This IP address has been reported a total of
204
times from
180 distinct
sources.
20.239.48.125 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Observed suspicious activity over last 24h.
Requests: 0; security events: 1.
Web App Attack
Brute-Force
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Malicious User-Agent
show less
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
[Tue Jul 07 17:55:44.523860 2026] [php7:error] [pid 3510799] [client 20.239.48.125:61620] script '/v ...
show more[Tue Jul 07 17:55:44.523860 2026] [php7:error] [pid 3510799] [client 20.239.48.125:61620] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat
[Tue Jul 07 17:55:44.727978 2026] [php7:error] [pid 3510799] [client 20.239.48.125:61620] script '/var/www/html/x.php' not found or unable to stat
...
show less
Hit honeypot endpoint /wp-content/plugins/hellopress/wp_filemanager.php. Automated scanner/bot detec ...
show moreHit honeypot endpoint /wp-content/plugins/hellopress/wp_filemanager.php. Automated scanner/bot detected.
show less