JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.206.105.145

20.206.105.145 was found in our database!

This IP was reported 475 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.206.105.145

Whois 20.206.105.145

IP Abuse Reports for 20.206.105.145:

This IP address has been reported a total of 475 times from 383 distinct sources. 20.206.105.145 was first reported on July 17th 2026, and the most recent report was 42 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Charlesiv	2026-07-18 00:11:57 (42 seconds ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /fpwch.php Timestamp: 2026-07-17T23:53:13Z Ray ID: a1cd2a310aaef173 UA: Empty string show less	Bad Web Bot
🇩🇪 mravb	2026-07-18 00:10:33 (2 minutes ago)	20.206.105.145 - - [18/Jul/2026:03:10:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.206.105.145 - - [18/Jul/2026:03:10:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 188 "-" "-" ... show less	Web App Attack Hacking
🇩🇪 Philister11	2026-07-18 00:02:01 (10 minutes ago)	CrowdSec: crowdsecurity/http-wordpress-scan (BR/AS8075)	Web App Attack
🇭🇺 kranem	2026-07-18 00:00:30 (12 minutes ago)	Triggered Cloudflare WAF from BR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from BR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-17T23:09:21Z User-Agent: empty show less	Bad Web Bot
🇹🇼 tyetriiix	2026-07-17 23:58:06 (14 minutes ago)	Wazuh Alert Evidence: 20.206.105.145 - - [17/Jul/2026:23:58:03 +0000] "GET /wp-content/plugins/hello ... show more Wazuh Alert Evidence: 20.206.105.145 - - [17/Jul/2026:23:58:03 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇺🇸 pixiekat	2026-07-17 23:51:19 (21 minutes ago)	[Fri Jul 17 23:51:16.727240 2026] [authz_core:error] [pid 314713:tid 314723] [client 20.206.105.145: ... show more [Fri Jul 17 23:51:16.727240 2026] [authz_core:error] [pid 314713:tid 314723] [client 20.206.105.145:17604] AH01630: client denied by server configuration: /var/www/vhosts/chatbot-app/public/wp-content [Fri Jul 17 23:51:16.981845 2026] [authz_core:error] [pid 314713:tid 314737] [client 20.206.105.145:17604] AH01630: client denied by server configuration: /var/www/vhosts/chatbot-app/public/this_is_a_new_hello_world.php [Fri Jul 17 23:51:17.479152 2026] [authz_core:error] [pid 314713:tid 314727] [client 20.206.105.145:17604] AH01630: client denied by server configuration: /var/www/vhosts/chatbot-app/public/x.php [Fri Jul 17 23:51:17.717233 2026] [authz_core:error] [pid 314713:tid 314724] [client 20.206.105.145:17604] AH01630: client denied by server configuration: /var/www/vhosts/chatbot-app/public/j260624_13.php [Fri Jul 17 23:51:18.297576 2026] [authz_core:error] [pid 314713:tid 314720] [client 20.206.105.145:17604] AH01630: client denied by server configuration: /var/www/vhosts/chatbot ... show less	Brute-Force
🇦🇺 paulshipley.com.au	2026-07-17 23:49:01 (23 minutes ago)	talentaymerch.com.au:443 20.206.105.145 - - [18/Jul/2026:09:48:59 +1000] "GET /admin.php HTTP/1.1" 4 ... show more talentaymerch.com.au:443 20.206.105.145 - - [18/Jul/2026:09:48:59 +1000] "GET /admin.php HTTP/1.1" 404 101867 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-17 23:42:22 (30 minutes ago)	[Fri Jul 17 23:42:20.957800 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/v ... show more [Fri Jul 17 23:42:20.957800 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/var/www/vhosts/mcdermit.org/BOISD/this_is_a_new_hello_world.php' not found or unable to stat [Fri Jul 17 23:42:21.142637 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/var/www/vhosts/mcdermit.org/BOISD/x.php' not found or unable to stat [Fri Jul 17 23:42:21.299793 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/var/www/vhosts/mcdermit.org/BOISD/j260624_13.php' not found or unable to stat [Fri Jul 17 23:42:21.483379 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/var/www/vhosts/mcdermit.org/BOISD/d62.php' not found or unable to stat [Fri Jul 17 23:42:21.633289 2026] [php:error] [pid 2675981] [client 20.206.105.145:20632] script '/var/www/vhosts/mcdermit.org/BOISD/ups.php' not found or unable to stat ... show less	Brute-Force
🇦🇺 FEWA	2026-07-17 23:24:44 (47 minutes ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-07-17 23:22:43 (49 minutes ago)	2026-07-18 @ 01:22:42 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-18 @ 01:22:42 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 ecs.ge	2026-07-17 23:21:55 (50 minutes ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 tall1oN	2026-07-17 23:17:35 (55 minutes ago)	20.206.105.145 - - [18/Jul/2026:01:03:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.206.105.145 - - [18/Jul/2026:01:03:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 16384 "-" "-" "ppl-tech.de" 20.206.105.145 - - [18/Jul/2026:01:17:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 16384 "-" "-" "ppl-tech.de" ... show less	Web App Attack Port Scan Hacking
🇩🇪 AetherFox	2026-07-17 23:13:38 (59 minutes ago)	AetherFox VoidGuard detected: [Fri Jul 17 23:13:36.446704 2026] [authz_core:error] [pid 1375828:tid ... show more AetherFox VoidGuard detected: [Fri Jul 17 23:13:36.446704 2026] [authz_core:error] [pid 1375828:tid 1375852] [client 20.206.105.145:23697] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-content/plugins/hellopress/wp_filemanager.php [Fri Jul 17 23:13:36.446777 2026] [authz_core:error] [pid 1375828:tid 1375852] [client 20.206.105.145:23697] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Fri Jul 17 23:13:36.905550 2026] [authz_core:error] [pid 1375828:tid 1375843] [client 20.206.105.145:23697] AH01630: client denied by server configuration: proxy:http://[MASKED]/this_is_a_new_hello_world.php [Fri Jul 17 23:13:36.905605 2026] [authz_core:error] [pid 1375828:tid 1375843] [client 20.206.105.145:23697] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Fri Jul 17 23:13:37.106200 2026] [authz_core:error] [pid 1375828:tid 1375860] [client 20.206.105.145:23697] AH01630: client ... show less	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-07-17 23:13:21 (59 minutes ago)	webserver:80 [18/Jul/2026] "GET /images.php HTTP/1.1" 302 415 webserver:80 [18/Jul/2026] "GET /med ... show more webserver:80 [18/Jul/2026] "GET /images.php HTTP/1.1" 302 415 webserver:80 [18/Jul/2026] "GET /media.php HTTP/1.1" 302 413 webserver:80 [18/Jul/2026] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 453 webserver:80 [18/Jul/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 491 webserver:443 [18/Jul/2026] "GET /media.php HTTP/1.1" 404 408 webserver:443 [18/Jul/2026] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 408 webserver:443 [18/Jul/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5669 show less	Web App Attack
Anonymous	2026-07-17 23:10:51 (1 hour ago)	PAD: Bad_Web_Bot_D detected	Bad Web Bot

Showing 1 to 15 of 475 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.183.21.53

🇨🇳 117.173.65.4

🇻🇳 117.4.81.106

🇩🇪 69.5.169.144

🇳🇱 45.148.10.152

🇮🇪 34.245.118.21

🇺🇸 20.55.73.223

🇪🇬 197.199.224.52

🇦🇷 186.19.248.11

🇲🇾 183.171.49.144

🇧🇴 181.115.171.221

🇩🇪 167.71.51.213

🇩🇪 167.71.48.103

🇫🇮 147.185.133.125

🇺🇸 147.185.132.30

🇩🇪 138.226.237.41

🇧🇷 138.122.236.82

🇺🇸 107.209.18.137

🇮🇩 103.165.206.238

🇵🇹 85.240.193.104