JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.243.210.144

20.243.210.144 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 76%: ?

76%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.243.210.144

Whois 20.243.210.144

IP Abuse Reports for 20.243.210.144:

This IP address has been reported a total of 21 times from 14 distinct sources. 20.243.210.144 was first reported on June 5th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRNP	2026-06-24 04:04:18 (3 hours ago)	_:443 20.243.210.144 - - [24/Jun/2026:04:04:16 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more _:443 20.243.210.144 - - [24/Jun/2026:04:04:16 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 phoenix1jl96	2026-06-24 03:03:17 (4 hours ago)	2026/06/24 05:01:54 [error] 2707675#2707675: 60313 open() "/home/user-data/www/default/cgi-bin/.env ... show more 2026/06/24 05:01:54 [error] 2707675#2707675: 60313 open() "/home/user-data/www/default/cgi-bin/.env" failed (2: No such file or directory), client: 20.243.210.144, server: box.ledemon.us, request: "GET /cgi-bin/.env HTTP/1.1", host: "82-64-186-34.subs.proxad.net" 2026/06/24 05:02:46 [error] 2707675#2707675: *60350 open() "/home/user-data/www/default/cgi-bin/.env" failed (2: No such file or directory), client: 20.243.210.144, server: mta-sts.box.ledemon.us, request: "GET /cgi-bin/.env HTTP/1.1", host: "mta-sts.box.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇧🇪 cmbplf	2026-06-24 02:25:38 (5 hours ago)	9.985 requests with url.path .env 226 requests with url.path /vendor/phpunit/phpunit/src/Util/PHP ... show more 9.985 requests with url.path .env 226 requests with url.path /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Brute-Force Bad Web Bot
🇬🇧 WebNiraj	2026-06-23 23:33:43 (7 hours ago)	(mod_security) mod_security (id:949110) triggered by 20.243.210.144 (JP/Japan/-): 5 in the last 3600 ... show more (mod_security) mod_security (id:949110) triggered by 20.243.210.144 (JP/Japan/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇫🇷 LRNP	2026-06-23 20:21:20 (11 hours ago)	_:443 20.243.210.144 - - [23/Jun/2026:20:21:18 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more _:443 20.243.210.144 - - [23/Jun/2026:20:21:18 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-23 16:42:14 (14 hours ago)	Aggressive web search of vulnerable pages: /.env /conf/.env /wp-content/.env /wp-admin/.env /library ... show more Aggressive web search of vulnerable pages: /.env /conf/.env /wp-content/.env /wp-admin/.env /library/.env ... show less	Web App Attack
🇫🇷 LRNP	2026-06-23 15:51:51 (15 hours ago)	_:443 20.243.210.144 - - [23/Jun/2026:15:51:50 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more _:443 20.243.210.144 - - [23/Jun/2026:15:51:50 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 EvilTurkey	2026-06-23 12:13:14 (19 hours ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇫🇷 LRNP	2026-06-23 12:02:58 (19 hours ago)	_:443 20.243.210.144 - - [23/Jun/2026:12:02:57 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more _:443 20.243.210.144 - - [23/Jun/2026:12:02:57 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-23 01:19:38 (1 day ago)	Aggressive web scan	Web App Attack
Anonymous	2026-06-23 01:07:46 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 pixiekat	2026-06-22 23:35:33 (1 day ago)	[Mon Jun 22 23:35:30.861021 2026] [authz_core:error] [pid 269012:tid 269034] [client 20.243.210.144: ... show more [Mon Jun 22 23:35:30.861021 2026] [authz_core:error] [pid 269012:tid 269034] [client 20.243.210.144:53091] AH01630: client denied by server configuration: /var/www/html/.env [Mon Jun 22 23:35:31.438650 2026] [authz_core:error] [pid 269040:tid 269054] [client 20.243.210.144:53269] AH01630: client denied by server configuration: /var/www/html/conf [Mon Jun 22 23:35:32.042200 2026] [authz_core:error] [pid 269040:tid 269053] [client 20.243.210.144:53441] AH01630: client denied by server configuration: /var/www/html/wp-content [Mon Jun 22 23:35:32.603209 2026] [authz_core:error] [pid 269040:tid 269050] [client 20.243.210.144:53652] AH01630: client denied by server configuration: /var/www/html/wp-admin [Mon Jun 22 23:35:33.126125 2026] [authz_core:error] [pid 269012:tid 269018] [client 20.243.210.144:53836] AH01630: client denied by server configuration: /var/www/html/library ... show less	Brute-Force
🇫🇷 LRNP	2026-06-21 22:26:09 (2 days ago)	_:80 20.243.210.144 - - [21/Jun/2026:22:25:29 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 ( ... show more _:80 20.243.210.144 - - [21/Jun/2026:22:25:29 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 21:48:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 20.243.210.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 20.243.210.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 17:48:24.523092 2026] [security2:error] [pid 2990:tid 2990] [client 20.243.210.144:56044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.env"] [unique_id "ajhcKJ7vNb-ovVOMJa-gKQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRNP	2026-06-21 20:56:53 (2 days ago)	_:80 20.243.210.144 - - [21/Jun/2026:20:56:14 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 ( ... show more _:80 20.243.210.144 - - [21/Jun/2026:20:56:14 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.176.29.6

🇺🇸 134.209.172.23

🇨🇳 111.26.184.29

🇨🇳 106.75.176.8

🇩🇪 63.183.57.122

🇯🇵 57.180.249.245

🇺🇸 54.153.6.135

🇧🇷 45.164.251.106

🇨🇦 20.104.19.65

🇰🇷 106.248.238.187

🇨🇳 106.75.144.37

🇨🇳 101.96.199.249

🇺🇸 54.235.26.74

🇯🇵 43.207.1.56

🇺🇸 3.141.39.156

🇲🇰 185.193.240.246

🇫🇷 161.97.74.178

🇹🇼 111.70.29.130

🇨🇳 106.227.33.165

🇷🇺 94.233.127.218