JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.204.181.157

20.204.181.157 was found in our database!

This IP was reported 690 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.204.181.157

Whois 20.204.181.157

IP Abuse Reports for 20.204.181.157:

This IP address has been reported a total of 690 times from 335 distinct sources. 20.204.181.157 was first reported on August 27th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Eldeberen	2025-09-05 10:45:16 (1 year ago)	HTTP GET on a non-existent endpoint (CMS, .env, aws.yml, ...)	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 geot	2025-09-02 13:18:24 (1 year ago)	60 requests, including : GET /wp-admin/autoload_classmap.php HTTP/1.1 GET /makeasmtp.php HTTP/1.1 G ... show more 60 requests, including : GET /wp-admin/autoload_classmap.php HTTP/1.1 GET /makeasmtp.php HTTP/1.1 GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 GET /wp-admin/admin-post.php HTTP/1.1 GET /file.php HTTP/1.1 GET /wp.php HTTP/1.1 GET /.well-known/content.php HTTP/1.1 GET /wp-admin/function.php HTTP/1.1 GET /wp-content/content.php HTTP/1.1 GET /ALFA_DATA/index.php HTTP/1.1 GET /wp-admin/css/colors/blue/about.php HTTP/1.1 GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1 GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1 show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-09-01 20:08:34 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 antlac1	2025-09-01 07:02:44 (1 year ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇧🇪 boxed-it	2025-09-01 06:11:33 (1 year ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇳🇱 Mangelot Hosting	2025-09-01 05:54:07 (1 year ago)	(upload_shell) srv201 Shell upload 20.204.181.157 (IN/India/-): 1 in the last 3600 secs; Ports: ; D ... show more (upload_shell) srv201 Shell upload 20.204.181.157 (IN/India/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇪🇪 Unwasted	2025-09-01 05:41:03 (1 year ago)	Blocked IP still knocking	Hacking
🇫🇮 Christopher Hughes	2025-09-01 05:38:30 (1 year ago)	[Mon Sep 01 06:38:28.430775 2025] [proxy_fcgi:error] [pid 3286696:tid 140345052468800] [client 20.20 ... show more [Mon Sep 01 06:38:28.430775 2025] [proxy_fcgi:error] [pid 3286696:tid 140345052468800] [client 20.204.181.157:15900] AH01071: Got error 'Primary script unknown' [Mon Sep 01 06:38:28.728472 2025] [proxy_fcgi:error] [pid 3286696:tid 140344549168704] [client 20.204.181.157:15900] AH01071: Got error 'Primary script unknown' [Mon Sep 01 06:38:29.322212 2025] [proxy_fcgi:error] [pid 3286696:tid 140344557561408] [client 20.204.181.157:15900] AH01071: Got error 'Primary script unknown' [Mon Sep 01 06:38:29.619349 2025] [proxy_fcgi:error] [pid 3286696:tid 140345102825024] [client 20.204.181.157:15900] AH01071: Got error 'Primary script unknown' [Mon Sep 01 06:38:29.943016 2025] [proxy_fcgi:error] [pid 3286696:tid 140345086039616] [client 20.204.181.157:15900] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇵🇱 mkey	2025-09-01 05:38:11 (1 year ago)	[2025-08-31 10:26:52] WEB-REQ-ATTACK: Invalid request or header (WEB-APP-ATACK: Unauthorized script ... show more [2025-08-31 10:26:52] WEB-REQ-ATTACK: Invalid request or header (WEB-APP-ATACK: Unauthorized script probe ) show less	Hacking Web App Attack
🇦🇹 Pingger Shikkoken	2025-09-01 05:06:56 (1 year ago)	2025-09-01T05:06:56+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-09-01T05:06:56+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=20.204.181.157 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=29015 DF PROTO=TCP SPT=29417 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-09-01T05:06:57+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=20.204.181.157 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=29016 DF PROTO=TCP SPT=29417 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-09-01T05:06:59+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=20.204.181.157 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=29017 DF PROTO=TCP SPT=29417 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇫🇷 Phenix Info	2025-09-01 04:46:30 (1 year ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇳🇱 thedreamer.nl	2025-09-01 04:31:47 (1 year ago)	20.204.181.157 - - [01/Sep/2025:06:31:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.204.181.157 - - [01/Sep/2025:06:31:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.204.181.157 - - [01/Sep/2025:06:31:08 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.204.181.157 - - [01/Sep/2025:06:31:08 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "IN" "Pune" "18.52110" "73.85020" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnoacquisti.com	2025-09-01 04:05:20 (1 year ago)	PrestaShop Security Module: Calls wp-admin and wp-login and xmlrpc.php calling known vulnerabilities	Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-09-01 03:58:59 (1 year ago)	Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Met ... show more Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-09-01T03:58:59Z) show less	Web Spam Brute-Force Web App Attack

Showing 1 to 15 of 690 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.150

🇹🇭 182.53.52.68

🇧🇷 168.227.224.197

🇨🇳 139.170.72.223

🇺🇸 92.204.128.28

🇺🇸 64.64.110.210

🇩🇪 36.255.97.72

🇺🇸 195.184.76.49

🇮🇩 103.193.166.12

🇹🇷 95.173.161.147

🇲🇶 82.197.101.2

🇮🇹 82.134.193.105

🇨🇦 35.203.9.51

🇺🇸 34.24.237.65

🇺🇾 200.40.204.66

🇩🇪 159.195.157.103

🇺🇸 147.93.144.116

🇬🇧 82.39.154.137

🇨🇳 60.223.250.50

🇺🇸 52.186.171.170