JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.40.219.135

20.40.219.135 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.40.219.135

Whois 20.40.219.135

IP Abuse Reports for 20.40.219.135:

This IP address has been reported a total of 80 times from 65 distinct sources. 20.40.219.135 was first reported on June 18th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-20 07:18:02 (6 hours ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇳🇱 middelkoopcc	2026-06-20 06:20:06 (7 hours ago)	2026-06-20 08:16:37 [client 20.40.219.135:3796] AH01071: Got error 'Primary script unknown' && 2026- ... show more 2026-06-20 08:16:37 [client 20.40.219.135:3796] AH01071: Got error 'Primary script unknown' && 2026-06-20 08:16:37 [client 20.40.219.135:3796] AH01071: Got error 'Primary script unknown' && 2026-06-20 08:16:38 [client 20.40.219.135:3796] AH01071: Got error 'Primary script unknown' && 126 more within 20 minutes show less	Web App Attack
Anonymous	2026-06-20 04:07:23 (9 hours ago)	Trying to access config files	Web App Attack
🇪🇸 loadsoporte	2026-06-20 03:47:57 (10 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 Nevermind	2026-06-20 03:38:19 (10 hours ago)	20.40.219.135 - - [20/Jun/2026:05:38:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.40.219.135 - - [20/Jun/2026:05:38:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4793 "-" "-" 20.40.219.135 - - [20/Jun/2026:05:38:18 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3965 "-" "-" 20.40.219.135 - - [20/Jun/2026:05:38:18 +0200] "GET /1.php HTTP/1.1" 404 3965 "-" "-" 20.40.219.135 - - [20/Jun/2026:05:38:18 +0200] "GET /dropdown.php HTTP/1.1" 404 3965 "-" "-" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-06-20 03:20:19 (10 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-06-20 01:02:34 (12 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 breubit	2026-06-20 00:19:59 (13 hours ago)	20.40.219.135 - - [20/Jun/2026:02:19:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.40.219.135 - - [20/Jun/2026:02:19:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 608 "-" "-" ... show less	Web App Attack
Anonymous	2026-06-20 00:11:59 (13 hours ago)	VILICO WEBEXPLOIT 20.40.219.135 (20.40.219.135)	Web App Attack
🇨🇦 zXero	2026-06-19 23:24:13 (14 hours ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 DocNetzwerk	2026-06-19 21:55:53 (15 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.40.219.135 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.40.219.135 (US/United States/-) show less	Port Scan
Anonymous	2026-06-19 21:51:41 (15 hours ago)	Session Crossing	Hacking
🇮🇩 soc-yk	2026-06-19 20:54:11 (16 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 248 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 248 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇳🇱 Site.eu	2026-06-19 20:36:46 (17 hours ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 vaddilyin	2026-06-19 20:26:53 (17 hours ago)	{"ClientAddr":"20.40.219.135:4439","ClientHost":"20.40.219.135","ClientPort":"4439","ClientUsername" ... show more {"ClientAddr":"20.40.219.135:4439","ClientHost":"20.40.219.135","ClientPort":"4439","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":39384,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":39384,"RequestAddr":"meta.vdkln.com","RequestContentSize":0,"RequestCount":126194,"RequestHost":"meta.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-19T20:26:51.715249376Z","StartUTC":"2026-06-19T20:26:51.715249376Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-19T20:26:51Z"} {"ClientAddr":"20.40.219.135:4439","ClientHost":"20.40.219.135","ClientPort":"4439","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":45988,"GzipRatio":0,"OriginContentSize":0,"OriginDuration": ... show less	Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::7

🇺🇸 216.25.89.118

🇺🇸 162.216.149.177

🇺🇸 162.216.149.11

🇺🇸 147.185.132.249

🇮🇩 143.20.49.38

🇨🇳 111.26.106.117

🇧🇬 79.124.62.230

🇮🇳 182.95.111.170

🇺🇸 163.181.145.195

🇺🇸 137.184.159.183

🇺🇸 91.230.168.95

🇫🇷 82.67.154.215

🇳🇱 62.60.247.194

🇷🇴 2.57.121.112

🇮🇳 2401:4900:1c5a:e2bc:4dfa:4625:1a95:7f16

🇺🇸 185.159.83.177

🇺🇸 162.216.149.14

🇧🇷 144.22.210.132

🇩🇪 104.207.63.253