JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.251.15.206

20.251.15.206

Neutral Activity

145 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇳🇴 Norway

City

Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.251.15.206 has been reported 145 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.251.15.206:

This IP address has been reported a total of 145 times from 124 distinct sources. 20.251.15.206 was first reported on April 12th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-05-01 00:21:37 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-04-30 13:02:46 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 NetShield-DE	2026-04-18 19:08:03 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T21:07:02+0200. Last: 2026-04-18T21:07:02+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 NetShield-DE	2026-04-18 14:08:04 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T16:07:01+0200. Last: 2026-04-18T16:07:01+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 NetShield-DE	2026-04-18 09:08:03 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T11:07:02+0200. Last: 2026-04-18T11:07:02+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 NetShield-DE	2026-04-18 04:08:09 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T06:07:02+0200. Last: 2026-04-18T06:07:02+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 NetShield-DE	2026-04-17 23:08:02 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-18T01:07:01+0200. Last: 2026-04-18T01:07:01+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇪🇸 Gem	2026-04-17 22:11:27 (4 months ago)	Unauthorized web scan.	Web App Attack
🇩🇪 NetShield-DE	2026-04-17 19:08:05 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-17T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-17T21:07:01+0200. Last: 2026-04-17T21:07:01+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 NetShield-DE	2026-04-17 14:08:05 (4 months ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-17T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-04-17T16:07:01+0200. Last: 2026-04-17T16:07:01+0200. Samples: - 2026-04-12 10:33:22,067 fail2ban.actions [1404904]: NOTICE [abuseipdb] Ban 20.251.15.206 show less	Web App Attack
🇩🇪 Holger	2026-04-15 07:03:24 (4 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇭🇺 DumaNet	2026-04-14 01:40:00 (4 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 12. 13:48:12 Source IP: 20.251 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 12. 13:48:12 Source IP: 20.251.15.206 Portion of the log(s): 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /class-wp-image.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /tiny.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /tiny HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /gecko.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /config.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /wp-admin/images/admin.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /7.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:12 +0200] "GET /tx79.php HTTP/1.1" 404 153 "-" "-" 20.251.15.206 - [12/Apr/2026:13:48:11 +0200] "GET /ss.php HT show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-13 22:02:38 (4 months ago)	Auto-ban: 233 malicious requests on 2026-04-12 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 233 malicious requests on 2026-04-12 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
Anonymous	2026-04-13 09:04:25 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NO, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NO, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-04-13 08:14:17 (4 months ago)	scans/SQL injection/spam posts : 449 queries	Web App Attack SQL Injection

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.138.147.253

🇩🇪 194.88.98.122

🇸🇬 85.203.21.37

🇦🇱 79.98.115.21

🇰🇼 62.150.237.107

🇵🇪 38.25.18.182

🇧🇪 35.233.45.153

🇳🇱 195.178.110.132

🇺🇸 165.154.182.174

🇧🇪 104.155.99.154

🇮🇳 103.30.83.230

🇨🇦 85.217.149.37

🇫🇷 77.239.124.205

🇺🇸 45.45.237.97

🇨🇳 39.106.225.153

🇺🇸 35.245.31.29

🇺🇸 34.182.220.159

🇯🇵 34.97.126.177

🇺🇸 8.235.29.233

🇩🇪 194.187.176.64