JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.213.244.182

Neutral Activity

Abuse confidence score ?

0% Low Risk

20 reports

9 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Canberra, Australian Capital Territory

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.213.244.182 has been reported 20 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.213.244.182

Export CSV

This IP address has been reported a total of 20 times from 9 distinct sources. 20.213.244.182 was first reported on May 29th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Epimetheus	2022-06-10 06:08:33 (4 years ago)	Unauthorized access attempts: From: 20.213.244.182 Method: HTTP GET URI Path: /old-index.php ... show more Unauthorized access attempts: From: 20.213.244.182 Method: HTTP GET URI Path: /old-index.php UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" show less	Web App Attack
🇧🇷 AC - Team	2022-06-08 08:42:53 (4 years ago)	20.213.244.182 - - [08/Jun/2022:09:42:56 -0300] "GET /1index.php HTTP/1.1" 301 628 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [08/Jun/2022:09:42:56 -0300] "GET /1index.php HTTP/1.1" 301 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇧🇷 AC - Team	2022-06-08 03:50:09 (4 years ago)	20.213.244.182 - - [08/Jun/2022:04:50:08 -0300] "GET /1index.php HTTP/1.1" 301 614 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [08/Jun/2022:04:50:08 -0300] "GET /1index.php HTTP/1.1" 301 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇨🇱 posicionarte.cl	2022-06-06 23:04:38 (4 years ago)	try to DDoS Attack Bloqued by Cloudflare	DDoS Attack
🇧🇷 AC - Team	2022-06-06 18:10:46 (4 years ago)	20.213.244.182 - - [06/Jun/2022:19:10:46 -0300] "GET /1index.php HTTP/1.1" 403 433 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [06/Jun/2022:19:10:46 -0300] "GET /1index.php HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇫🇷 I.Hate.Spam	2022-06-06 16:30:32 (4 years ago)	Website hacking attempt: Improper php file access [php file]	Hacking
🇧🇷 AC - Team	2022-06-05 15:09:51 (4 years ago)	20.213.244.182 - - [05/Jun/2022:16:09:51 -0300] "GET /1index.php HTTP/1.1" 302 556 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [05/Jun/2022:16:09:51 -0300] "GET /1index.php HTTP/1.1" 302 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇬🇧 findlab	2022-06-05 02:57:01 (4 years ago)	Backdrop CMS module - Request: /up.php	Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-06-03 19:54:40 (4 years ago)	20.213.244.182 - - [03/Jun/2022:20:54:39 -0300] "GET /1index.php HTTP/1.1" 200 9029 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [03/Jun/2022:20:54:39 -0300] "GET /1index.php HTTP/1.1" 200 9029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 DAILYKANBAN.COM	2022-06-03 15:30:31 (4 years ago)	(mod_security) mod_security (id:1000001) triggered by 20.213.244.182 (AU/Australia/-): 2 in the last ... show more (mod_security) mod_security (id:1000001) triggered by 20.213.244.182 (AU/Australia/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Jun 03 19:29:35.809591 2022] [:error] [pid 3359297:tid 23142657353472] [client 20.213.244.182:0] [client 20.213.244.182] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/old-index.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /old-index.php found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "intimidation.ltd"] [uri "/old-index.php"] [unique_id "YpphHwXv9XpZoKzdnO3jRQAAARU"] [Fri Jun 03 19:30:25.892710 2022] [:error] [pid 3359090:tid 23143037961984] [client 20.213.244.182:0] [client 20.213.244.182] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/up.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [ms show less	Web App Attack
Anonymous	2022-06-02 11:31:03 (4 years ago)	$f2bV_matches	Brute-Force
🇧🇷 AC - Team	2022-06-02 11:15:12 (4 years ago)	20.213.244.182 - - [02/Jun/2022:12:15:15 -0300] "GET /1index.php HTTP/1.1" 301 575 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [02/Jun/2022:12:15:15 -0300] "GET /1index.php HTTP/1.1" 301 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇬🇧 findlab	2022-06-01 13:30:01 (4 years ago)	Backdrop CMS module - Request: /1index.php	Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-06-01 09:03:05 (4 years ago)	20.213.244.182 - - [01/Jun/2022:10:03:07 -0300] "GET /1index.php HTTP/1.1" 301 567 "-" "Mozilla/5.0 ... show more 20.213.244.182 - - [01/Jun/2022:10:03:07 -0300] "GET /1index.php HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 AMRE	2022-06-01 07:01:42 (4 years ago)	/blog.php	Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.139.221.103

🇺🇸 195.184.76.163

🇺🇸 172.203.243.158

🇬🇧 154.16.44.79

🇧🇩 103.171.69.187

🇬🇧 89.37.172.136

🇷🇺 88.205.172.170

🇬🇧 31.14.254.102

🇷🇴 2.57.121.112

🇺🇸 212.104.141.25

🇵🇾 181.120.219.138

🇺🇸 172.56.90.76

🇦🇺 170.64.136.221

🇩🇪 164.92.197.17

🇬🇧 154.16.44.243

🇸🇬 150.109.16.200

🇺🇸 147.185.132.189

🇧🇪 104.155.13.93

🇮🇹 93.58.255.46

🇫🇷 85.217.140.40