JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.248.215

20.48.248.215 was found in our database!

This IP was reported 308 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.248.215

Whois 20.48.248.215

IP Abuse Reports for 20.48.248.215:

This IP address has been reported a total of 308 times from 257 distinct sources. 20.48.248.215 was first reported on May 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 andreighitan	2026-06-01 00:00:00 (3 days ago)	Coordinated Azure webshell scanning campaign against 84.46.253.134. Active May-Jun 2026. ZAC Bayern ... show more Coordinated Azure webshell scanning campaign against 84.46.253.134. Active May-Jun 2026. ZAC Bayern ref BY0257-500359-26/8. show less	Brute-Force
🇦🇺 CalmBrain	2026-05-30 16:00:12 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇪🇸 Gem	2026-05-29 22:11:14 (5 days ago)	Unauthorized web scan.	Web App Attack
🇩🇪 Holger	2026-05-29 19:18:41 (5 days ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-05-28 08:11:30 (6 days ago)	Trying to access config files	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-27 21:59:32 (1 week ago)	Auto-ban: 313 malicious requests on 2026-05-26 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 313 malicious requests on 2026-05-26 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇩🇪 Holger	2026-05-27 18:34:55 (1 week ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-05-27 10:05:18 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2026-05-27 09:06:00 (1 week ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 May 26. 22:47:15 Source IP: 20.48. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 May 26. 22:47:15 Source IP: 20.48.248.215 Portion of the log(s): 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /fone1.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /cu.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /d.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /bthil.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /tires.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /test1.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /w.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /tiny.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /themes.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /x402.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
Anonymous	2026-05-27 06:43:02 (1 week ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-05-27 05:14:05 (1 week ago)	388 attacks on PHP URLs: GET /3369.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2026-05-27 04:06:38 (1 week ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 infra-monitor	2026-05-27 00:00:10 (1 week ago)	Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, crowdsecurity/http-crawl- ... show more Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, crowdsecurity/http-crawl-non_statics, +2 more show less	Port Scan Hacking Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-05-26 23:30:52 (1 week ago)	[Wed May 27 02:30:47.619751 2026] [proxy_fcgi:error] [pid 215711:tid 215731] [client 20.48.248.215:0 ... show more [Wed May 27 02:30:47.619751 2026] [proxy_fcgi:error] [pid 215711:tid 215731] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' [Wed May 27 02:30:47.800053 2026] [proxy_fcgi:error] [pid 215711:tid 215741] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' [Wed May 27 02:30:47.941727 2026] [proxy_fcgi:error] [pid 215711:tid 215723] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇫🇷 LRNP	2026-05-26 23:27:15 (1 week ago)	_:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanag ... show more _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /adminfuns.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /sx_pms.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-info.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-test.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /like.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /we.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /wp.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /wp-indx.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /zoo.php HTTP/1.1" 404 146 "-" "-" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.21

🇬🇧 2a06:4880:6000::91

🇰🇷 220.86.28.189

🇮🇸 216.86.171.246

🇬🇧 213.166.84.45

🇲🇽 186.96.145.241

🇫🇷 163.5.241.58

🇧🇷 152.241.69.127

🇭🇰 123.58.215.196

🇻🇳 116.96.78.68

🇭🇰 101.36.122.139

🇨🇦 85.217.149.17

🇱🇹 81.30.98.44

🇩🇪 69.5.169.115

🇩🇪 69.5.169.35

🇸🇬 47.84.141.50

🇳🇱 45.148.10.151

🇺🇸 195.184.76.220

🇺🇸 192.254.212.95

🇨🇳 180.76.202.69