JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.180.144

20.197.180.144 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.180.144

Whois 20.197.180.144

IP Abuse Reports for 20.197.180.144:

This IP address has been reported a total of 170 times from 145 distinct sources. 20.197.180.144 was first reported on June 22nd 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-22 19:28:59 (4 minutes ago)	20.197.180.144 patrz.eu - [22/Jun/2026:21:28:58 +0200] "GET /wp-content/plugins/hellopress/wp_filema ... show more 20.197.180.144 patrz.eu - [22/Jun/2026:21:28:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 0 "-" "-" ... show less	Hacking Web App Attack
🇭🇳 unph	2026-06-22 19:24:07 (9 minutes ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇨🇭 4server	2026-06-22 19:15:53 (17 minutes ago)	[MonJun2221:15:47.5433402026][security2:error][pid2857710:tid2857716][client20.197.180.144:0]ModSecu ... show more [MonJun2221:15:47.5433402026][security2:error][pid2857710:tid2857716][client20.197.180.144:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\\|wp-file-manager\\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"443\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"autodiscover.carolin-mizio.ch\"][uri\"/wp-content/plugins/hellopress/wp_filemanager.php\"][unique_id\"ajmJ4-0eRuG0r4QKEbtBGAAAAAQ\"] show less	Hacking Web App Attack
🇺🇸 Operator873	2026-06-22 19:11:03 (22 minutes ago)	2026/06/22 14:10:59 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, ser ... show more 2026/06/22 14:10:59 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/06/22 14:10:59 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/06/22 14:11:00 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, server: [OBFUSCATED], request: "GET /this_is_a_new_hello_world.php HTTP/1.1", host: "[OBFUSCATED]" 2026/06/22 14:11:00 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, server: [OBFUSCATED], request: "GET /this_is_a_new_hello_world.php HTTP/1.1", host: "[OBFUSCATED]" 2026/06/22 14:11:00 [error] 1202360#0: 560831 access forbidden by rule, client: 20.197.180.144, server: [OBFUSCATED], request: "GET /x ... show less	Brute-Force Web App Attack
🇧🇪 Lunix	2026-06-22 19:10:26 (23 minutes ago)		Brute-Force Web App Attack
🇳🇱 informedclearly.com	2026-06-22 19:01:18 (32 minutes ago)	WAF_BAN reason=WP_SCANNER rule=WP_PATH hits=5 path=/wp-content/uploads/? ua=-	Port Scan Hacking
🇩🇪 mondor.ro	2026-06-22 18:57:29 (36 minutes ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 20.197.180.144, Re ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 20.197.180.144, Reason:[20.197.180.144 (BR/Brazil/-), more than 60 Apache 404 hits in the last 3600 secs]; Ports: 80,443; Direction: in; Trigger: LF_CLUSTER; Logs: show less	Port Scan
Anonymous	2026-06-22 18:33:06 (1 hour ago)	(PERMBLOCK) 20.197.180.144 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 20.197.180.144 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇫🇷 tilellit.pro	2026-06-22 18:32:44 (1 hour ago)	Fail2Ban banned 20.197.180.144 for security violations in jail nginx-aggressive. Log: 2026/06/22 18: ... show more Fail2Ban banned 20.197.180.144 for security violations in jail nginx-aggressive. Log: 2026/06/22 18:32:36 [error] FastCGI sent in stderr: "Primary script unknown" , client: 20.197.180.144, server: [REDACTED], request: "GET /aaa.php?p= HTTP/2.0", upstream: [REDACTED], host: [REDACTED] 2026/06/22 18:32:44 [error] directory index of [REDACTED] is forbidden, client: 20.197.180.144, server: [REDACTED], request: "GET /wp-includes/sodium_compat/ HTTP/2.0", host: [REDACTED] ... show less	Bad Web Bot Web App Attack
🇩🇪 Interceptor_HQ	2026-06-22 18:32:28 (1 hour ago)	request_uri: /wp-content/plugins/hellopress/wp_filemanager.php -- automatic report --	Brute-Force Hacking
🇫🇷 Quarks Solutions	2026-06-22 18:25:48 (1 hour ago)	crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-06-22 18:25:44 (1 hour ago)	Try to connect to Port_Scan_80_stealth	Port Scan
Anonymous	2026-06-22 18:25:40 (1 hour ago)	20.197.180.144 - - [22/Jun/2026:18:24:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.180.144 - - [22/Jun/2026:18:24:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3873 "-" "-" 20.197.180.144 - - [22/Jun/2026:18:25:18 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 404 571 "-" "-" 20.197.180.144 - - [22/Jun/2026:18:25:19 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 571 "-" "-" 20.197.180.144 - - [22/Jun/2026:18:25:19 +0000] "GET /wp-includes/Text/ HTTP/1.1" 404 571 "-" "-" 20.197.180.144 - - [22/Jun/2026:18:25:26 +0000] "GET /wp-includes ... show less	Web App Attack
🇺🇸 Charlesiv	2026-06-22 18:14:49 (1 hour ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/network/plugins.php Timestamp: 2026-06-22T17:18:20Z Ray ID: a0fce9624cbcf187 UA: Empty string show less	Bad Web Bot
🇷🇴 SpamStopper	2026-06-22 18:14:47 (1 hour ago)	Fail2Ban - apache-noscript	Hacking Bad Web Bot

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 153.122.170.31

🇺🇸 2a04:c300:400::199

🇨🇳 221.218.252.162

🇯🇵 212.102.51.63

🇺🇦 194.42.205.100

🇮🇶 185.181.111.83

🇬🇧 167.99.90.69

🇺🇸 162.216.149.3

🇧🇷 143.0.188.113

🇺🇸 104.140.148.86

🇨🇳 58.58.130.22

🇺🇸 13.219.5.24

🇰🇪 217.199.144.86

🇺🇸 216.126.237.61

🇪🇹 196.190.220.199

🇩🇪 194.88.98.90

🇸🇬 188.166.251.103

🇨🇳 180.167.128.202

🇩🇪 85.28.47.237

🇭🇰 220.246.47.146