JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.250.41

20.48.250.41 was found in our database!

This IP was reported 841 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.250.41

Whois 20.48.250.41

IP Abuse Reports for 20.48.250.41:

This IP address has been reported a total of 841 times from 606 distinct sources. 20.48.250.41 was first reported on August 26th 2026, and the most recent report was 1 second ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-08-28 07:33:04 (1 second ago)	blocked for webapp attack \| path requested: /init.php \| seen at 2026-08-28 07:32:24.452 \|	Web App Attack
🇫🇮 paissangroup	2026-08-28 07:02:04 (31 minutes ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-28 07:01:33 (31 minutes ago)	Blocked by siteaihub.com: auto: 88 problem events in last 1m	Hacking Bad Web Bot
🇭🇺 miszterx.hu	2026-08-28 06:57:39 (35 minutes ago)	XORP (haproxy): 528x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ... show more XORP (haproxy): 528x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-08-28 06:54:47 (38 minutes ago)	2026-08-28 @ 08:54:47 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-08-28 @ 08:54:47 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
Anonymous	2026-08-28 06:51:47 (41 minutes ago)	[Fri Aug 28 08:51:46.282379 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH0163 ... show more [Fri Aug 28 08:51:46.282379 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH01630: client denied by server configuration: /var/www/html/default/wp-content [Fri Aug 28 08:51:46.503253 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH01630: client denied by server configuration: /var/www/html/default/this_is_a_new_hello_world.php [Fri Aug 28 08:51:46.682713 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH01630: client denied by server configuration: /var/www/html/default/Jcrop.php [Fri Aug 28 08:51:46.887324 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH01630: client denied by server configuration: /var/www/html/default/gettest.php [Fri Aug 28 08:51:47.082008 2026] [authz_core:error] [pid 655620] [client 20.48.250.41:24541] AH01630: client denied by server configuration: /var/www/html/default/menu.php ... show less	Web App Attack
🇩🇪 hchristo	2026-08-28 06:49:29 (43 minutes ago)	[Fri Aug 28 08:49:28.432834 2026] [proxy_fcgi:error] [pid 44456:tid 44514] [client 20.48.250.41:5003 ... show more [Fri Aug 28 08:49:28.432834 2026] [proxy_fcgi:error] [pid 44456:tid 44514] [client 20.48.250.41:50038] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:49:28.662616 2026] [proxy_fcgi:error] [pid 44456:tid 44551] [client 20.48.250.41:50038] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:49:28.865436 2026] [proxy_fcgi:error] [pid 44456:tid 44547] [client 20.48.250.41:50038] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:49:29.091383 2026] [proxy_fcgi:error] [pid 44456:tid 44515] [client 20.48.250.41:50038] AH01071: Got error 'Primary script unknown' [Fri Aug 28 08:49:29.294094 2026] [proxy_fcgi:error] [pid 44456:tid 44535] [client 20.48.250.41:50038] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-08-28 06:44:22 (48 minutes ago)	20.48.250.41 - - [28/Aug/2026:08:44:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.250.41 - - [28/Aug/2026:08:44:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" 20.48.250.41 - - [28/Aug/2026:08:44:22 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 162 "-" "-" 20.48.250.41 - - [28/Aug/2026:08:44:22 +0200] "GET /Jcrop.php HTTP/1.1" 404 162 "-" "-" 20.48.250.41 - - [28/Aug/2026:08:44:22 +0200] "GET /gettest.php HTTP/1.1" 404 162 "-" "-" 20.48.250.41 - - [28/Aug/2026:08:44:22 +0200] "GET /menu.php HTTP/1.1" 404 162 "-" "-" ... show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇫🇷 ISPLtd	2026-08-28 06:43:54 (49 minutes ago)	20.48.250.41 [28/Aug/2026:03:43:50 -0300] gloria.mikeattwood.org:80 URL:/wp-content/plugins/hellopre ... show more 20.48.250.41 [28/Aug/2026:03:43:50 -0300] gloria.mikeattwood.org:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php 20.48.250.41 [28/Aug/2026:03:43:53 -0300] gloria.mikeattwood.org:80 URL:/dragonshell.php "GET /dragonshell.php ... show less	Hacking Web App Attack
🇫🇷 pawel	2026-08-28 06:41:17 (51 minutes ago)	[Fri Aug 28 08:41:15.487124 2026] [php:error] [pid 397420] [client 20.48.250.41:26880] script '/home ... show more [Fri Aug 28 08:41:15.487124 2026] [php:error] [pid 397420] [client 20.48.250.41:26880] script '/home/pawel/public_html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Aug 28 08:41:15.859295 2026] [php:error] [pid 397420] [client 20.48.250.41:26880] script '/home/pawel/public_html/Jcrop.php' not found or unable to stat [Fri Aug 28 08:41:16.322643 2026] [php:error] [pid 397420] [client 20.48.250.41:26880] script '/home/pawel/public_html/gettest.php' not found or unable to stat ... show less	Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-08-28 06:34:04 (59 minutes ago)	blocked for webapp attack \| path requested: /init.php \| seen at 2026-08-28 06:33:21.129 \|	Web App Attack
🇺🇸 revslowmo	2026-08-28 06:26:41 (1 hour ago)	Bot attempt ssh bruteforce	Brute-Force SSH
🇸🇪 sweplox.se	2026-08-28 06:24:56 (1 hour ago)	Ip 20.48.250.41 performed 'crowdsecurity/http-probing' (11 events over 2.956733184s) at 2026-08-28 0 ... show more Ip 20.48.250.41 performed 'crowdsecurity/http-probing' (11 events over 2.956733184s) at 2026-08-28 06:24:55.770504376 +0000 UTC show less	Web App Attack
🇺🇸 kosada.com	2026-08-28 06:19:40 (1 hour ago)	Web vulnerability probing: /menu.php	Web App Attack
🇺🇸 azminawwar	2026-08-28 06:05:55 (1 hour ago)	[20.48.250.41] triggered by honeypot on port [80], Timestamp [2026-08-28T06:05:55Z]METHOD=GET PATH=/ ... show more [20.48.250.41] triggered by honeypot on port [80], Timestamp [2026-08-28T06:05:55Z]METHOD=GET PATH=/wp-content/plugins/hellopress/wp_filemanager.php HTTP=HTTP/1.1 UA="-" HOST="sunny.ticis.eu" REF="-" show less	Port Scan Hacking

Showing 1 to 15 of 841 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:988:1000:2efb:49a7:327:f58c

🇧🇪 198.235.24.231

🇳🇱 195.178.110.217

🇦🇷 149.46.1.143

🇹🇭 118.194.251.58

🇺🇸 91.230.168.24

🇷🇺 87.251.66.118

🇸🇪 83.191.179.185

🇺🇸 52.186.183.216

🇬🇧 35.203.211.137

🇨🇦 4.205.62.107

🇺🇸 2400:cb00:119:1000:b613:90a9:25d4:3042

🇨🇱 201.239.226.184

🇧🇪 198.235.24.230

🇬🇧 194.50.235.140

🇳🇱 193.176.31.251

🇵🇸 188.0.96.151

🇩🇪 167.94.145.18

🇦🇷 149.107.244.232

🇹🇭 147.50.231.135