This IP address has been reported a total of
514
times from
359 distinct
sources.
20.203.133.142 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
20.203.133.142 [27/Jul/2026:14:15:25 -0300] gloria.target.domain:80 URL:/wp-content/plugins/hellopre ...
show more20.203.133.142 [27/Jul/2026:14:15:25 -0300] gloria.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php
20.203.133.142 [27/Jul/2026:14:15:25 -0300] gloria.target.domain:80 URL:/wp-includes/ID3/about.php "GET /wp-includes/ID3/about.php
...
show less
Hacking
Web App Attack
Anonymous
Caught with rate limiting - Excessive Requests or DDOS Attack
DDoS Attack
Bad Web Bot
Anonymous
{"level":"info","ts":1785170771.9152415,"logger":"http.log.access.log2","msg":"handled request","req ...
show more{"level":"info","ts":1785170771.9152415,"logger":"http.log.access.log2","msg":"handled request","request":{"remote_ip":"20.203.133.142","remote_port":"12917","client_ip":"20.203.133.142","proto":"HTTP/1.1","method":"GET","host":"stage.prisma.tv","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"stage.prisma.tv","ech":false}},"bytes_read":0,"user_id":"","duration":0.000219877,"size":0,"status":401,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"X-Content-Type-Options":["nosniff"],"X-Xss-Protection":["1; mode=block"],"Referrer-Policy":["same-origin"],"X-Robots-Tag":["noindex"],"Www-Authenticate":["Basic realm=\"restricted\""]}}
{"level":"info","ts":1785170771.953164,"logger":"http.log.access.log2","msg":"handled request","request":{"remote_ip":"20.203.133.142","remote_port":"12917","client_ip":"20.203.133.142","proto":"HTTP/1.1","method":"GET","host":"stage.pr
...
show less
[MonJul2718:45:45.4704802026][security2:error][pid1273616:tid1273893][client20.203.133.142:0]ModSecu ...
show more[MonJul2718:45:45.4704802026][security2:error][pid1273616:tid1273893][client20.203.133.142:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"443\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"autodiscover.hostingedominio.ch\"][uri\"/wp-content/plugins/hellopress/wp_filemanager.php\"][unique_id\"ameLOewM0cdE9kuXJZKRVAAAAQw\"]
show less
[Mon Jul 27 18:31:45.264932 2026] [php:error] [pid 3743241] [client 20.203.133.142:34808] script '/v ...
show more[Mon Jul 27 18:31:45.264932 2026] [php:error] [pid 3743241] [client 20.203.133.142:34808] script '/var/www/nextcloud/this_is_a_new_hello_world.php' not found or unable to stat
...
show less