JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.248.185

20.48.248.185 was found in our database!

This IP was reported 320 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.248.185

Whois 20.48.248.185

IP Abuse Reports for 20.48.248.185:

This IP address has been reported a total of 320 times from 268 distinct sources. 20.48.248.185 was first reported on May 28th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 OK	2026-05-28 23:06:11 (6 days ago)	HTTP/HTTPS	Hacking Web App Attack
🇱🇹 NotACaptcha	2026-05-28 23:03:21 (6 days ago)	webserver:80 [29/May/2026] "GET /wp-indx.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /wp ... show more webserver:80 [29/May/2026] "GET /wp-indx.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /wp.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /we.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /like.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /wp-test.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /wp-info.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /sx_pms.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /adminfuns.php HTTP/1.1" 404 155 webserver:80 [29/May/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 show less	Web App Attack
🇺🇸 Operator873	2026-05-28 23:03:03 (6 days ago)	2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, serve ... show more 2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, server: [OBFUSCATED], request: "GET /adminfuns.php HTTP/1.1", host: "[OBFUSCATED]" 2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, server: [OBFUSCATED], request: "GET /adminfuns.php HTTP/1.1", host: "[OBFUSCATED]" 2026/05/28 18:03:00 [error] 82732#0: 3355082 access forbidden by rule, client: 20.48.248.185, server: [OBFUSCATED], request: "GET /sx_pms.php HTTP/1.1", host: "jellyfin.8 ... show less	Brute-Force Web App Attack
Anonymous	2026-05-28 22:59:23 (6 days ago)	[Thu May 28 18:59:22.458039 2026] [php7:error] [pid 749561] [client 20.48.248.185:61393] script '/va ... show more [Thu May 28 18:59:22.458039 2026] [php7:error] [pid 749561] [client 20.48.248.185:61393] script '/var/www/llamadareal.us/adminfuns.php' not found or unable to stat [Thu May 28 18:59:22.498982 2026] [php7:error] [pid 749561] [client 20.48.248.185:61393] script '/var/www/llamadareal.us/sx_pms.php' not found or unable to stat ... show less	Brute-Force Web App Attack SSH
🇫🇷 LRNP	2026-05-28 22:35:58 (6 days ago)	_:80 20.48.248.185 - - [28/May/2026:22:35:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanag ... show more _:80 20.48.248.185 - - [28/May/2026:22:35:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:57 +0000] "GET /adminfuns.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:57 +0000] "GET /sx_pms.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /wp-info.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /wp-test.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /like.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /we.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /wp.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /wp-indx.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.185 - - [28/May/2026:22:35:58 +0000] "GET /zoo.php HTTP/1.1" 404 146 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-05-28 22:33:02 (6 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 S.O.B.A. Dev.	2026-05-28 22:29:41 (6 days ago)	Threat Blocked by BeeHive from (ASN:8075) (Network:Microsoft Corporation) (Host:soba.dev) (Method:GE ... show more Threat Blocked by BeeHive from (ASN:8075) (Network:Microsoft Corporation) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-05-28T22:29:41Z) show less	Brute-Force Web Spam Web App Attack
🇳🇱 i-turnradio.nl	2026-05-28 22:25:25 (6 days ago)	2026-05-29 @ 00:25:25 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-05-29 @ 00:25:25 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇺🇸 oukat	2026-05-28 22:23:30 (6 days ago)	Web bot / web application probing against nginx	Bad Web Bot Web App Attack
🇩🇪 bescared	2026-05-28 22:13:00 (6 days ago)	WAF (2)	Bad Web Bot Web App Attack
Anonymous	2026-05-28 22:10:10 (6 days ago)	[Fri May 29 00:00:08.570200 2026] [authz_core:error] [pid 399009] [client 20.48.248.185:63059] AH016 ... show more [Fri May 29 00:00:08.570200 2026] [authz_core:error] [pid 399009] [client 20.48.248.185:63059] AH01630: client denied by server configuration: /var/www/html/default/geforce.php [Fri May 29 00:10:08.915482 2026] [authz_core:error] [pid 399018] [client 20.48.248.185:63644] AH01630: client denied by server configuration: /var/www/html/default/zo.php [Fri May 29 00:10:09.096124 2026] [authz_core:error] [pid 399018] [client 20.48.248.185:63644] AH01630: client denied by server configuration: /var/www/html/default/sky.php [Fri May 29 00:10:09.288966 2026] [authz_core:error] [pid 399018] [client 20.48.248.185:63644] AH01630: client denied by server configuration: /var/www/html/default/rh.php [Fri May 29 00:10:09.467878 2026] [authz_core:error] [pid 399018] [client 20.48.248.185:63644] AH01630: client denied by server configuration: /var/www/html/default/ortasekerli1.php ... show less	Web App Attack
🇩🇪 Bedios GmbH	2026-05-28 22:08:53 (6 days ago)	Wordpress hacking attempt	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-28 22:02:31 (6 days ago)	Auto-ban: >3000 req/min op 2026-05-28	Web App Attack SSH Hacking
🇩🇪 webanyone	2026-05-28 22:00:20 (6 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-28 22:00:08 (6 days ago)	20.48.248.185 - - [29/May/2026:01:00:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.48.248.185 - - [29/May/2026:01:00:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 710 "-" "-" ... show less	Web App Attack

Showing 46 to 60 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.50

🇳🇱 192.142.24.156

🇺🇸 161.35.51.90

🇺🇸 156.146.54.57

🇨🇦 142.103.73.50

🇷🇺 91.211.236.106

🇺🇸 66.240.223.208

🇺🇸 64.62.197.141

🇺🇸 50.187.155.130

🇹🇷 31.40.204.166

🇺🇸 20.65.193.105

🇺🇸 216.73.216.222

🇳🇱 195.178.110.30

🇺🇸 165.154.172.253

🇺🇸 151.186.219.197

🇺🇸 147.93.183.178

🇬🇧 143.110.165.73

🇺🇸 107.167.34.125

🇸🇬 107.150.112.48

🇷🇴 92.118.39.236