JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.79.30.30

20.79.30.30 was found in our database!

This IP was reported 297 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.79.30.30

Whois 20.79.30.30

IP Abuse Reports for 20.79.30.30:

This IP address has been reported a total of 297 times from 253 distinct sources. 20.79.30.30 was first reported on July 31st 2026, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Inartis	2026-07-31 22:35:01 (20 minutes ago)	20.79.30.30 - - [01/Aug/2026:00:35:01 +0200] "GET /1.php HTTP/1.1" 302 409 "-" "-" ...	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-07-31 22:00:52 (54 minutes ago)	wp-login attack [31/Jul/2026:15:03:41	Brute-Force Web App Attack
🇺🇸 lavnet.net	2026-07-31 21:37:13 (1 hour ago)	20.79.30.30 - - [31/Jul/2026:21:37:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.79.30.30 - - [31/Jul/2026:21:37:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2066 "-" "-" 20.79.30.30 - - [31/Jul/2026:21:37:13 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 2031 "-" "-" 20.79.30.30 - - [31/Jul/2026:21:37:13 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 2031 "-" "-" ... show less	Brute-Force
🇩🇪 netclix.gr	2026-07-31 21:21:02 (1 hour ago)	(c5_web_scan) Custom5 Aggressive Web Scan 20.79.30.30 (DE/Germany/-): 3 in the last 4600 secs; Ports ... show more (c5_web_scan) Custom5 Aggressive Web Scan 20.79.30.30 (DE/Germany/-): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 20.79.30.30 - - [01/Aug/2026:00:20:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 416 "-" "-" default:80 20.79.30.30 - - [01/Aug/2026:00:20:45 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 416 "-" "-" default:80 20.79.30.30 - - [01/Aug/2026:00:20:46 +0300] "GET /wp-admin/about.php HTTP/1.1" 404 416 "-" "-" show less	Port Scan
🇳🇱 oisecnet	2026-07-31 21:02:25 (1 hour ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-31. 17 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-31. 17 requests from this IP. show less	Brute-Force Web App Attack SSH
🇫🇷 Entalpi.net	2026-07-31 20:49:12 (2 hours ago)	Repeated requests against sensitive web endpoints	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-31 20:31:43 (2 hours ago)	furst.com.au:443 20.79.30.30 - - [01/Aug/2026:06:31:41 +1000] "GET /themes.php HTTP/1.1" 404 76447 " ... show more furst.com.au:443 20.79.30.30 - - [01/Aug/2026:06:31:41 +1000] "GET /themes.php HTTP/1.1" 404 76447 "-" "-" ... show less	Web App Attack
🇦🇹 René Hickersberger	2026-07-31 20:22:26 (2 hours ago)	malicious bot detected: violations="hit-honeypot"; user_agent=""	Web App Attack
Anonymous	2026-07-31 20:09:15 (2 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-07-31 19:45:07 (3 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 HamSammich	2026-07-31 19:32:18 (3 hours ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-07-31T19:32Z).	Brute-Force Web App Attack
🇺🇸 zwebvigil	2026-07-31 19:27:44 (3 hours ago)	20.79.30.30 [31/Jul/2026:12:27:43 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTT ... show more 20.79.30.30 [31/Jul/2026:12:27:43 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>ercontent.com" 546 20.79.30.30 [31/Jul/2026:12:27:43 -0700] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>ercontent.com" 199 20.79.30.30 [31/Jul/2026:12:27:43 -0700] "GET /wp-admin/about.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>ercontent.com" 273 20.79.30.30 [31/Jul/2026:12:27:43 -0700] "GET /themes.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>ercontent.com" 239 20.79.30.30 [31/Jul/2026:12:27:44 -0700] "GET /readme.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>ercontent.com" 211 20.79.30.30 [31/Jul/2026:12:27:44 -0700] "GET /la.php HTTP/1.1" 401 381 "-" port=16715 "-" "-" "-" "<ghost>er show less	Web App Attack
🇬🇧 blik2108	2026-07-31 18:44:04 (4 hours ago)	20.79.30.30 - - [31/Jul/2026:18:44:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.79.30.30 - - [31/Jul/2026:18:44:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:01 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /wp-admin/about.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /themes.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /readme.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /la.php HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /login.php?p= HTTP/1.1" 404 3431 "-" "-" "-" 20.79.30.30 - - [31/Jul/2026:18:44:02 +0000] "GET /m.php HTTP/1.1" 404 3431 "-" "-" "-" ... show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-31 18:04:53 (4 hours ago)	2026-07-31 @ 20:04:52 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-31 @ 20:04:52 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇭🇺 kranem	2026-07-31 18:00:15 (4 hours ago)	Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /doti.php Timestamp: 2026-07-31T16:35:24Z User-Agent: empty show less	Bad Web Bot

Showing 1 to 15 of 297 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.15.228.240

🇺🇸 107.172.128.69

🇹🇷 31.210.55.129

🇩🇪 20.79.250.162

🇵🇬 14.1.81.241

🇨🇳 218.13.26.42

🇩🇪 213.209.159.225

🇳🇱 213.176.26.175

🇳🇱 195.178.110.232

🇵🇱 194.165.16.167

🇮🇩 160.187.174.22

🇭🇰 159.138.24.42

🇮🇳 122.166.49.42

🇮🇩 118.99.115.14

🇨🇳 115.191.22.87

🇮🇩 110.35.80.116

🇺🇸 85.239.151.10

🇹🇷 78.135.82.127

🇳🇱 45.148.10.151

🇳🇱 45.148.10.67