JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.248.185

20.48.248.185 was found in our database!

This IP was reported 320 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.248.185

Whois 20.48.248.185

IP Abuse Reports for 20.48.248.185:

This IP address has been reported a total of 320 times from 268 distinct sources. 20.48.248.185 was first reported on May 28th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-28 21:50:08 (6 days ago)	[Thu May 28 23:50:06.696955 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH016 ... show more [Thu May 28 23:50:06.696955 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH01630: client denied by server configuration: /var/www/html/default/wp-content [Thu May 28 23:50:07.213471 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH01630: client denied by server configuration: /var/www/html/default/adminfuns.php [Thu May 28 23:50:07.393534 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH01630: client denied by server configuration: /var/www/html/default/sx_pms.php [Thu May 28 23:50:07.599396 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH01630: client denied by server configuration: /var/www/html/default/wp-info.php [Thu May 28 23:50:07.799518 2026] [authz_core:error] [pid 397354] [client 20.48.248.185:63638] AH01630: client denied by server configuration: /var/www/html/default/wp-test.php ... show less	Web App Attack
🇬🇧 Blake	2026-05-28 21:46:22 (6 days ago)	20.48.248.185 "-" "-" - [28/May/2026:21:46:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemana ... show more 20.48.248.185 "-" "-" - [28/May/2026:21:46:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "-" ATTACK ... show less	Web App Attack
🇬🇧 rakkor	2026-05-28 21:38:58 (6 days ago)	2026-05-28T22:38:57+01:00 NAS [Thu May 28 22:38:57.875060 2026] [proxy_fcgi:error] [pid 32024:tid 32 ... show more 2026-05-28T22:38:57+01:00 NAS [Thu May 28 22:38:57.875060 2026] [proxy_fcgi:error] [pid 32024:tid 32057] [client 20.48.248.185:41386] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Hacking
🇧🇪 sid3windr	2026-05-28 21:34:14 (6 days ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for , wasted 120B)	Web App Attack
🇺🇸 billyw0nka	2026-05-28 21:31:04 (6 days ago)	pattern: wp-content	Hacking
🇩🇪 Dominik Lysiak	2026-05-28 21:30:09 (6 days ago)	20.48.248.185 - - [28/May/2026:23:29:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.48.248.185 - - [28/May/2026:23:29:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:52 +0200] "GET /adminfuns.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:52 +0200] "GET /sx_pms.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:52 +0200] "GET /wp-info.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:54 +0200] "GET /wp-test.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:54 +0200] "GET /like.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:54 +0200] "GET /we.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:55 +0200] "GET /wp.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:55 +0200] "GET /wp-indx.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:55 +0200] "GET /zoo.php HTTP/1.1" 404 324 "-" "-" 20.48.248.185 - - [28/May/2026:23:29:55 +0200] "GET /wp-link-spm.php ... show less	Web App Attack
Anonymous	2026-05-28 21:21:44 (6 days ago)	Attempt to scan vulnerabilities	Hacking
🇬🇧 thetomtaylor.co.uk	2026-05-28 21:06:02 (6 days ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01,wa01,wa02]	Hacking Bad Web Bot
🇳🇱 oisecnet	2026-05-28 21:01:05 (6 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-05-28. 388 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-05-28. 388 requests from this IP. show less	Brute-Force Web App Attack SSH
🇫🇮 Erpelstolz	2026-05-28 20:58:23 (6 days ago)	external host: 20.48.248.185 - - [28/May/2026:22:58:22 +0200] "GET /wp-content/plugins/hellopress/wp ... show more external host: 20.48.248.185 - - [28/May/2026:22:58:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 341 "-" "-" CF-Ray:- CF-IP:- show less	Web App Attack
🇷🇴 iulianh	2026-05-28 20:56:51 (6 days ago)	*	Brute-Force SSH
🇧🇷 vfAcceloReporter	2026-05-28 20:56:02 (6 days ago)	20.48.248.185 - - [28/May/2026:17:55:52 -0300] "GET /adminfuns.php HTTP/1.1" 500 177 "-" "-" 20.48.2 ... show more 20.48.248.185 - - [28/May/2026:17:55:52 -0300] "GET /adminfuns.php HTTP/1.1" 500 177 "-" "-" 20.48.248.185 - - [28/May/2026:17:55:53 -0300] "GET /sx_pms.php HTTP/1.1" 500 177 "-" "-" 20.48.248.185 - - [28/May/2026:17:55:55 -0300] "GET /wp-info.php HTTP/1.1" 500 177 "-" "-" 20.48.248.185 - - [28/May/2026:17:55:58 -0300] "GET /wp-test.php HTTP/1.1" 500 177 "-" "-" 20.48.248.185 - - [28/May/2026:17:56:01 -0300] "GET /like.php HTTP/1.1" 500 177 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇩🇪 gamingkante.xyz	2026-05-28 20:55:13 (6 days ago)	[Thu May 28 22:55:12.930335 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] ... show more [Thu May 28 22:55:12.930335 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/adminfuns.php' not found or unable to stat [Thu May 28 22:55:13.041934 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/sx_pms.php' not found or unable to stat [Thu May 28 22:55:13.156140 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/wp-info.php' not found or unable to stat [Thu May 28 22:55:13.263598 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/wp-test.php' not found or unable to stat [Thu May 28 22:55:13.394828 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/like.php' not found or unable to stat [Thu May 28 22:55:13.502447 2026] [php:error] [pid 3008280:tid 3008280] [client 20.48.248.185:57942] script '/var/www/html/web/we.php' not found or unable to stat ... show less	Web App Attack
🇮🇹 NonOggiCaroMio	2026-05-28 20:53:07 (6 days ago)	Arruso ca si: crowdsecurity/http-wordpress-scan	Brute-Force
🇫🇷 Campus France	2026-05-28 20:47:52 (6 days ago)	[Thu May 28 17:10:41.345807 2026] [php:error] [pid 2315609] [client 20.48.248.185:62960] script '/va ... show more [Thu May 28 17:10:41.345807 2026] [php:error] [pid 2315609] [client 20.48.248.185:62960] script '/var/www/html/avignon/we.php' not found or unable to stat [Thu May 28 22:47:52.094911 2026] [php:error] [pid 2486757] [client 20.48.248.185:8813] script '/var/www/html/wme-response-type.brume.org/adminfuns.php' not found or unable to stat [Thu May 28 22:47:52.094911 2026] [php:error] [pid 2486757] [client 20.48.248.185:8813] script '/var/www/html/wme-response-type.brume.org/adminfuns.php' not found or unable to stat [Thu May 28 22:47:52.327280 2026] [php:error] [pid 2486757] [client 20.48.248.185:8813] script '/var/www/html/wme-response-type.brume.org/sx_pms.php' not found or unable to stat [Thu May 28 22:47:52.327280 2026] [php:error] [pid 2486757] [client 20.48.248.185:8813] script '/var/www/html/wme-response-type.brume.org/sx_pms.php' not found or unable to stat ... show less	Brute-Force Web App Attack

Showing 61 to 75 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.110.147.58

🇳🇱 194.48.141.4

🇫🇷 185.177.72.52

🇸🇬 152.42.240.74

🇰🇷 115.86.73.98

🇰🇷 112.217.188.122

🇺🇸 104.168.198.241

🇮🇳 103.116.137.158

🇨🇳 101.96.193.131

🇵🇹 88.157.1.16

🇫🇷 88.138.20.172

🇺🇸 65.49.1.209

🇺🇸 65.49.1.99

🇳🇱 62.164.177.41

🇿🇦 20.87.219.67

🇺🇸 20.29.21.25

🇷🇺 178.161.174.69

🇺🇦 176.103.11.215

🇺🇸 165.227.29.244

🇺🇸 162.216.150.13