This IP address has been reported a total of
177
times from
160 distinct
sources.
20.12.191.45 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
[Fri May 22 00:04:54.715001 2026] [php7:error] [pid 6421] [client 20.12.191.45:20548] script '/var/w ...
show more[Fri May 22 00:04:54.715001 2026] [php7:error] [pid 6421] [client 20.12.191.45:20548] script '/var/www/ight.php' not found or unable to stat ...
show less
[AUTORAVALT][[21/05/2026 - 18:54:35 -03:00 UTC]
Attack from [Microsoft Corporation]
[20.12.191.45] A ...
show more[AUTORAVALT][[21/05/2026 - 18:54:35 -03:00 UTC]
Attack from [Microsoft Corporation]
[20.12.191.45] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to prob]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
[ThuMay2123:53:20.3561102026][security2:error][pid1557056:tid1557077][client20.12.191.45:0]ModSecuri ...
show more[ThuMay2123:53:20.3561102026][security2:error][pid1557056:tid1557077][client20.12.191.45:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"442\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"autodiscover.hostingedominio.ch\"][uri\"/wp-content/plugins/hellopress/wp_filemanager.php\"][unique_id\"ag9-0OGTqqsv1MPNpCIhLQAAAJM\"]
show less
[fail2ban Auto Report] {"time":"2026-05-21T17:47:02.598370302-04:00","level":"INFO","source":{"funct ...
show more[fail2ban Auto Report] {"time":"2026-05-21T17:47:02.598370302-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"wikiless.canine.tools","method":"GET","path":"/wp-content/plugins/hellopress/wp_filemanager.php","user_agent":"","accept_language":"","priority":"","x-forwarded-for":"20.12.191.45","x-real-ip":"20.12.191.45","host":"wikiless.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":0}}
...
show less
(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.12.191.45 (US/United States/-): 1 in the l ...
show more(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.12.191.45 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.12.191.45 - - [21/May/2026:23:39:23 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 11926 "-" "-" "20.12.191.45" host=consorzioaet.it
show less