JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.52.41.200

20.52.41.200 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.52.41.200

Whois 20.52.41.200

IP Abuse Reports for 20.52.41.200:

This IP address has been reported a total of 157 times from 135 distinct sources. 20.52.41.200 was first reported on August 22nd 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 electronico	2026-08-22 20:46:23 (9 minutes ago)	20.52.41.200 - - [23/Aug/2026:07:46:19 +1100] "GET /inputs.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 ( ... show more 20.52.41.200 - - [23/Aug/2026:07:46:19 +1100] "GET /inputs.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.52.41.200 - - [23/Aug/2026:07:46:20 +1100] "GET /admin.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.52.41.200 - - [23/Aug/2026:07:46:20 +1100] "GET /goods.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.52.41.200 - - [23/Aug/2026:07:46:20 +1100] "GET /file.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.52.41.200 - - [23/Aug/2026:07:46:21 +1100] "GET /wp-content/themes/admin.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa ... show less	Brute-Force Web App Attack
🇩🇪 yvoictra	2026-08-22 20:40:05 (15 minutes ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-admin-interface-probing	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-22 20:36:52 (18 minutes ago)	dlcarterauthor.com:443 20.52.41.200 - - [23/Aug/2026:06:36:50 +1000] "GET /inputs.php HTTP/1.1" 404 ... show more dlcarterauthor.com:443 20.52.41.200 - - [23/Aug/2026:06:36:50 +1000] "GET /inputs.php HTTP/1.1" 404 68151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇪🇸 netfactotum	2026-08-22 20:34:25 (21 minutes ago)		Hacking Web App Attack
Anonymous	2026-08-22 20:32:02 (23 minutes ago)	WordPress/Woo probe	Web App Attack
Anonymous	2026-08-22 19:59:20 (56 minutes ago)	Aggressive web scan	Web App Attack
Anonymous	2026-08-22 19:49:34 (1 hour ago)	[Sat Aug 22 21:49:33.150751 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/ ... show more [Sat Aug 22 21:49:33.150751 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/www/11spielerinnen.de/public_html/inputs.php' not found or unable to stat [Sat Aug 22 21:49:33.155666 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/www/11spielerinnen.de/public_html/admin.php' not found or unable to stat [Sat Aug 22 21:49:33.160364 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/www/11spielerinnen.de/public_html/goods.php' not found or unable to stat [Sat Aug 22 21:49:33.165243 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/www/11spielerinnen.de/public_html/file.php' not found or unable to stat [Sat Aug 22 21:49:33.175058 2026] [php:error] [pid 3765963] [client 20.52.41.200:1239] script '/var/www/11spielerinnen.de/public_html/adminfuns.php' not found or unable to stat ... show less	Bad Web Bot
🇩🇪 macrob	2026-08-22 19:35:50 (1 hour ago)	2026/08/22 19:35:48 [error] 3074755#3074755: 509086976 access forbidden by rule, client: 20.52.41.2 ... show more 2026/08/22 19:35:48 [error] 3074755#3074755: 509086976 access forbidden by rule, client: 20.52.41.200, server: ca5h.win, request: "GET /admin.php HTTP/1.1", host: "ca5h.win" 2026/08/22 19:35:48 [error] 3074755#3074755: 509086976 access forbidden by rule, client: 20.52.41.200, server: ca5h.win, request: "GET /wp-content/themes/admin.php HTTP/1.1", host: "ca5h.win" 2026/08/22 19:35:48 [error] 3074755#3074755: 509086976 access forbidden by rule, client: 20.52.41.200, server: ca5h.win, request: "GET /adminfuns.php HTTP/1.1", host: "ca5h.win" ... show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-08-22 19:30:37 (1 hour ago)	2026-08-22 @ 21:30:37 (CET) ~ Blocked for trying to access: /inputs.php	Web App Attack
🇺🇦 Olexiy Backend	2026-08-22 19:26:36 (1 hour ago)	20.52.41.200 ...	Bad Web Bot Web App Attack
🇬🇧 sc user	2026-08-22 19:24:33 (1 hour ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇺🇸 ipblock.com	2026-08-22 19:23:00 (1 hour ago)	IPBlock protected site ID [2711-bg]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-22 19:10:14 (1 hour ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 antlac1	2026-08-22 18:59:17 (1 hour ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇬🇷 setupgr	2026-08-22 18:55:18 (2 hours ago)	(mod_security) mod_security (id:1000001) triggered by 20.52.41.200 (DE/Germany/Hesse/Frankfurt am Ma ... show more (mod_security) mod_security (id:1000001) triggered by 20.52.41.200 (DE/Germany/Hesse/Frankfurt am Main/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 22 21:55:15.753830 2026] [security2:error] [pid 713261:tid 713378] [client 20.52.41.200:4068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/cong.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/cong.php"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-content/cong.php"] [unique_id "aonwk9fHTQp2y4bhGG6sSAAAAFY"] show less	Port Scan

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 151.240.105.5

🇳🇱 91.92.40.37

🇩🇪 213.209.159.148

🇧🇪 198.235.24.228

🇺🇸 66.132.224.86

🇺🇸 45.79.186.176

🇬🇧 35.203.211.197

🇹🇼 198.235.24.83

🇳🇱 195.178.110.218

🇬🇧 193.163.125.148

🇦🇷 186.23.120.49

🇨🇳 120.198.61.146

🇫🇷 91.231.89.52

🇸🇬 52.230.100.152

🇪🇹 196.189.126.10

🇦🇷 186.125.212.22

🇩🇿 154.241.20.35

🇧🇬 91.148.190.150

🇺🇸 64.95.14.243

🇲🇾 49.124.151.7