JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.248.215

20.48.248.215 was found in our database!

This IP was reported 307 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.248.215

Whois 20.48.248.215

IP Abuse Reports for 20.48.248.215:

This IP address has been reported a total of 307 times from 256 distinct sources. 20.48.248.215 was first reported on May 26th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 andreighitan	2026-06-01 00:00:00 (4 days ago)	Coordinated Azure webshell scanning campaign against 84.46.253.134. Active May-Jun 2026. ZAC Bayern ... show more Coordinated Azure webshell scanning campaign against 84.46.253.134. Active May-Jun 2026. ZAC Bayern ref BY0257-500359-26/8. show less	Brute-Force
🇦🇺 CalmBrain	2026-05-30 16:00:12 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇪🇸 Gem	2026-05-29 22:11:14 (6 days ago)	Unauthorized web scan.	Web App Attack
🇩🇪 Holger	2026-05-29 19:18:41 (6 days ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-05-28 08:11:30 (1 week ago)	Trying to access config files	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-27 21:59:32 (1 week ago)	Auto-ban: 313 malicious requests on 2026-05-26 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 313 malicious requests on 2026-05-26 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇩🇪 Holger	2026-05-27 18:34:55 (1 week ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-05-27 10:05:18 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2026-05-27 09:06:00 (1 week ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 May 26. 22:47:15 Source IP: 20.48. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 May 26. 22:47:15 Source IP: 20.48.248.215 Portion of the log(s): 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /fone1.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /cu.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /d.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /bthil.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:12 +0200] "GET /tires.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /test1.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /w.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /tiny.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /themes.php HTTP/1.1" 404 153 "-" "-" 20.48.248.215 - [26/May/2026:22:47:11 +0200] "GET /x402.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
Anonymous	2026-05-27 06:43:02 (1 week ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-05-27 05:14:05 (1 week ago)	388 attacks on PHP URLs: GET /3369.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2026-05-27 04:06:38 (1 week ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 infra-monitor	2026-05-27 00:00:10 (1 week ago)	Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, crowdsecurity/http-crawl- ... show more Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, crowdsecurity/http-crawl-non_statics, +2 more show less	Port Scan Hacking Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-05-26 23:30:52 (1 week ago)	[Wed May 27 02:30:47.619751 2026] [proxy_fcgi:error] [pid 215711:tid 215731] [client 20.48.248.215:0 ... show more [Wed May 27 02:30:47.619751 2026] [proxy_fcgi:error] [pid 215711:tid 215731] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' [Wed May 27 02:30:47.800053 2026] [proxy_fcgi:error] [pid 215711:tid 215741] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' [Wed May 27 02:30:47.941727 2026] [proxy_fcgi:error] [pid 215711:tid 215723] [client 20.48.248.215:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇫🇷 LRNP	2026-05-26 23:27:15 (1 week ago)	_:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanag ... show more _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /adminfuns.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /sx_pms.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-info.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:14 +0000] "GET /wp-test.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /like.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /we.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /wp.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /wp-indx.php HTTP/1.1" 404 146 "-" "-" _:80 20.48.248.215 - - [26/May/2026:23:27:15 +0000] "GET /zoo.php HTTP/1.1" 404 146 "-" "-" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 307 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 188.166.165.1

🇺🇸 162.216.149.202

🇮🇳 139.59.6.237

🇩🇪 69.5.169.70

🇦🇿 213.154.15.25

🇺🇸 199.229.254.129

🇳🇱 192.142.24.7

🇺🇸 162.216.149.203

🇺🇸 153.66.187.143

🇺🇸 147.185.132.224

🇮🇳 122.180.21.11

🇭🇰 114.111.53.214

🇯🇵 101.36.105.94

🇨🇳 39.144.197.85

🇬🇧 35.203.211.205

🇮🇪 34.243.126.22

🇳🇱 195.178.110.30

🇫🇮 193.160.100.56

🇨🇴 190.102.127.89

🇳🇱 185.242.226.72