JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.70.173.30

Recent Activity

Abuse confidence score ?

100% Critical

117 reports

109 reporters · latest 50 seconds ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.70.173.30

This IP address has been reported a total of 117 times from 109 distinct sources. 20.70.173.30 was first reported on September 29th 2026, and the most recent report was 50 seconds ago. In the last 60 days, the top reporter locations were: Germany with 37 reports; France with 11 reports; Netherlands with 11 reports. The most common categories in these recent reports were: Web App Attack 92 times; Brute-Force 31 times; Bad Web Bot 27 times; Hacking 19 times; Port Scan 12 times; Other 18 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Quarks Solutions	2026-09-29 20:11:01 (50 seconds ago)	crowdsecurity/http-probing	Web App Attack Hacking
🇧🇬 HighWay	2026-09-29 20:10:16 (1 minute ago)	20.70.173.30 - - [29/Sep/2026:20:10:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.70.173.30 - - [29/Sep/2026:20:10:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5603 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:02 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5584 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:03 +0000] "GET /v4on3fxtoo5z5cq0yCdefault.php HTTP/1.1" 404 490 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:08 +0000] "GET /xiugai.php HTTP/1.1" 404 471 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:08 +0000] "GET /sxxb.php HTTP/1.1" 404 469 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:10 +0000] "GET /classwithtostring.php HTTP/1.1" 404 482 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:11 +0000] "GET /key.php HTTP/1.1" 404 468 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:11 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 473 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:12 +0000] "GET /dehnl.php HTTP/1.1" 404 470 "-" "-" 20.70.173.30 - - [29/Sep/2026:20:10:12 +0000] "GET //cgi-bin/admin.php HTTP/1.1" 404 478 "-" "-" 20.70.173.30 - - ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-29 20:07:03 (4 minutes ago)	Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php ... show more Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php. UTC: 2026-09-29 20:04:52. show less	Web App Attack
🇫🇷 AGEPCom	2026-09-29 20:06:32 (5 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
Anonymous	2026-09-29 20:05:04 (6 minutes ago)	PHP file probing detected by Fail2Ban	Web App Attack
🇫🇷 spot	2026-09-29 20:01:44 (10 minutes ago)	20.70.173.30 - - [29/Sep/2026:21:01:44 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.70.173.30 - - [29/Sep/2026:21:01:44 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 642 "-" "-" ... show less	Web App Attack Hacking
🇺🇸 Rip	2026-09-29 19:57:15 (14 minutes ago)	Unauthorized access attempts across vhosts probing for web-shells and backdoors.	Web App Attack
🇩🇪 David Ferneding	2026-09-29 19:56:49 (15 minutes ago)	Blocked by UFW (TCP on 80) Source port: 16456 TTL: 117 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 16456 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 20.70.173.30) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-09-29 19:54:57 (16 minutes ago)	[Tue Sep 29 21:54:56.031128 2026] [php:error] [pid 3476190] [client 20.70.173.30:38856] script '/var ... show more [Tue Sep 29 21:54:56.031128 2026] [php:error] [pid 3476190] [client 20.70.173.30:38856] script '/var/www/11spielerinnen.de/public_html/1.php' not found or unable to stat [Tue Sep 29 21:54:56.468808 2026] [php:error] [pid 3476190] [client 20.70.173.30:38856] script '/var/www/11spielerinnen.de/public_html/3PJcpMFsD8B.php' not found or unable to stat [Tue Sep 29 21:54:56.468808 2026] [php:error] [pid 3476190] [client 20.70.173.30:38856] script '/var/www/11spielerinnen.de/public_html/3PJcpMFsD8B.php' not found or unable to stat [Tue Sep 29 21:54:56.754662 2026] [php:error] [pid 3476190] [client 20.70.173.30:38856] script '/var/www/11spielerinnen.de/public_html/cdc.php' not found or unable to stat ... show less	Bad Web Bot
🇩🇪 MBombeck	2026-09-29 19:50:04 (21 minutes ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇫🇮 as211431.net	2026-09-29 19:48:20 (23 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /classwithtostring.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 GoodOldTOS	2026-09-29 19:48:06 (23 minutes ago)	Bad keywords detected in request: /wp-content/	Web App Attack
🇪🇸 robotstxt	2026-09-29 19:43:49 (28 minutes ago)	20.70.173.30 - - [29/Sep/2026:19:42:51 +0000] "GET /classwithtostring.php HTTP/2.0" 400 193 "-" "-" ... show more 20.70.173.30 - - [29/Sep/2026:19:42:51 +0000] "GET /classwithtostring.php HTTP/2.0" 400 193 "-" "-" "20.70.173.30" edge="104.22.127.51" 20.70.173.30 - - [29/Sep/2026:19:42:51 +0000] "GET /key.php HTTP/2.0" 400 193 "-" "-" "20.70.173.30" edge="104.22.127.51" 20.70.173.30 - - [29/Sep/2026:19:42:52 +0000] "GET /BDKR28WP.php HTTP/2.0" 400 193 "-" "-" "20.70.173.30" edge="104.22.127.51" 20.70.173.30 - - [29/Sep/2026:19:42:53 +0000] "GET /dehnl.php HTTP/2.0" 400 193 "-" "-" "20.70.173.30" edge="104.22.127.51" 20.70.173.30 - - [29/Sep/2026:19:42:54 +0000] "GET //cgi-bin/admin.php HTTP/2.0" 400 193 "-" "-" "20.70.173.30" edge="104.22.127.51" ... show less	Web Spam Web App Attack
Anonymous	2026-09-29 19:39:50 (32 minutes ago)	Http Port:80 (http_status:403) - Agent:-	Web App Attack
Anonymous	2026-09-29 19:39:43 (32 minutes ago)	[Tue Sep 29 21:39:40.898327 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var ... show more [Tue Sep 29 21:39:40.898327 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var/www/11spielerinnen.de/public_html/this_is_a_new_hello_world.php' not found or unable to stat [Tue Sep 29 21:39:41.513664 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var/www/11spielerinnen.de/public_html/v4on3fxtoo5z5cq0yCdefault.php' not found or unable to stat [Tue Sep 29 21:39:41.807517 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var/www/11spielerinnen.de/public_html/xiugai.php' not found or unable to stat [Tue Sep 29 21:39:42.130830 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var/www/11spielerinnen.de/public_html/sxxb.php' not found or unable to stat [Tue Sep 29 21:39:42.427638 2026] [php:error] [pid 3476192] [client 20.70.173.30:38806] script '/var/www/11spielerinnen.de/public_html/classwithtostring.php' not found or unable to stat ... show less	Bad Web Bot

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇫🇮 80.66.83.83

🇺🇸 188.114.97.11

🇷🇺 176.52.32.202

🇸🇬 165.154.236.104

🇺🇸 162.239.29.145

🇭🇰 129.226.123.65

🇺🇸 98.159.39.6

🇯🇴 77.245.7.242

🇺🇸 66.240.205.34

🇳🇱 45.148.10.151

🇭🇰 43.224.227.245

🇺🇸 35.245.225.220

🇮🇩 34.101.223.15

🇫🇷 217.60.198.90

🇧🇷 189.125.111.177

🇧🇷 179.176.210.17

🇷🇺 95.191.69.72

🇩🇪 94.154.46.250

🇳🇱 51.159.91.169