JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.251.215

20.48.251.215 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.251.215

Whois 20.48.251.215

IP Abuse Reports for 20.48.251.215:

This IP address has been reported a total of 39 times from 38 distinct sources. 20.48.251.215 was first reported on July 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 06:02:10 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-07-29 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-07-28 05:07:04 (3 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-28 05:05:27 (3 days ago)	Too many Status 40X (16)	Brute-Force Web App Attack
Anonymous	2026-07-28 05:05:24 (3 days ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=648	Hacking
🇩🇪 KiekerJan	2026-07-28 04:49:12 (3 days ago)	20.48.251.215 - - [28/Jul/2026:06:49:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.48.251.215 - - [28/Jul/2026:06:49:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.48.251.215 - - [28/Jul/2026:06:49:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-28 04:49:00 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 thedreamer.nl	2026-07-28 04:47:50 (3 days ago)	20.48.251.215 - - [28/Jul/2026:06:47:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.48.251.215 - - [28/Jul/2026:06:47:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.48.251.215 - - [28/Jul/2026:06:47:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.48.251.215 - - [28/Jul/2026:06:47:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.48.251.215 - - [28/Jul/2026:06:47:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-07-28 04:46:09 (3 days ago)	[Tue Jul 28 06:46:08.337387 2026] [proxy_fcgi:error] [pid 6724:tid 6790] [client 20.48.251.215:50227 ... show more [Tue Jul 28 06:46:08.337387 2026] [proxy_fcgi:error] [pid 6724:tid 6790] [client 20.48.251.215:50227] AH01071: Got error 'Primary script unknown' [Tue Jul 28 06:46:08.582548 2026] [proxy_fcgi:error] [pid 6724:tid 6823] [client 20.48.251.215:50227] AH01071: Got error 'Primary script unknown' [Tue Jul 28 06:46:08.787059 2026] [proxy_fcgi:error] [pid 6724:tid 6791] [client 20.48.251.215:50227] AH01071: Got error 'Primary script unknown' [Tue Jul 28 06:46:08.984456 2026] [proxy_fcgi:error] [pid 6724:tid 6817] [client 20.48.251.215:50227] AH01071: Got error 'Primary script unknown' [Tue Jul 28 06:46:09.209082 2026] [proxy_fcgi:error] [pid 6724:tid 6784] [client 20.48.251.215:50227] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇵🇱 sefinek.net	2026-07-28 04:45:25 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /fmws.php \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 ipoac.nl	2026-07-28 04:45:03 (3 days ago)	ipoac.nl:80 20.48.251.215 - - [28/Jul/2026:06:45:03 +0200] - "GET /wp-admin/css/colors/coffee/wp-ado ... show more ipoac.nl:80 20.48.251.215 - - [28/Jul/2026:06:45:03 +0200] - "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 403 1623 "-" "-" show less	Bad Web Bot
🇮🇪 Jim Keir	2026-07-28 04:44:56 (3 days ago)	2026-07-28 04:44:56 20.48.251.215 File scanning, blocking 20.48.251.215 for 5 minutes	Web App Attack
🇫🇮 inlink.ltd	2026-07-28 04:43:17 (3 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇸🇪 vaia.cloud	2026-07-28 04:40:02 (3 days ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-28 04:38:44 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.233.194.148

🇧🇷 181.192.93.207

🇸🇪 171.25.158.68

🇺🇸 162.216.150.159

🇯🇵 160.251.169.213

🇺🇸 150.107.38.162

🇫🇮 147.185.133.135

🇫🇷 137.74.114.131

🇮🇪 98.71.8.129

🇺🇸 91.230.168.163

🇺🇸 71.6.134.232

🇲🇾 49.124.151.70

🇲🇾 47.250.37.179

🇹🇷 45.158.14.205

🇺🇸 34.148.224.3

🇧🇪 34.140.142.223

🇺🇸 20.14.87.238

🇪🇸 5.182.83.231

🇳🇱 2001:67c:e60:c0c:192:42:116:14

🇹🇭 223.24.190.9