JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.44.167

20.48.44.167 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.44.167

Whois 20.48.44.167

IP Abuse Reports for 20.48.44.167:

This IP address has been reported a total of 119 times from 109 distinct sources. 20.48.44.167 was first reported on July 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-07 06:32:45 (2 weeks ago)	(caddyscan) Scanner path probe from 20.48.44.167 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; Di ... show more (caddyscan) Scanner path probe from 20.48.44.167 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.48.44.167 - - [07/Jul/2026:06:32:01 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 20.48.44.167 - - [07/Jul/2026:06:32:40 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 20.48.44.167 - - [07/Jul/2026:06:32:40 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" [REDACTED] 200 2627 20.48.44.167 - - [07/Jul/2026:06:32:44 +0000] "GET /wp-admin/css/ HTTP/1.1" [REDACTED] 200 2627 20.48.44.167 - - [07/Jul/2026:06:32:44 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" show less	Port Scan
🇮🇹 mediarama.com	2026-07-07 06:31:14 (2 weeks ago)	Banned by Fail2Ban	Web App Attack
Anonymous	2026-07-07 06:26:25 (2 weeks ago)	WordPress HTTP Brute Force Login Attempt.	Brute-Force
🇨🇦 polycoda	2026-07-07 06:24:43 (2 weeks ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ❌ Excess ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-07-07 06:22:24 (2 weeks ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.48.44.167 (JP/Japan/-): 1 in the last 3600 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.48.44.167 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.48.44.167 - - [07/Jul/2026:08:22:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 322 "-" "-" "-" host=mail.petitrose.it show less	Port Scan
🇩🇪 london2038.com	2026-07-07 06:21:24 (2 weeks ago)	Probing for exploits 20.48.44.167 - - [07/Jul/2026:08:21:03 +0200] "GET /wp-content/plugins/hellopre ... show more Probing for exploits 20.48.44.167 - - [07/Jul/2026:08:21:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 20.48.44.167 - - [07/Jul/2026:08:21:23 +0200] "GET //a.php HTTP/1.1" 422 0 "-" "-" show less	Hacking Web App Attack
🇩🇪 IVski	2026-07-07 06:18:28 (2 weeks ago)	IVski WAF \| WordPress scanner detected - probing wp-content, xmlrpc or wp-login	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-07 06:18:21 (2 weeks ago)	Trying to access config files	Web App Attack
🇩🇪 macrob	2026-07-07 06:16:43 (2 weeks ago)	2026/07/07 06:16:12 [error] 1941535#1941535: 356918355 access forbidden by rule, client: 20.48.44.1 ... show more 2026/07/07 06:16:12 [error] 1941535#1941535: 356918355 access forbidden by rule, client: 20.48.44.167, server: binixo.pl, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "binixo.pl" 2026/07/07 06:16:40 [error] 1941537#1941537: 356936551 access forbidden by rule, client: 20.48.44.167, server: binixo.pl, request: "GET /wp-includes/sodium_compat/ HTTP/2.0", host: "binixo.pl" 2026/07/07 06:16:42 [error] 1941537#1941537: 356936551 access forbidden by rule, client: 20.48.44.167, server: binixo.pl, request: "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇫🇮 inlink.ltd	2026-07-07 06:11:23 (2 weeks ago)	Known malicious PHP file or CMS probe	Web App Attack
🇱🇻 garmtech.com	2026-07-07 06:10:09 (2 weeks ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-07 06:10:01 (2 weeks ago)	wp-includes scan	Web App Attack
🇦🇺 aranguren.org	2026-07-07 06:09:48 (2 weeks ago)	20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 986 "-" "-" 20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET ///admin.php HTTP/1.1" 404 16 "-" "-" 20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET /blurbs.php HTTP/1.1" 404 16 "-" "-" 20.48.44.167 - - [07/Jul/2026:16:09:47 +1000] "GET /bajah.php HTTP/1.1" 404 16 "-" "-" 20.48.44.167 - - [07/Jul/2026:16:09:48 +1000] "GET //a.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇳🇱 sernate	2026-07-07 06:09:44 (2 weeks ago)	(404blocker) 404 trigger 20.48.44.167 (JP/Japan/-): 80 in the last 3600 secs; Ports: ; Direction: i ... show more (404blocker) 404 trigger 20.48.44.167 (JP/Japan/-): 80 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force
🇩🇪 big-cloud.nl	2026-07-07 06:09:20 (2 weeks ago)	Try to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack

Showing 46 to 60 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.233

🇮🇹 172.213.144.209

🇩🇪 172.71.144.135

🇭🇰 152.32.189.128

🇸🇦 144.24.209.174

🇨🇳 106.75.227.248

🇺🇸 104.234.53.59

🇧🇪 34.156.249.167

🇨🇳 222.195.92.204

🇹🇼 198.235.24.57

🇬🇧 193.46.0.235

🇺🇸 184.105.247.247

🇫🇷 173.249.52.138

🇩🇪 172.71.144.134

🇺🇸 158.94.211.49

🇺🇸 147.45.60.200

🇱🇹 141.98.9.33

🇨🇳 111.178.76.226

🇺🇸 67.205.165.166

🇧🇪 34.156.107.43