JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.232.203

20.48.232.203 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.232.203

Whois 20.48.232.203

IP Abuse Reports for 20.48.232.203:

This IP address has been reported a total of 162 times from 128 distinct sources. 20.48.232.203 was first reported on May 30th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-06-03 03:13:14 (3 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.48.232.203 172.71.120.145 - - [30/May/2026:14:41 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.48.232.203 172.71.120.145 - - [30/May/2026:14:41:54 -0300] "GET /wk/index.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-06-01 21:59:09 (4 days ago)	Auto-ban: 12 malicious requests on 2026-05-31 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 12 malicious requests on 2026-05-31 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇧🇷 Peregrine	2026-06-01 03:13:04 (5 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.48.232.203 172.71.120.145 - - [30/May/2026:14:41 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.48.232.203 172.71.120.145 - - [30/May/2026:14:41:54 -0300] "GET /wk/index.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-05-31 12:02:44 (6 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-05-31 05:13:00 (6 days ago)	164 attacks on PHP URLs: GET /wp-content/plugins/index.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-05-31 04:07:38 (6 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 www.Examensfragen.de	2026-05-31 02:43:59 (6 days ago)		Web Spam Bad Web Bot
🇺🇸 Charlesiv	2026-05-31 02:16:48 (6 days ago)	Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /inputs.php Timestamp: 2026-05-31T00:32:07Z Ray ID: a041e12fedc9dda9 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Trueforce Threat Report	2026-05-31 01:55:49 (6 days ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇸🇪 nekopavel	2026-05-31 01:50:39 (6 days ago)	20.48.232.203 - - [31/May/2026:03:50:35 +0200]"GET /wp-content/uploads/index.php HTTP/1.1" 301 0"-" ... show more 20.48.232.203 - - [31/May/2026:03:50:35 +0200]"GET /wp-content/uploads/index.php HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.005" "0.004""Toronto" "CA" 20.48.232.203 - - [31/May/2026:03:50:36 +0200]"GET /wp-admin/user/index.php HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.005" "0.004""Toronto" "CA" 20.48.232.203 - - [31/May/2026:03:50:36 +0200]"GET /wp-conf.php HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.004" "0.004""Toronto" "CA" ... show less	Hacking Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-31 01:49:46 (6 days ago)	http-probing - IP: 20.48.232.203 - time="2026-05-31T03:49:45+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 20.48.232.203 - time="2026-05-31T03:49:45+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 20.48.232.203 (CA/8075) : 4h ban on Ip 20.48.232.203" module=db show less	Web App Attack
🇬🇧 anycast_ac	2026-05-31 01:46:33 (6 days ago)	[WebProtection] L4/L7 attack source · L7-HOSTMISS-BAN · 1 hits/window	Port Scan Web App Attack
🇩🇪 Philister11	2026-05-31 01:24:45 (6 days ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (CA/AS8075)	Web App Attack Hacking
🇬🇧 andypiper	2026-05-31 01:02:51 (6 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 ketovoila.pl	2026-05-31 00:11:55 (6 days ago)	ketovoila.pl web app/PHP backdoor scan: hits=21; unique_paths=21; sample_paths=/about.php,/admin.php ... show more ketovoila.pl web app/PHP backdoor scan: hits=21; unique_paths=21; sample_paths=/about.php,/admin.php,/chosen.php?p=; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"; window=2026-05-31T00:11:55Z..2026-05-31T00:11:56Z show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇹 213.217.204.196

🇬🇧 198.244.226.70

🇻🇳 171.244.143.209

🇩🇪 82.198.227.61

🇳🇱 45.148.10.151

🇺🇸 45.45.237.8

🇮🇱 203.159.81.50

🇺🇸 162.216.150.17

🇭🇰 152.32.192.176

🇨🇳 120.48.2.29

🇹🇼 61.220.235.10

🇨🇳 60.167.19.189

🇷🇺 46.44.0.185

🇬🇧 35.203.210.119

🇺🇸 34.72.243.254

🇺🇸 34.72.176.129

🇧🇷 191.53.8.218

🇺🇸 172.217.46.91

🇮🇩 163.7.4.169

🇺🇸 162.216.150.153