JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.48.179.39

20.48.179.39 was found in our database!

This IP was reported 2,848 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.48.179.39

Whois 20.48.179.39

IP Abuse Reports for 20.48.179.39:

This IP address has been reported a total of 2,848 times from 876 distinct sources. 20.48.179.39 was first reported on August 26th 2026, and the most recent report was 6 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-02 08:39:37 (6 seconds ago)	20.48.179.39 - - [02/Sep/2026:10:39:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.179.39 - - [02/Sep/2026:10:39:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.48.179.39 - - [02/Sep/2026:10:39:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 400 230 "-" "-" "-" "X" 20.48.179.39 - - [02/Sep/2026:10:39:36 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.48.179.39 - - [02/Sep/2026:10:39:36 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 400 230 "-" "-" "-" "X" 20.48.179.39 - - [02/Sep/2026:10:39:37 +0200] "GET /aaaa.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.48.179.39 - - [02/Sep/2026:10:39:37 +0200] "GET /aaaa.php HTTP/1.1" 400 230 "-" "-" "-" "X" show less	Brute-Force
Anonymous	2026-09-02 08:39:00 (43 seconds ago)	20.48.179.39 - - [02/Sep/2026:17:38:59 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.179.39 - - [02/Sep/2026:17:38:59 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 441 "-" "-" 20.48.179.39 - - [02/Sep/2026:17:38:59 +0900] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 441 "-" "-" 20.48.179.39 - - [02/Sep/2026:17:38:59 +0900] "GET /aaa.php?p= HTTP/1.1" 403 441 "-" "-" ... show less	Brute-Force
🇫🇮 NoaQT	2026-09-02 08:28:18 (11 minutes ago)	2026-09-02T08:28:17.446080+00:00 ingress-1 haproxy[16887]: 20.48.179.39:36047 [02/Sep/2026:08:28:17. ... show more 2026-09-02T08:28:17.446080+00:00 ingress-1 haproxy[16887]: 20.48.179.39:36047 [02/Sep/2026:08:28:17.445] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 215/201/0/0/0 0/0 "GET /file-gertdxz.php HTTP/1.1" ... show less	DDoS Attack
🇩🇪 Stefan Dreher	2026-09-02 08:27:39 (12 minutes ago)	20.48.179.39 - - [02/Sep/2026:10:27:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.179.39 - - [02/Sep/2026:10:27:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.48.179.39 - - [02/Sep/2026:10:27:37 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 20.48.179.39 - - [02/Sep/2026:10:27:37 +0200] "GET /aaaa.php HTTP/1.1" 404 153 "-" "-" 20.48.179.39 - - [02/Sep/2026:10:27:38 +0200] "GET /config.php HTTP/1.1" 404 153 "-" "-" 20.48.179.39 - - [02/Sep/2026:10:27:38 +0200] "GET /ho.php HTTP/1.1" 404 153 "-" "-" ... show less	Hacking Brute-Force
🇫🇷 Vaction	2026-09-02 08:22:24 (17 minutes ago)	20.48.179.39 - - [02/Sep/2026:10:22:23 +0200] "GET /xx.php HTTP/1.1" 404 381 "-" "-"	Hacking Bad Web Bot Web App Attack
🇩🇪 fds.io	2026-09-02 08:21:04 (18 minutes ago)	detected and blocked repeated malicious bot scanner or crawler requests on the webserver	Bad Web Bot
🇳🇱 vaddilyin	2026-09-02 08:11:49 (27 minutes ago)	{"ClientAddr":"20.48.179.39:54165","ClientHost":"20.48.179.39","ClientPort":"54165","ClientUsername" ... show more {"ClientAddr":"20.48.179.39:54165","ClientHost":"20.48.179.39","ClientPort":"54165","ClientUsername":"-","DownstreamContentSize":187,"DownstreamStatus":404,"Duration":18998781,"OriginContentSize":187,"OriginDuration":18667684,"OriginStatus":404,"Overhead":331097,"RequestAddr":"io.vdkln.com","RequestContentSize":0,"RequestCount":41415,"RequestHost":"io.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"n8n@docker","ServiceAddr":"172.18.0.32:5678","ServiceName":"n8n@docker","ServiceURL":"http://172.18.0.32:5678","StartLocal":"2026-09-02T08:11:48.763646253Z","StartUTC":"2026-09-02T08:11:48.763646253Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-09-02T08:11:48Z"} ... show less	Web App Attack
Anonymous	2026-09-02 08:09:20 (30 minutes ago)	20.48.179.39 - - [02/Sep/2026:08:08:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.179.39 - - [02/Sep/2026:08:08:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 598 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:08:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 28713 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:09:18 +0000] "GET /wp-content/index.php HTTP/1.1" 302 542 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:09:18 +0000] "GET /wp-content/index.php HTTP/1.1" 404 23917 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:09:19 +0000 ... show less	Web App Attack
🇫🇷 phoenix1jl96	2026-09-02 08:08:22 (31 minutes ago)	[Wed Sep 02 09:58:15.078398 2026] [proxy_fcgi:error] [pid 1070135:tid 1070135] [client 20.48.179.39: ... show more [Wed Sep 02 09:58:15.078398 2026] [proxy_fcgi:error] [pid 1070135:tid 1070135] [client 20.48.179.39:45525] AH01071: Got error 'Primary script unknown' [Wed Sep 02 09:58:15.172136 2026] [proxy_fcgi:error] [pid 1070135:tid 1070135] [client 20.48.179.39:45525] AH01071: Got error 'Primary script unknown' [Wed Sep 02 10:08:20.558112 2026] [proxy_fcgi:error] [pid 1072598:tid 1072598] [client 20.48.179.39:46061] AH01071: Got error 'Primary script unknown' [Wed Sep 02 10:08:20.650741 2026] [proxy_fcgi:error] [pid 1072598:tid 1072598] [client 20.48.179.39:46061] AH01071: Got error 'Primary script unknown' [Wed Sep 02 10:08:20.743459 2026] [proxy_fcgi:error] [pid 1072598:tid 1072598] [client 20.48.179.39:46061] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇷 Vaction	2026-09-02 08:07:17 (32 minutes ago)	20.48.179.39 - - [02/Sep/2026:10:07:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.48.179.39 - - [02/Sep/2026:10:07:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 381 "-" "-" show less	Hacking Bad Web Bot Web App Attack
🇫🇷 guillaume illien	2026-09-02 08:05:36 (34 minutes ago)	20.48.179.39 - - [02/Sep/2026:08:05:32 +0000] "GET /xnm-apc.php?p= HTTP/1.1" 301 178 "-" "-" 20.48.1 ... show more 20.48.179.39 - - [02/Sep/2026:08:05:32 +0000] "GET /xnm-apc.php?p= HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:33 +0000] "GET /adminimagess.php HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:34 +0000] "GET /wp-content/index.php HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:34 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:35 +0000] "GET /wp-admin/css/ HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:35 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 178 "-" "-" 20.48.179.39 - - [02/Sep/2026:08:05:36 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇫🇷 largo-it.net	2026-09-02 08:03:57 (35 minutes ago)	[02/Sep/2026:10:03:55.904] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [02/Sep/ ... show more [02/Sep/2026:10:03:55.904] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [02/Sep/2026:10:03:56.100] HTTP 404 - GET /this_is_a_new_hello_world.php [02/Sep/2026:10:03:56.297] HTTP 404 - GET /aaa.php?p= [02/Sep/2026:10:03:56.493] HTTP 404 - GET /images.php [02/Sep/2026:10:03:56.707] HTTP 404 - GET /ops.php [02/Sep/2026:10:03:56.904] HTTP 404 - GET /about.php [02/Sep/2026:10:03:57.100] HTTP 404 - GET /admin.php [02/Sep/2026:10:03:57.297] HTTP 404 - GET /media.php show less	Hacking Bad Web Bot Web App Attack
🇫🇷 phoenix1jl96	2026-09-02 07:48:10 (51 minutes ago)	[Wed Sep 02 09:48:08.689475 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39: ... show more [Wed Sep 02 09:48:08.689475 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39:46027] AH01071: Got error 'Primary script unknown' [Wed Sep 02 09:48:08.783651 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39:46027] AH01071: Got error 'Primary script unknown' [Wed Sep 02 09:48:08.877885 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39:46027] AH01071: Got error 'Primary script unknown' [Wed Sep 02 09:48:08.977973 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39:46027] AH01071: Got error 'Primary script unknown' [Wed Sep 02 09:48:09.072291 2026] [proxy_fcgi:error] [pid 1070100:tid 1070100] [client 20.48.179.39:46027] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇵🇱 Budyn	2026-09-02 07:46:22 (53 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ns3157884.ip-51-83-237.eu \| URI: //wp-admin/js/index.php \| UA: Unknown User-Agent \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 eposs-it.de	2026-09-02 07:45:21 (54 minutes ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=80	Port Scan Hacking

Showing 1 to 15 of 2848 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.158

🇮🇩 203.201.190.25

🇺🇸 162.216.149.99

🇹🇷 91.93.57.195

🇺🇸 34.174.164.224

🇮🇩 202.93.133.140

🇦🇷 186.108.145.45

🇺🇸 173.207.70.42

🇬🇧 167.172.49.228

🇨🇳 150.255.51.250

🇧🇬 79.124.59.182

🇫🇷 75.119.149.212

🇨🇱 34.176.78.67

🇸🇬 34.87.163.238

🇦🇺 34.40.233.165

🇨🇳 218.93.165.88

🇲🇱 217.64.110.248

🇺🇸 216.25.89.133

🇧🇷 189.50.142.78

🇸🇬 165.245.181.217