JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.206.67.15

20.206.67.15 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.206.67.15

Whois 20.206.67.15

IP Abuse Reports for 20.206.67.15:

This IP address has been reported a total of 245 times from 220 distinct sources. 20.206.67.15 was first reported on July 20th 2026, and the most recent report was 26 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-07-21 07:06:15 (26 seconds ago)	Type: web_scanning Risk: 100 Events: 59 Evidence: - Automated hostile web probing detected - Repeat ... show more Type: web_scanning Risk: 100 Events: 59 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇫🇮 sw0ok	2026-07-21 07:06:02 (39 seconds ago)	time="2026-07-21T07:05:50Z" level=info msg="Access to https://portainer.sw0ok.dev/wp-content/plugins ... show more time="2026-07-21T07:05:50Z" level=info msg="Access to https://portainer.sw0ok.dev/wp-content/plugins/hellopress/wp_filemanager.php (method GET) is not authorized to user <anonymous>, responding with status code 401 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2Fwp-content%2Fplugins%2Fhellopress%2Fwp_filemanager.php&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=20.206.67.15 time="2026-07-21T07:05:50Z" level=info msg="Access to https://portainer.sw0ok.dev/this_is_a_new_hello_world.php (method GET) is not authorized to user <anonymous>, responding with status code 401 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2Fthis_is_a_new_hello_world.php&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=20.206.67.15 time="2026-07-21T07:05:50Z" level=info msg="Access to https://portainer.sw0ok.dev/sql.php (method GET) is not authorized to user <anonymous>, responding with status code 401 with locat ... show less	Brute-Force
🇩🇪 Phenix Info	2026-07-21 07:00:46 (5 minutes ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
Anonymous	2026-07-21 06:57:51 (8 minutes ago)	PAD: Bad_Web_Bot_D detected	Bad Web Bot
🇩🇪 macrob	2026-07-21 06:55:45 (10 minutes ago)	2026/07/21 06:55:23 [error] 2380568#2380568: 395163204 access forbidden by rule, client: 20.206.67. ... show more 2026/07/21 06:55:23 [error] 2380568#2380568: 395163204 access forbidden by rule, client: 20.206.67.15, server: bin.partners, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "bin.partners" 2026/07/21 06:55:39 [error] 2380570#2380570: 395163246 access forbidden by rule, client: 20.206.67.15, server: bin.partners, request: "GET /wp-admin/css/colors/blue/file.php HTTP/2.0", host: "bin.partners" 2026/07/21 06:55:42 [error] 2380570#2380570: 395163231 access forbidden by rule, client: 20.206.67.15, server: bin.partners, request: "GET /wp-admin/maint/wp-is.php HTTP/2.0", host: "bin.partners" ... show less	Web App Attack
🇷🇺 Reaper	2026-07-21 06:55:03 (11 minutes ago)	Repeated 404 errors from 20.206.67.15	Web App Attack
🇸🇪 nekopavel	2026-07-21 06:54:58 (11 minutes ago)	20.206.67.15 - - [21/Jul/2026:08:54:46 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.206.67.15 - - [21/Jul/2026:08:54:46 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" neko.chat "-""0.000" "-""Campinas" "BR" 20.206.67.15 - - [21/Jul/2026:08:54:46 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 0"-" neko.chat "-""0.004" "0.003""Campinas" "BR" 20.206.67.15 - - [21/Jul/2026:08:54:56 +0200]"GET /wp-slss.php HTTP/1.1" 301 162"-" neko.chat "-""0.000" "-""Campinas" "BR" ... show less	Hacking Bad Web Bot Web App Attack
🇭🇺 wickedip	2026-07-21 06:50:00 (16 minutes ago)	Multiple WAF violations. (Scanning for credential files, nonexistent PHP files, other hacker files, ... show more Multiple WAF violations. (Scanning for credential files, nonexistent PHP files, other hacker files, using fake and/or empty UserAgent values.) show less	Brute-Force Exploited Host Web App Attack Hacking
🇷🇴 SpamStopper	2026-07-21 06:48:47 (17 minutes ago)	Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 06:37:36 (29 minutes ago)	[21/Jul/2026:06:37:36 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=20.206 ... show more [21/Jul/2026:06:37:36 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=20.206.67.15 method=GET req=/database.php uri=/database.php status=404 bytes=27 rt=0.001 urt=0.001 ref="-" ua="-" ... show less	Web App Attack Bad Web Bot
🇳🇱 debestelapp	2026-07-21 06:36:01 (30 minutes ago)		Web App Attack
🇫🇷 abuseipdb.amaze321	2026-07-21 06:34:11 (32 minutes ago)	Automated reconnaissance: repeated requests for sensitive/non-existent paths.	Web App Attack Bad Web Bot
🇮🇩 origrata	2026-07-21 06:30:53 (35 minutes ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /wp-content/plugins/hellopress/wp_filem ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
Anonymous	2026-07-21 06:30:25 (36 minutes ago)	Automated scanning of WordPress installation	Bad Web Bot Web App Attack
🇹🇼 tye	2026-07-21 06:29:53 (36 minutes ago)	Wazuh Alert Evidence: 20.206.67.15 (20.206.67.15) - - [21/Jul/2026:14:29:51 +0800] "GET /this_is_a_n ... show more Wazuh Alert Evidence: 20.206.67.15 (20.206.67.15) - - [21/Jul/2026:14:29:51 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 437 "-" "-" show less	Web App Attack

Showing 1 to 15 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 45.153.100.33

🇮🇩 210.79.142.69

🇺🇬 196.0.3.188

🇮🇹 188.152.238.126

🇺🇸 172.202.118.69

🇩🇰 151.216.96.214

🇨🇳 123.158.60.250

🇰🇷 121.142.87.218

🇻🇳 103.82.21.8

🇱🇹 94.244.77.5

🇩🇪 91.107.145.13

🇺🇸 64.188.22.160

🇷🇴 2.57.122.238

🇳🇿 203.94.63.191

🇺🇸 172.234.21.101

🇺🇸 143.110.228.118

🇺🇸 137.184.11.129

🇮🇳 103.89.136.111

🇷🇴 92.118.39.50

🇸🇬 82.38.180.244