JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.100.183.137

20.100.183.137 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 1%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.100.183.137

Whois 20.100.183.137

IP Abuse Reports for 20.100.183.137:

This IP address has been reported a total of 131 times from 91 distinct sources. 20.100.183.137 was first reported on April 27th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-06 15:38:20 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-05-13 23:35:32 (2 months ago)	IP banned by Fail2Ban	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-12 10:51:57 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:23:04 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-04-30 11:21:37 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-04-30 03:10:11 (2 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /inputs.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /ioxi-o.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /function/function.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /rip.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇮 Shaik Sai Meera	2026-04-29 23:59:18 (2 months ago)	IM360 WAF: Infectors: Suspicious access attempt (webshell)	Brute-Force FTP Brute-Force Open Proxy
🇩🇪 ghostwarriors	2026-04-29 05:51:17 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-04-29 03:09:42 (2 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /inputs.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /ioxi-o.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /function/function.php HTTP/1.1" 404 414 20.100.183.137 162.158.183.98 - - [27/Apr/2026:17:33:33 -0300] "GET /rip.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-04-28 22:37:48 (2 months ago)		Brute-Force Web App Attack
🇫🇷 Murazaki	2026-04-28 22:10:34 (2 months ago)	ldap.benadel.fr 20.100.183.137 - - [28/Apr/2026:01:32:32 +0200] "GET /wp-login.php HTTP/1.1" 403 135 ... show more ldap.benadel.fr 20.100.183.137 - - [28/Apr/2026:01:32:32 +0200] "GET /wp-login.php HTTP/1.1" 403 13521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.8:9000" ldap.benadel.fr 20.100.183.137 - - [28/Apr/2026:01:32:32 +0200] "GET /cgi-bin/ HTTP/1.1" 403 13511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.8:9000" smtp.benadel.fr 20.100.183.137 - - [28/Apr/2026:03:58:48 +0200] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.72:80" smtp.benadel.fr 20.100.183.137 - - [28/Apr/2026:03:58:49 +0200] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.72:80" git.benadel.fr 20.100.183.137 - - [28/Apr/2026:19:54:33 +0 ... show less	Bad Web Bot
🇨🇦 Mediashaker	2026-04-28 18:49:33 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.100.183.137 (NO/Norwa ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.100.183.137 (NO/Norway/-) show less	Port Scan
🇦🇺 paulshipley.com.au	2026-04-28 18:34:20 (2 months ago)	bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:10 +1000] "GET /autoload_classmap.php ... show more bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:10 +1000] "GET /autoload_classmap.php HTTP/1.1" 404 3558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:11 +1000] "GET /post.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:11 +1000] "GET /1.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:11 +1000] "GET /flower.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.100.183.137 - - [29/Apr/2026:04:34:12 +1000] "GET /admin.php HTTP/1. ... show less	Web App Attack
🇱🇻 garmtech.com	2026-04-28 18:23:21 (2 months ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-04-28 17:29:04 (2 months ago)	balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:03 +1000] "GET /autoload_classmap.p ... show more balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:03 +1000] "GET /autoload_classmap.php HTTP/1.1" 404 75532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:05 +1000] "GET /post.php HTTP/1.1" 404 72524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:07 +1000] "GET /1.php HTTP/1.1" 404 72521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:09 +1000] "GET /flower.php HTTP/1.1" 404 72526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" balcomberetreat.com.au:443 20.100.183.137 - - [29/Apr/2026:03:28:11 +1000] " ... show less	Web App Attack

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.235

🇺🇸 198.89.123.72

🇵🇱 194.180.49.219

🇸🇪 192.121.169.62

🇸🇬 140.245.33.202

🇳🇱 91.92.47.203

🇷🇺 80.249.151.225

🇺🇸 65.49.1.229

🇺🇸 50.116.72.139

🇮🇶 37.238.97.72

🇬🇧 5.252.83.20

🇺🇸 2a03:2880:f812:14::

🇺🇸 2607:f8b0:4023:100d::123

🇨🇳 223.84.239.151

🇰🇷 211.37.174.180

🇨🇱 190.89.42.224

🇦🇷 181.191.66.181

🇺🇸 146.88.241.69

🇻🇳 123.26.0.150

🇮🇳 106.214.8.125