,"logger":"http.log.access.log0","msg":"handled request","requ ...
show more{"level":"info","ts":1775803921.168867,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.238.64.167","remote_port":"16991","client_ip":"20.238.64.167","proto":"HTTP/1.1","method":"GET","host":"ybk2.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000058532,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://ybk2.status.updown.io/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[]}}
{"level":"info","ts":1775803921.5498412,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.238.64.167","remote_port":"16699","client_ip":"20.238.64.167","proto":"HTTP/1.1","method":"GET","host":"ybk2.status.updown.io","uri":"/press.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000046087,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https:/
...
show less
(aggressive_scan) Aggressive Web Exploit Scan 20.238.64.167 (IE/Ireland/-): 1 in the last 4600 secs; ...
show more(aggressive_scan) Aggressive Web Exploit Scan 20.238.64.167 (IE/Ireland/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 20.238.64.167 - - [10/Apr/2026:10:17:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 427 "-" "-"
show less
(ScanningForFiles) Scanning for files triggerd 20.238.64.167 (IE/Ireland/-): 10 in the last 900 secs ...
show more(ScanningForFiles) Scanning for files triggerd 20.238.64.167 (IE/Ireland/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Aggressive web search of vulnerable pages: /wp-content/plugins/hellopress/wp_filemanager.php /press. ...
show moreAggressive web search of vulnerable pages: /wp-content/plugins/hellopress/wp_filemanager.php /press.php /dx.php /ga.php /less.php /x3x.php /wp- ...
show less