JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.255.152.59

20.255.152.59 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.255.152.59

Whois 20.255.152.59

IP Abuse Reports for 20.255.152.59:

This IP address has been reported a total of 62 times from 57 distinct sources. 20.255.152.59 was first reported on August 12th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-13 17:17:34 (1 week ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-08-13 13:10:40 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-12 21:59:30 (1 week ago)	Auto-ban: >3000 req/min op 2026-08-12	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-08-12 16:00:11 (1 week ago)	Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-12T15:13:42Z Ray ID: a2a06cf10b54e2ec UA: Empty string show less	Bad Web Bot
🇦🇺 aranguren.org	2026-08-12 15:10:04 (1 week ago)	20.255.152.59 - - [13/Aug/2026:01:10:03 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.152.59 - - [13/Aug/2026:01:10:03 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 984 "-" "-" 20.255.152.59 - - [13/Aug/2026:01:10:03 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.255.152.59 - - [13/Aug/2026:01:10:03 +1000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 16 "-" "-" 20.255.152.59 - - [13/Aug/2026:01:10:04 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 16 "-" "-" 20.255.152.59 - - [13/Aug/2026:01:10:04 +1000] "GET /gm.php HTTP/1.1" 404 16 "-" "-" 20.255.152.59 - - [13/Aug/2026:01:10:04 +1000] "GET /ano.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇩🇪 R.G.	2026-08-12 14:51:44 (1 week ago)	(ScanningForFiles) Scanning for files triggerd 20.255.152.59 (HK/Hong Kong/-): 10 in the last 900 se ... show more (ScanningForFiles) Scanning for files triggerd 20.255.152.59 (HK/Hong Kong/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇩 sockominfo	2026-08-12 14:00:33 (2 weeks ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇹 alessio loto	2026-08-12 13:36:46 (2 weeks ago)	WAF Detection: Empty_UserAgent (High Risk IP). AI Confirmed Attack Payload.	Web App Attack
🇮🇹 madaello	2026-08-12 13:33:02 (2 weeks ago)	20.255.152.59 - - [12/Aug/2026:15:32:41 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 946 ... show more 20.255.152.59 - - [12/Aug/2026:15:32:41 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 94693 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:43 +0200] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 94646 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:45 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 94646 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:47 +0200] "GET /gm.php HTTP/1.1" 404 94624 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:49 +0200] "GET /ano.php HTTP/1.1" 404 94622 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:51 +0200] "GET /xx.php HTTP/1.1" 404 94624 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:54 +0200] "GET /img.php HTTP/1.1" 404 94622 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:56 +0200] "GET /av.php HTTP/1.1" 404 94624 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:32:58 +0200] "GET /media.php HTTP/1.1" 404 94633 "-" "-" 20.255.152.59 - - [12/Aug/2026:15:33:00 +0200] "GET /images.php HTTP/1.1" 404 94636 "-" "-" ... show less	Web App Attack
🇺🇸 LotPhantom	2026-08-12 13:08:34 (2 weeks ago)	20.255.152.59 - - [12/Aug/2026:13:07:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.152.59 - - [12/Aug/2026:13:07:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "0" ... show less	Web App Attack
🇫🇷 masterguru	2026-08-12 13:05:18 (2 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
Anonymous	2026-08-12 12:51:34 (2 weeks ago)	20.255.152.59 - - [12/Aug/2026:14:51:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.152.59 - - [12/Aug/2026:14:51:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:28 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:29 +0200] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:29 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:29 +0200] "GET /gm.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:29 +0200] "GET /ano.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:29 +0200] "GET /xx.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:30 +0200] "GET /img.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:30 +0200] "GET //av.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:30 +0200] "GET /media.php HTTP/1.1" 404 164 "-" "-" 20.255.152.59 - - [12/Aug/2026:14:51:30 +0200] "GET ... show less	Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2026-08-12 12:27:02 (2 weeks ago)	20.255.152.59 - - [12/Aug/2026:12:27:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.152.59 - - [12/Aug/2026:12:27:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2066 "-" "-" 20.255.152.59 - - [12/Aug/2026:12:27:00 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2028 "-" "-" 20.255.152.59 - - [12/Aug/2026:12:27:00 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 2028 "-" "-" 20.255.152.59 - - [12/Aug/2026:12:27:01 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 2028 "-" "-" 20.255.152.59 - - [12/Aug/2026:12:27:01 +0000] "GET /gm.php HTTP/1.1" 404 2028 "-" "-" 20.255.152.59 - - [12/Aug/2026:12:27:01 +0000] "GET /ano.php HTTP/1.1" 404 2028 "-" "-" ... show less	Brute-Force
🇦🇺 paulshipley.com.au	2026-08-12 12:20:55 (2 weeks ago)	levellapromotions.com.au:443 20.255.152.59 - - [12/Aug/2026:22:20:52 +1000] "GET /admin.php HTTP/1.1 ... show more levellapromotions.com.au:443 20.255.152.59 - - [12/Aug/2026:22:20:52 +1000] "GET /admin.php HTTP/1.1" 404 129493 "-" "-" ... show less	Web App Attack
Anonymous	2026-08-12 12:12:31 (2 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.122

🇸🇮 130.12.182.107

🇲🇦 105.159.181.18

🇺🇸 98.115.20.130

🇬🇷 45.139.215.214

🇺🇸 142.91.118.129

🇺🇸 50.116.72.139

🇩🇪 217.60.68.140

🇦🇷 152.170.193.193

🇮🇪 108.132.131.207

🇸🇬 103.189.234.85

🇸🇬 103.20.122.54

🇺🇸 45.33.14.197

🇨🇦 20.104.18.15

🇺🇸 20.51.239.14

🇺🇸 2400:cb00:119:1000:ba6f:1807:f705:aa0a

🇺🇿 213.230.90.238

🇧🇷 200.216.172.182

🇵🇱 195.74.91.44

🇮🇩 182.253.154.31