JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.195.181.252

20.195.181.252 was found in our database!

This IP was reported 358 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.195.181.252

Whois 20.195.181.252

IP Abuse Reports for 20.195.181.252:

This IP address has been reported a total of 358 times from 264 distinct sources. 20.195.181.252 was first reported on July 16th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-17 22:31:20 (1 hour ago)		Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-07-17 22:00:54 (2 hours ago)	wp-login attack [17/Jul/2026:05:16:22	Brute-Force Web App Attack
Anonymous	2026-07-17 20:04:16 (3 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BR, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 auridh	2026-07-17 10:35:20 (13 hours ago)	Ip 20.195.181.252 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 3.887750463s ... show more Ip 20.195.181.252 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 3.887750463s) at 2026-07-17 08:16:16.922424862 +0000 UTC show less	Web App Attack
🇩🇪 auridh	2026-07-17 09:34:59 (14 hours ago)	Ip 20.195.181.252 performed 'crowdsecurity/http-probing' (11 events over 6.427774264s) at 2026-07-17 ... show more Ip 20.195.181.252 performed 'crowdsecurity/http-probing' (11 events over 6.427774264s) at 2026-07-17 08:16:17.844367926 +0000 UTC show less	Web App Attack
Anonymous	2026-07-17 09:31:03 (14 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 auridh	2026-07-17 08:34:07 (15 hours ago)	Ip 20.195.181.252 performed 'crowdsecurity/http-wordpress-scan' (4 events over 7.866846477s) at 2026 ... show more Ip 20.195.181.252 performed 'crowdsecurity/http-wordpress-scan' (4 events over 7.866846477s) at 2026-07-17 08:16:19.283838241 +0000 UTC show less	Web App Attack
🇺🇸 ambor	2026-07-17 07:56:21 (16 hours ago)	Attack type: wordpress_attack_attempt \| Target: /wp-content/plugins/hellopress/wp_filemanager.php \| ... show more Attack type: wordpress_attack_attempt \| Target: /wp-content/plugins/hellopress/wp_filemanager.php \| Country: BR show less	Web App Attack Brute-Force
Anonymous	2026-07-17 07:42:34 (16 hours ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 sandap1	2026-07-17 07:40:02 (16 hours ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443,src_ip=20.195.181.252	Port Scan Hacking
🇺🇸 Epimetheus	2026-07-17 07:36:14 (16 hours ago)	Unauthorized access attempts: [GET] /wp-includes/style-engine/index.php [GET] /file.php [GET] /wp-a ... show more Unauthorized access attempts: [GET] /wp-includes/style-engine/index.php [GET] /file.php [GET] /wp-admin/css/index.php [GET] /cache.php [GET] /wp-admin/images/ [GET] /1.php [GET] /wp-content/themes/admin.php [GET] /system_log.php [GET] /wicked.php [GET] /13.php [GET] /this_is_a_new_hello_world.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php [GET] /adminfuns.php UA: Unknown show less	Web App Attack
🇧🇬 HighWay	2026-07-17 07:35:11 (16 hours ago)	20.195.181.252 - - [17/Jul/2026:07:35:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.195.181.252 - - [17/Jul/2026:07:35:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 66931 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:35:03 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 60237 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:35:06 +0000] "GET /admin.php HTTP/1.1" 404 64165 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:35:07 +0000] "GET /public/css.php HTTP/1.1" 404 64187 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:35:08 +0000] "GET /classwithtostring.php HTTP/1.1" 404 60237 "-" "-" ... show less	Port Scan Bad Web Bot
🇮🇹 Inartis	2026-07-17 07:34:39 (16 hours ago)	20.195.181.252 - - [17/Jul/2026:09:34:37 +0200] "GET /admin.php HTTP/1.1" 404 66012 "-" "-" ...	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2026-07-17 07:26:14 (16 hours ago)	20.195.181.252 - - [17/Jul/2026:07:26:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.195.181.252 - - [17/Jul/2026:07:26:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2066 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:26:13 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 2031 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:26:14 +0000] "GET /admin.php HTTP/1.1" 403 2031 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:26:13 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 2031 "-" "-" 20.195.181.252 - - [17/Jul/2026:07:26:14 +0000] "GET /admin.php HTTP/1.1" 403 2031 "-" "-" ... show less	Brute-Force
🇺🇸 wordpresshosting.solutions	2026-07-17 07:19:18 (16 hours ago)	Vulnerability scanning / script probing detected. Evidence: [Fri Jul 17 07:19:14.012352 2026] [php:e ... show more Vulnerability scanning / script probing detected. Evidence: [Fri Jul 17 07:19:14.012352 2026] [php:error] [pid 2515632] [client 20.195.181.252:0] script '[WEB_ROOT]/.well-known/classwithtostring.php' not found or unable to stat [Fri Jul 17 07:19:14.380034 2026] [php:error] [pid 2515632] [client 20.195.181.252:0] script '[WEB_ROOT]/.well-known/gecko-litespeed.php' not found or unable to stat [Fri Jul 17 07:19:15.919539 2026] [php:error] [pid 2578986] [client 20.195.181.252:0] script '[WEB_ROOT]/.well-known/admin.php' not found or unable to stat [Fri Jul 17 07:19:16.350505 2026] [php:error] [pid 2578960] [client 20.195.181.252:0] script '[WEB_ROOT]/.well-known/file.php' not found or unable to stat [Fri Jul 17 07:19:17.904481 2026] [php:error] [pid 2578991] [client 20.195.181.252:0] script '[WEB_ROOT]/.well-known/wp-login.php' not found or unable to stat show less	Web App Attack

Showing 1 to 15 of 358 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.212.1.182

🇬🇧 165.154.128.17

🇺🇸 162.216.150.144

🇮🇳 157.51.147.253

🇺🇸 147.185.132.118

🇨🇳 106.117.160.90

🇰🇪 102.210.148.92

🇷🇴 92.118.39.171

🇨🇦 85.217.149.71

🇺🇸 2a03:2880:f800:f::

🇺🇸 2604:a880:2:d1:0:1:6ab7:e001

🇧🇪 198.235.24.145

🇳🇱 185.223.235.39

🇳🇱 185.223.235.21

🇺🇸 172.252.13.101

🇫🇮 147.185.133.160

🇺🇸 147.185.132.111

🇺🇸 136.119.195.137

🇺🇸 130.131.220.95

🇭🇰 104.208.108.166