JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.91.139.228

20.91.139.228 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.91.139.228

Whois 20.91.139.228

IP Abuse Reports for 20.91.139.228:

This IP address has been reported a total of 50 times from 47 distinct sources. 20.91.139.228 was first reported on July 23rd 2026, and the most recent report was 8 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 R.G.	2026-07-23 14:23:59 (8 seconds ago)	(ScanningForFiles) Scanning for files triggerd 20.91.139.228 (SE/Sweden/-): 10 in the last 900 secs; ... show more (ScanningForFiles) Scanning for files triggerd 20.91.139.228 (SE/Sweden/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 cydit.eu	2026-07-23 14:11:38 (12 minutes ago)	phpMyAdmin attack detected by fail2ban on thor.cydit.eu	Web App Attack
🇩🇪 FeG Deutschland	2026-07-23 13:28:15 (55 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 IRISIO	2026-07-23 12:35:19 (1 hour ago)	scans/SQL injection/spam posts : 507 queries	Web App Attack SQL Injection
🇲🇾 Rizzy	2026-07-23 12:17:13 (2 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇦 polycoda	2026-07-23 12:16:49 (2 hours ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-23 12:03:18 (2 hours ago)	(caddyscan) Scanner path probe from 20.91.139.228 (SE/Sweden/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 20.91.139.228 (SE/Sweden/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.91.139.228 - - [23/Jul/2026:12:02:59 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 20.91.139.228 - - [23/Jul/2026:12:03:10 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 20.91.139.228 - - [23/Jul/2026:12:03:12 +0000] "GET /wp-admin/css/ HTTP/1.1" [REDACTED] 200 2627 20.91.139.228 - - [23/Jul/2026:12:03:13 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" [REDACTED] 200 2627 20.91.139.228 - - [23/Jul/2026:12:03:15 +0000] "GET //wp-admin/js/index.php HTTP/1.1" show less	Port Scan
🇫🇷 masterguru	2026-07-23 11:46:34 (2 hours ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇫🇷 pm33	2026-07-23 10:53:47 (3 hours ago)	Excessive crawling HTTP 404	Web App Attack
🇧🇪 taivas.nl	2026-07-23 10:32:09 (3 hours ago)	Bad_requests	Bad Web Bot
🇺🇸 nasset	2026-07-23 09:57:02 (4 hours ago)	20.91.139.228 - - [23/Jul/2026:02:56:56 -0700] "GET /green3.php?p= HTTP/1.1" 403 584 "-" "-" 20.91.1 ... show more 20.91.139.228 - - [23/Jul/2026:02:56:56 -0700] "GET /green3.php?p= HTTP/1.1" 403 584 "-" "-" 20.91.139.228 - - [23/Jul/2026:02:57:00 -0700] "GET /ccc.php?p= HTTP/1.1" 403 584 "-" "-" 20.91.139.228 - - [23/Jul/2026:02:57:00 -0700] "GET /get.php HTTP/1.1" 403 584 "-" "-" 20.91.139.228 - - [23/Jul/2026:02:57:01 -0700] "GET /images.php HTTP/1.1" 403 584 "-" "-" 20.91.139.228 - - [23/Jul/2026:02:57:01 -0700] "GET /alls.php HTTP/1.1" 403 584 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-23 09:40:00 (4 hours ago)	Excessive 404 errors - web scanning/probing	Bad Web Bot
🇫🇷 phoenix1jl96	2026-07-23 09:14:49 (5 hours ago)	2026/07/23 11:14:16 [error] 100879#100879: 84717 open() "/home/user-data/www/default/cgi-bin/index. ... show more 2026/07/23 11:14:16 [error] 100879#100879: 84717 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.91.139.228, server: autoconfig.hvn-pbs.ledemon.us, request: "GET //cgi-bin/index.php HTTP/1.1", host: "autoconfig.hvn-pbs.ledemon.us" 2026/07/23 11:14:18 [error] 100879#100879: *84717 open() "/home/user-data/www/default/cgi-bin/admin.php" failed (2: No such file or directory), client: 20.91.139.228, server: autoconfig.hvn-pbs.ledemon.us, request: "GET //cgi-bin/admin.php HTTP/1.1", host: "autoconfig.hvn-pbs.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇩🇪 KiekerJan	2026-07-23 09:13:59 (5 hours ago)	20.91.139.228 - - [23/Jul/2026:11:13:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.91.139.228 - - [23/Jul/2026:11:13:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.91.139.228 - - [23/Jul/2026:11:13:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇩🇪 Hary74656	2026-07-23 09:08:25 (5 hours ago)	[Thu Jul 23 11:08:17.021137 2026] [core:info] [pid 68910:tid 69045] [client 20.91.139.228:5010] AH00 ... show more [Thu Jul 23 11:08:17.021137 2026] [core:info] [pid 68910:tid 69045] [client 20.91.139.228:5010] AH00128: File does not exist: /home/harald/www/default_host/wp-content/admin.php ... show less	Bad Web Bot

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.83.114.88

🇦🇷 181.225.195.99

🇫🇮 147.185.133.49

🇳🇱 104.23.168.57

🇳🇱 45.156.87.166

🇬🇧 45.133.173.122

🇨🇳 36.133.184.250

🇺🇸 216.73.160.242

🇺🇸 193.19.109.242

🇺🇸 193.19.109.217

🇮🇶 185.158.22.150

🇮🇩 182.11.152.205

🇺🇸 172.252.13.101

🇳🇱 162.159.113.78

🇺🇸 143.198.238.87

🇳🇱 141.101.76.71

🇵🇰 111.92.145.97

🇺🇸 74.235.121.84

🇸🇬 68.183.234.194

🇺🇸 35.197.120.73