JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.12.202.181

20.12.202.181 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.12.202.181

Whois 20.12.202.181

IP Abuse Reports for 20.12.202.181:

This IP address has been reported a total of 221 times from 198 distinct sources. 20.12.202.181 was first reported on June 17th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnoacquisti.com	2026-06-17 19:24:15 (2 minutes ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
Anonymous	2026-06-17 19:24:12 (2 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇮🇹 eliosbrocchi	2026-06-17 19:20:25 (6 minutes ago)	[Wed Jun 17 21:20:22.380607 2026] [proxy_fcgi:error] [pid 2189493:tid 2189540] [client 20.12.202.181 ... show more [Wed Jun 17 21:20:22.380607 2026] [proxy_fcgi:error] [pid 2189493:tid 2189540] [client 20.12.202.181:12383] AH01071: Got error 'Primary script unknown' [Wed Jun 17 21:20:22.768197 2026] [proxy_fcgi:error] [pid 2189493:tid 2189520] [client 20.12.202.181:12383] AH01071: Got error 'Primary script unknown' [Wed Jun 17 21:20:23.077575 2026] [proxy_fcgi:error] [pid 2189493:tid 2189537] [client 20.12.202.181:12383] AH01071: Got error 'Primary script unknown' [Wed Jun 17 21:20:23.526587 2026] [proxy_fcgi:error] [pid 2189493:tid 2189531] [client 20.12.202.181:12383] AH01071: Got error 'Primary script unknown' [Wed Jun 17 21:20:23.900584 2026] [proxy_fcgi:error] [pid 2189493:tid 2189525] [client 20.12.202.181:12383] AH01071: Got error 'Primary script unknown' ... show less	VPN IP
🇺🇦 URAN Publishing Service	2026-06-17 19:19:42 (7 minutes ago)	20.12.202.181 - - [17/Jun/2026:22:19:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.12.202.181 - - [17/Jun/2026:22:19:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 708 "-" "-" ... show less	Web App Attack
🇦🇹 nomzamo	2026-06-17 19:08:13 (18 minutes ago)	Fail2Ban reported: nginx-noscript	Brute-Force Bad Web Bot
🇺🇸 nasset	2026-06-17 19:05:44 (21 minutes ago)	20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /se/name.php HTTP/1.1" 403 584 "-" "-" 20.12.202 ... show more 20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /se/name.php HTTP/1.1" 403 584 "-" "-" 20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /fetch.php HTTP/1.1" 403 584 "-" "-" 20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /bgymj.php HTTP/1.1" 403 584 "-" "-" 20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /ta.php HTTP/1.1" 403 584 "-" "-" 20.12.202.181 - - [17/Jun/2026:12:05:43 -0700] "GET /wp-load.php HTTP/1.1" 403 584 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-17 19:01:20 (25 minutes ago)	XSS Attempt	Hacking
🇮🇩 sockominfo	2026-06-17 19:00:29 (26 minutes ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
Anonymous	2026-06-17 18:59:10 (27 minutes ago)	Aggressive web scan	Bad Web Bot Web App Attack
Anonymous	2026-06-17 18:50:46 (36 minutes ago)	20.12.202.181 - - [17/Jun/2026:20:28:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.12.202.181 - - [17/Jun/2026:20:28:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.12.202.181 - - [17/Jun/2026:20:50:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.12.202.181 - - [17/Jun/2026:20:50:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 400 230 "-" "-" 20.12.202.181 - - [17/Jun/2026:20:50:40 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.12.202.181 - - [17/Jun/2026:20:50:45 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 400 230 "-" "-" 20.12.202.181 - - [17/Jun/2026:20:50:45 +0200] "GET /classgoto24.php HTTP/1.1" 301 162 "-" "-" "-" "X" show less	Brute-Force
🇩🇪 Nevermind	2026-06-17 18:48:30 (38 minutes ago)	20.12.202.181 - - [17/Jun/2026:20:48:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.12.202.181 - - [17/Jun/2026:20:48:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6312 "-" "-" 20.12.202.181 - - [17/Jun/2026:20:48:29 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5484 "-" "-" 20.12.202.181 - - [17/Jun/2026:20:48:29 +0200] "GET /1.php HTTP/1.1" 404 5484 "-" "-" 20.12.202.181 - - [17/Jun/2026:20:48:30 +0200] "GET /dropdown.php HTTP/1.1" 404 5484 "-" "-" ... show less	Web App Attack
🇬🇧 SilverZippo	2026-06-17 18:45:31 (41 minutes ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-06-17 18:45:11 (41 minutes ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security	Hacking Web App Attack
🇹🇼 ip4.tw	2026-06-17 18:45:01 (41 minutes ago)	Malicious web scan	Hacking Web App Attack
Anonymous	2026-06-17 18:43:17 (43 minutes ago)	[17-Jun-2026 14:43:14 America/New_York] Page Not Found: wp_filemanager.php [20.12.202.181] [17-Jun-2 ... show more [17-Jun-2026 14:43:14 America/New_York] Page Not Found: wp_filemanager.php [20.12.202.181] [17-Jun-2026 14:43:14 America/New_York] Page Not Found: this_is_a_new_hello_world.php [20.12.202.181] ... show less	Brute-Force

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 196.196.150.124

🇨🇷 186.177.70.52

🇺🇸 165.227.20.212

🇳🇱 91.229.105.132

🇨🇳 218.75.165.74

🇬🇧 193.163.125.55

🇨🇳 183.250.89.44

🇧🇴 181.188.172.6

🇳🇱 173.194.169.124

🇸🇬 144.48.6.26

🇺🇸 34.50.190.16

🇺🇸 34.48.67.112

🇺🇸 34.26.1.84

🇮🇷 31.170.56.125

🇩🇪 217.160.104.158

🇫🇮 178.20.210.208

🇺🇸 147.185.132.179

🇨🇳 121.17.57.71

🇨🇳 110.249.202.18

🇳🇱 91.92.40.8