JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.147.90

20.48.147.90 was found in our database!

This IP was reported 1,482 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.147.90

Whois 20.48.147.90

IP Abuse Reports for 20.48.147.90:

This IP address has been reported a total of 1,482 times from 760 distinct sources. 20.48.147.90 was first reported on August 22nd 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mickp	2026-08-25 05:58:37 (6 minutes ago)	20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 0 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 0 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /under-construction HTTP/1.1" 200 28715 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /under-construction HTTP/1.1" 200 28715 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:22 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:23 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 0 "-" "-" 20.48.147.90 - - [25/Aug/2026:05:58:23 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 0 "-" " ... show less	Bad Web Bot Web App Attack
🇵🇹 rooster	2026-08-25 05:49:05 (15 minutes ago)	[25/Aug/2026:06:49:04 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/wp-content/plugins/hell ... show more [25/Aug/2026:06:49:04 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/wp-content/plugins/hellopress/wp_filemanager.php" [Client 20.48.147.90] [Length 150] [Gzip -] "-" "-" [25/Aug/2026:06:49:04 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/this_is_a_new_hello_world.php" [Client 20.48.147.90] [Length 150] [Gzip -] "-" "-" [25/Aug/2026:06:49:04 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/this_is_a_new_hello_world.php" [Client 20.48.147.90] [Length 150] [Gzip -] "-" "-" [25/Aug/2026:06:49:04 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/doti.php" [Client 20.48.147.90] [Length 150] [Gzip -] "-" "-" ... show less	Hacking Web App Attack
🇺🇸 Epimetheus	2026-08-25 05:46:31 (18 minutes ago)	Unauthorized access attempts: [GET] /size.php [GET] /hook.php [GET] /files.php/new.php [GET] /ty.ph ... show more Unauthorized access attempts: [GET] /size.php [GET] /hook.php [GET] /files.php/new.php [GET] /ty.php [GET] /mlex.php [GET] /444.php [GET] /geck.php [GET] //LegioN_LeakeRs.php [GET] /fs.php [GET] /moon.php UA: Unknown show less	Web App Attack
🇯🇵 HeliJP	2026-08-25 05:45:36 (19 minutes ago)	2026-08-25T05:43:32Z - Recognized attacks\bad behavior from IP address 20.48.147.90 on port 443\80 ( ... show more 2026-08-25T05:43:32Z - Recognized attacks\bad behavior from IP address 20.48.147.90 on port 443\80 (149 daily hits): Missing User Agent Header show less	Hacking
🇵🇱 alianet	2026-08-25 05:37:45 (27 minutes ago)	[Tue Aug 25 05:37:42.884098 2026] [proxy_fcgi:error] [pid 3163228:tid 3163318] [client 20.48.147.90: ... show more [Tue Aug 25 05:37:42.884098 2026] [proxy_fcgi:error] [pid 3163228:tid 3163318] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:43.113814 2026] [proxy_fcgi:error] [pid 3163228:tid 3163332] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:43.346150 2026] [proxy_fcgi:error] [pid 3163228:tid 3163305] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:43.577614 2026] [proxy_fcgi:error] [pid 3163228:tid 3163325] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:43.810017 2026] [proxy_fcgi:error] [pid 3163228:tid 3163329] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:44.270804 2026] [proxy_fcgi:error] [pid 3163228:tid 3163336] [client 20.48.147.90:13986] AH01071: Got error 'Primary script unknown' [Tue Aug 25 05:37:44.500842 2026] [proxy_fcgi:error] [pid 3163228:tid 3163309] [client 20.48.1 ... show less	Port Scan Web App Attack
🇳🇱 i-turnradio.nl	2026-08-25 05:33:36 (31 minutes ago)	2026-08-25 @ 07:33:35 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-08-25 @ 07:33:35 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 v1nc	2026-08-25 05:30:46 (34 minutes ago)	20.48.147.90 - - [25/Aug/2026:05:30:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.147.90 - - [25/Aug/2026:05:30:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Hacking
🇩🇪 itsolon	2026-08-25 05:29:19 (35 minutes ago)	[25/Aug/2026:07:29:18 +0200] 178763575817.269745 20.48.147.90 60119 217.154.7.177 80 [25/Aug/2026:07 ... show more [25/Aug/2026:07:29:18 +0200] 178763575817.269745 20.48.147.90 60119 217.154.7.177 80 [25/Aug/2026:07:29:18 +0200] 17876357584.951916 20.48.147.90 60119 217.154.7.177 80 [25/Aug/2026:07:29:18 +0200] 178763575841.020646 20.48.147.90 60119 217.154.7.177 80 [25/Aug/2026:07:29:18 +0200] 178763575836.284122 20.48.147.90 60119 217.154.7.177 80 [25/Aug/2026:07:29:18 +0200] 178763575811.683215 20.48.147.90 60119 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇮🇹 ciccio diddo	2026-08-25 05:29:16 (35 minutes ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 thedreamer.nl	2026-08-25 05:25:27 (39 minutes ago)	20.48.147.90 - - [25/Aug/2026:07:24:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.147.90 - - [25/Aug/2026:07:24:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.48.147.90 - - [25/Aug/2026:07:24:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇧🇷 Douglas Jorge	2026-08-25 05:24:44 (40 minutes ago)	WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/wp-content/p ... show more WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/wp-content/plugins/hellopress/wp_filemanager.php detail=header ausente WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/this_is_a_new_hello_world.php detail=header ausente WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/doti.php detail=header ausente WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/naxc.php detail=header ausente WARNING:watchdog:SECEVENT_F2B type=CLIENT_TOKEN_MISSING sev=ALERT ip=20.48.147.90 path=/lib.php detail=header ausente ... show less	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-08-25 05:12:51 (52 minutes ago)	2026-08-25 @ 07:12:50 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-08-25 @ 07:12:50 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇮🇹 madaello	2026-08-25 05:03:50 (1 hour ago)	20.48.147.90 - - [25/Aug/2026:07:03:42 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 9469 ... show more 20.48.147.90 - - [25/Aug/2026:07:03:42 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 94693 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:43 +0200] "GET /doti.php HTTP/1.1" 404 94630 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:43 +0200] "GET /naxc.php HTTP/1.1" 404 94630 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:44 +0200] "GET /lib.php HTTP/1.1" 404 94622 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:45 +0200] "GET /LegioN_LeakeRs.php HTTP/1.1" 404 94660 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:45 +0200] "GET /LOGO/lib.php HTTP/1.1" 404 94627 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:46 +0200] "GET /LegioN_LeakeRs.php HTTP/1.1" 404 94660 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:47 +0200] "GET /naxc.php HTTP/1.1" 404 94630 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:48 +0200] "GET /db.php/new.php HTTP/1.1" 404 94633 "-" "-" 20.48.147.90 - - [25/Aug/2026:07:03:48 +0200] "GET /info.php/new.php HTTP/1.1" 404 94654 "-" "-" ... show less	Web App Attack
🇸🇪 sweplox.se	2026-08-25 05:03:47 (1 hour ago)	Ip 20.48.147.90 performed 'crowdsecurity/http-crawl-non_statics' (53 events over 6.109957304s) at 20 ... show more Ip 20.48.147.90 performed 'crowdsecurity/http-crawl-non_statics' (53 events over 6.109957304s) at 2026-08-25 05:03:45.456138651 +0000 UTC show less	Bad Web Bot Web App Attack
🇮🇹 paoloartone	2026-08-25 05:00:42 (1 hour ago)	Reverse proxy TCO: 205 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 24/08/202 ... show more Reverse proxy TCO: 205 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 24/08/2026. show less	Web App Attack Hacking Port Scan

Showing 1 to 15 of 1482 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.134.189

🇭🇰 165.154.41.232

🇩🇪 165.22.91.3

🇺🇸 158.94.211.230

🇭🇰 156.225.1.99

🇺🇸 154.197.57.71

🇺🇸 135.237.127.54

🇮🇩 103.164.252.237

🇺🇸 66.132.195.33

🇺🇸 66.132.172.197

🇧🇪 35.240.48.144

🇨🇳 223.84.209.188

🇱🇹 213.176.26.62

🇺🇸 172.234.199.190

🇺🇸 172.232.15.250

🇫🇷 172.71.134.188

🇺🇸 162.241.130.124

🇸🇬 143.198.91.82

🇯🇵 139.162.116.22

🇳🇬 102.88.137.145