JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.198.90.154

20.198.90.154 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.198.90.154

Whois 20.198.90.154

IP Abuse Reports for 20.198.90.154:

This IP address has been reported a total of 209 times from 183 distinct sources. 20.198.90.154 was first reported on July 6th 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-07-06 17:32:29 (6 minutes ago)	2026-07-06 @ 19:32:29 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-06 @ 19:32:29 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇫🇷 LRNP	2026-07-06 17:31:46 (7 minutes ago)	_:80 20.198.90.154 - - [06/Jul/2026:17:31:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanag ... show more _:80 20.198.90.154 - - [06/Jul/2026:17:31:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:44 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /ucpfr.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /class-walker-footer-dev.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /gtd7.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /wp-ws68.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET //av.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /wp-includes/theme-compat/navbar.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:45 +0000] "GET /oivcl.php HTTP/1.1" 404 146 "-" "-" _:80 20.198.90.154 - - [06/Jul/2026:17:31:46 +0000] ... show less	Bad Web Bot Web App Attack
🇫🇷 Lino Project	2026-07-06 17:28:19 (11 minutes ago)	20.198.90.154 - - [06/Jul/2026:19:28:15 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.198.90.154 - - [06/Jul/2026:19:28:15 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4156 "-" "-" 20.198.90.154 - - [06/Jul/2026:19:28:15 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 196 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-07-06 17:24:21 (15 minutes ago)	[2026-07-06 20:24:20] Apache auth failure: brute force attempt, file probing	Brute-Force Bad Web Bot
Anonymous	2026-07-06 17:18:07 (21 minutes ago)	Detected by CrowdSec: crowdsecurity/http-probing	Web App Attack
🇵🇫 www.gregorymariani.com	2026-07-06 17:14:27 (24 minutes ago)	20.198.90.154 - - [06/Jul/2026:17:14:15 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.198.90.154 - - [06/Jul/2026:17:14:15 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 4389 "-" "-" 393 0.012 [upstream-default-backend] [] 10.244.217.139:8080 : 10.244.217.131:80 0 : 4389 0.012 : 0.001 404 : 200 f23f228b52c6cbf63ab392cc2bab3d9a 20.198.90.154 - - [06/Jul/2026:17:14:19 +0000] "GET /wp-includes/theme-compat/navbar.php HTTP/1.1" 200 4389 "-" "-" 380 0.008 [upstream-default-backend] [] 10.244.217.139:8080 : 10.244.217.131:80 0 : 4389 0.007 : 0.000 404 : 200 82f0fd8d2a884cee6bd61f9c1001e159 20.198.90.154 - - [06/Jul/2026:17:14:24 +0000] "GET /wp-includes//0IJm2.php HTTP/1.1" 200 4389 "-" "-" 367 0.008 [upstream-default-backend] [] 10.244.217.139:8080 : 10.244.217.131:80 0 : 4389 0.007 : 0.001 404 : 200 4c8b5c1f1857fc506a6ad07259dc079b 20.198.90.154 - - [06/Jul/2026:17:14:25 +0000] "GET //admin1.php HTTP/1.1" 200 4389 "-" "-" 356 0.012 [upstream-default-backend] [] 10.244.217.139:8080 : 10.244.217.131:80 0 : 4389 0.011 : 0.001 404 : 200 97048ad23 ... show less	Web App Attack
🇧🇷 Peregrine	2026-07-06 17:13:09 (26 minutes ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.198.90.154 172.69.94.183 - - [06/Jul/2026:14:13: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.198.90.154 172.69.94.183 - - [06/Jul/2026:14:13:01 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇸🇪 SkyDancer	2026-07-06 17:09:42 (29 minutes ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇳🇱 CryptoYakari	2026-07-06 17:04:55 (34 minutes ago)	20.198.90.154 - - [06/Jul/2026:20:04:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.198.90.154 - - [06/Jul/2026:20:04:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 6995 "-" "-" 20.198.90.154 - - [06/Jul/2026:20:04:49 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 531 "-" "-" 20.198.90.154 - - [06/Jul/2026:20:04:49 +0300] "GET /ucpfr.php HTTP/1.0" 404 531 "-" "-" 20.198.90.154 - - [06/Jul/2026:20:04:50 +0300] "GET /class-walker-footer-dev.php HTTP/1.0" 404 531 "-" "-" 20.198.90.154 - - [06/Jul/2026:20:04:50 +0300] "GET /gtd7.php HTTP/1.0" 404 531 "-" "-" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇩🇪 neckaralb-admin.de	2026-07-06 17:02:22 (36 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 tmiland	2026-07-06 16:55:28 (43 minutes ago)	(wordpress_404) WordPress Plugins Honeypot Trap 20.198.90.154 (IN/India/-): 2 in the last 3600 secs; ... show more (wordpress_404) WordPress Plugins Honeypot Trap 20.198.90.154 (IN/India/-): 2 in the last 3600 secs; IP: 20.198.90.154; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.198.90.154 - - [06/Jul/2026:18:55:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.198.90.154 - - [06/Jul/2026:18:55:27 +0200] "GET /wp-content/plugins/about.php HTTP/1.1" 404 146 "-" "-" show less	Brute-Force
Anonymous	2026-07-06 16:50:08 (49 minutes ago)	Too many successive quick attempts with error status 301, 404, 405, 444, 403 or 400	Bad Web Bot
🇬🇷 setupgr	2026-07-06 16:45:27 (53 minutes ago)	(mod_security) mod_security (id:1000001) triggered by 20.198.90.154 (IN/India/Maharashtra/Pune/-/[AS ... show more (mod_security) mod_security (id:1000001) triggered by 20.198.90.154 (IN/India/Maharashtra/Pune/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:45:27.220377 2026] [security2:error] [pid 268238:tid 268341] [client 20.198.90.154:8071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-content/plugins/hellopress/wp_filemanager.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/hellopress/wp_filemanager.php"] [severity "CRITICAL"] [tag "security"] [hostname "davids.gr"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "akvbp0qY7Bq0hlvAywFWogAAAlg"] show less	Port Scan
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-06 16:42:47 (56 minutes ago)	[Mon Jul 06 10:42:46.066571 2026] [authz_core:error] [pid 204375:tid 140360101639744] [client 20.198 ... show more [Mon Jul 06 10:42:46.066571 2026] [authz_core:error] [pid 204375:tid 140360101639744] [client 20.198.90.154:31772] AH01630: client denied by server configuration: /var/www/public_html/lists/this_is_a_new_hello_world.php [Mon Jul 06 10:42:46.778538 2026] [authz_core:error] [pid 204375:tid 140358054770240] [client 20.198.90.154:31772] AH01630: client denied by server configuration: /var/www/public_html/lists/ucpfr.php [Mon Jul 06 10:42:47.501391 2026] [authz_core:error] [pid 204375:tid 140360521078336] [client 20.198.90.154:31772] AH01630: client denied by server configuration: /var/www/public_html/lists/class-walker-footer-dev.php ... show less	Bad Web Bot
🇺🇸 oralunal	2026-07-06 16:40:16 (59 minutes ago)	IP banned by Fail2Ban in jail ah-suss access.log mvfnds ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.152

🇨🇳 14.117.226.122

🇬🇧 2a06:4880:4000::56

🇰🇷 211.223.107.86

🇭🇰 199.45.154.141

🇲🇽 187.224.84.72

🇺🇸 172.202.117.221

🇨🇳 101.126.89.144

🇰🇷 1.214.42.172

🇧🇩 103.135.136.109

🇷🇴 92.118.39.77

🇳🇱 91.92.40.11

🇨🇦 85.217.149.59

🇨🇳 47.114.122.127

🇳🇱 45.156.87.50

🇵🇰 39.38.118.39

🇨🇳 223.215.115.28

🇺🇸 174.137.133.49

🇩🇪 69.5.169.214

🇺🇸 66.132.172.109