JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.7.180.138

20.7.180.138 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.7.180.138

Whois 20.7.180.138

IP Abuse Reports for 20.7.180.138:

This IP address has been reported a total of 36 times from 33 distinct sources. 20.7.180.138 was first reported on December 30th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-04 20:11:16 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, SQL injection, Webshell probing show less	Bad Web Bot Web App Attack
Anonymous	2026-01-03 17:44:25 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 98%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 98%, Country: US, Attack patterns: WordPress scanning, SQL injection, Webshell probing show less	Bad Web Bot Web App Attack
🇬🇧 [email protected]	2026-01-01 00:45:45 (8 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-12-31 23:00:34 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-31	Hacking Web App Attack SSH
🇬🇧 sincler	2025-12-31 02:06:00 (8 months ago)	20.7.180.138 - - [30/Dec/2025:20:56:17 +0000] "GET /wp-admin/user/about.php HTTP/1.1" 404 236 "-" "- ... show more 20.7.180.138 - - [30/Dec/2025:20:56:17 +0000] "GET /wp-admin/user/about.php HTTP/1.1" 404 236 "-" "-" & Many Many more exploit searches show less	Hacking Web App Attack
🇩🇪 Mr-Money	2025-12-30 22:40:07 (8 months ago)	scenario: crowdsecurity/http-probing - events: 11	Hacking Web App Attack
🇫🇷 masterguru	2025-12-30 22:30:49 (8 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.7.180.138 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.7.180.138 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2025-12-30 22:12:12 (8 months ago)	Bot / seems abusive / Apache connections: 20	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-12-30 22:04:54 (8 months ago)	Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Met ... show more Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-12-30T22:04:54Z) show less	Web Spam Brute-Force Web App Attack
🇳🇱 oisecnet	2025-12-30 22:02:12 (8 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2025-12-30. 93 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2025-12-30. 93 requests from this IP. show less	Brute-Force Web App Attack SSH
🇱🇹 NotACaptcha	2025-12-30 21:43:56 (8 months ago)	webserver:80 [30/Dec/2025] "GET /kaza.php HTTP/1.1" 302 411 webserver:80 [30/Dec/2025] "GET /zsz.p ... show more webserver:80 [30/Dec/2025] "GET /kaza.php HTTP/1.1" 302 411 webserver:80 [30/Dec/2025] "GET /zsz.php HTTP/1.1" 302 409 webserver:80 [30/Dec/2025] "GET /classgoto24.php HTTP/1.1" 302 425 webserver:80 [30/Dec/2025] "GET /cabs.php HTTP/1.1" 302 411 webserver:80 [30/Dec/2025] "GET /cheka.php HTTP/1.1" 302 413 webserver:80 [30/Dec/2025] "GET /mda.php HTTP/1.1" 302 409 webserver:80 [30/Dec/2025] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 491 webserver:443 [30/Dec/2025] "GET /zsz.php HTTP/1.1" 404 408 webserver:443 [30/Dec/2025] "GET /classgoto24.php HTTP/1.1" 404 408 webserver:443 [30/Dec/2025] "GET /cabs.php HTTP/1.1" 404 408 webserver:443 [30/Dec/2025] "GET /cheka.php HTTP/1.1" 404 408 webserver:443 [30/Dec/2025] "GET /mda.php HTTP/1.1" 404 408 webserver:443 [30/Dec/2025] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4191 show less	Web App Attack
Anonymous	2025-12-30 21:28:01 (8 months ago)	20.7.180.138 - - [30/Dec/2025:22:27:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.7.180.138 - - [30/Dec/2025:22:27:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:50 +0100] "GET /mda.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:50 +0100] "GET /cheka.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:50 +0100] "GET /cabs.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /classgoto24.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /zsz.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /kaza.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /lites.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /bby.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /get.php HTTP/1.1" 404 455 "-" "-" 20.7.180.138 - - [30/Dec/2025:22:27:51 +0100] "GET /xtride.php HTTP/1.1" 404 455 "-" ... show less	DDoS Attack
🇺🇦 URAN Publishing Service	2025-12-30 20:56:55 (8 months ago)	20.7.180.138 - - [30/Dec/2025:22:56:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.7.180.138 - - [30/Dec/2025:22:56:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2878 "-" "-" ... show less	Web App Attack
🇺🇸 ArturShelby	2025-12-30 20:56:33 (8 months ago)	Suspicious file access: /.well-known/admin.php	Web App Attack
🇳🇱 Roderic	2025-12-30 20:52:33 (8 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.175.16.111

🇦🇪 94.205.193.64

🇨🇴 191.97.12.90

🇳🇴 185.101.33.186

🇦🇷 181.166.175.99

🇮🇳 171.76.110.233

🇺🇸 147.185.132.52

🇰🇷 121.131.220.143

🇵🇰 111.68.98.152

🇻🇳 103.172.236.241

🇺🇸 66.31.182.248

🇨🇳 47.97.27.33

🇸🇬 43.156.115.178

🇬🇧 35.203.211.54

🇵🇱 23.27.251.60

🇮🇳 15.252.236.198

🇺🇸 172.172.170.199

🇵🇭 136.158.61.254

🇧🇬 79.124.60.218

🇺🇸 66.132.186.218