This IP address has been reported a total of
142
times from
95 distinct
sources.
20.255.75.57 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 31
reports;
United States of America
with 28
reports;
Netherlands
with 15
reports.
The most common categories in these recent reports were:
Web App Attack
109
times;
Brute-Force
33
times;
Bad Web Bot
32
times;
Hacking
26
times;
Port Scan
20
times;
Other
20
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunOct0422:13:09.2483032026][security2:error][pid1331647:tid1331781][client20.255.75.57:0]ModSecuri ...
show more[SunOct0422:13:09.2483032026][security2:error][pid1331647:tid1331781][client20.255.75.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.\(php\|phtml\|phar\|php3\|php4\|php5\|php7\)\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"wildpferde.ch\"][uri\"/wp-content/uploads/min.php\"][unique_id\"asKzVZn5aH0MOYmc9Qx8cgAAAJc\"]
show less
Attempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unaut ...
show moreAttempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unauthorized probing.
show less
[SunOct0421:15:54.2801182026][security2:error][pid3953583:tid3953587][client20.255.75.57:0]ModSecuri ...
show more[SunOct0421:15:54.2801182026][security2:error][pid3953583:tid3953587][client20.255.75.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.\(php\|phtml\|phar\|php3\|php4\|php5\|php7\)\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"929\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"piffarerio.ch\"][uri\"/wp-content/uploads/min.php\"][unique_id\"asKl6mmofAJNJ2PdtfIonwAAAQI\"]
show less
Honeypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ...
show moreHoneypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Automated malicious activity (404 Flood) detected and blocked at the CDN edge by NordicCDN Shield. O ...
show moreAutomated malicious activity (404 Flood) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-10-04.
show less
Bad Web Bot
Web App Attack
Anonymous
(caddyscan) Scanner path probe from 20.255.75.57 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: * ...
show more(caddyscan) Scanner path probe from 20.255.75.57 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.255.75.57 - - [04/Oct/2026:16:59:48 +0000] "GET /wp-admin/maint/index.php HTTP/1.1"
[REDACTED] 200 2627 20.255.75.57 - - [04/Oct/2026:16:59:51 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1"
[REDACTED] 200 2627 20.255.75.57 - - [04/Oct/2026:16:59:53 +0000] "GET /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 20.255.75.57 - - [04/Oct/2026:16:59:53 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1"
[REDACTED] 200 2627 20.255.75.57 - - [04/Oct/2026:16:59:55 +0000] "GET /wp-admin/index.php HTTP/1.1"
show less
(upload_shell) srv103 PHP execution in uploads 20.255.75.57 (HK/Hong Kong/-): 1 in the last 3600 sec ...
show more(upload_shell) srv103 PHP execution in uploads 20.255.75.57 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
