JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.198.74.230

Recent Activity

Abuse Confidence Score

100% Critical

1,973 reports

773 reporters · latest 1 day ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇳 India
City: Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,973 from 773 distinct reporters

First reported

September 28th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 523 🇺🇸 United States of America 337 🇫🇷 France 218

Most common categories Web App Attack 1,471 Bad Web Bot 495 Brute-Force 475 Hacking 432 Port Scan 208

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 ordifypl	2026-11-03 15:05:54 (1 day ago)	Web vulnerability scanning: probing for .env, .git, WordPress, phpunit and other non-existent files (fail2ban web-scan)	Web App Attack Bad Web Bot
🇺🇸 Rayulcifer	2026-11-02 15:20:18 (2 days ago)	[Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 ... show more [Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 20:52:22.472834 2026] [authz_core:error] [pid 39865:tid 140444121937600] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Oct 04 20:52:22.662552 2026] [authz_core:error] [pid 39865:tid 140446974080704] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/ocean/gZqjPe.php [Sun Oct 04 20:52:22.846247 2026] [authz_core:error] [pid 39865:tid 140444247762624] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/midnight/ZDOUJz.php [Sun Oct 04 20:52:23.030728 2026] [authz_core:error] [pid 39865:tid 140444289726144] ... show less	Brute-Force SSH
🇳🇱 tmiland	2026-10-31 23:12:32 (3 days ago)	Detected 34 connections from 20.198.74.230 last 10 minutes.; 20.198.74.230 is part of network 20.0.0.0 with 18 source(s) (1174 connections) in the last 10 minutes; Logs: 20.198.74.230 - - [07/Oct/2026:00:17:52 +0200] "GET /wp-content/plugins/hellopre ... show more Detected 34 connections from 20.198.74.230 last 10 minutes.; 20.198.74.230 is part of network 20.0.0.0 with 18 source(s) (1174 connections) in the last 10 minutes; Logs: 20.198.74.230 - - [07/Oct/2026:00:17:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:53 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:53 +0200] "GET /wp-admin/css/colors/ocean/gZqjPe.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:53 +0200] "GET /wp-admin/css/colors/midnight/ZDOUJz.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:53 +0200] "GET /wp-admin/css/colors/ectoplasm/customize.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:53 +0200] "GET /wp-admin/maint/tura.php HTTP/1.1" 404 2992 "-" "-" 20.198.74.230 - - [07/Oct/2026:00:17:54 +0200] "GET /wp-admin/js/MIimQIHjbM.php HTTP/1.1" 404 2992 "-" "-" 2 show less	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-27 21:52:22 (1 week ago)	[Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 ... show more [Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 20:52:22.472834 2026] [authz_core:error] [pid 39865:tid 140444121937600] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Oct 04 20:52:22.662552 2026] [authz_core:error] [pid 39865:tid 140446974080704] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/ocean/gZqjPe.php [Sun Oct 04 20:52:22.846247 2026] [authz_core:error] [pid 39865:tid 140444247762624] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/midnight/ZDOUJz.php [Sun Oct 04 20:52:23.030728 2026] [authz_core:error] [pid 39865:tid 140444289726144] ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-10-26 21:22:34 (1 week ago)	[Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 ... show more [Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 20:52:22.472834 2026] [authz_core:error] [pid 39865:tid 140444121937600] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Oct 04 20:52:22.662552 2026] [authz_core:error] [pid 39865:tid 140446974080704] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/ocean/gZqjPe.php [Sun Oct 04 20:52:22.846247 2026] [authz_core:error] [pid 39865:tid 140444247762624] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/midnight/ZDOUJz.php [Sun Oct 04 20:52:23.030728 2026] [authz_core:error] [pid 39865:tid 140444289726144] ... show less	Brute-Force SSH
Anonymous	2026-10-24 13:46:18 (1 week ago)	fail2ban jail apache-scanner: 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /cu.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /bd.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] " ... show more fail2ban jail apache-scanner: 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /cu.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /bd.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] "GET /n.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] "GET /zeal.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:32 -0700] "GET /public/moon.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:32 -0700] "GET /ws61.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:33 -0700] "GET /mailer.php7 HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:33 -0700] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:34 -0700] "GET /wp-includes/assets/go.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:34 -0700] "GET /files.php HTTP/1 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:51:54 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-10-22 07:01:14 (1 week ago)	[Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 ... show more [Sun Oct 04 20:52:22.285395 2026] [authz_core:error] [pid 39865:tid 140443199198912] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Oct 04 20:52:22.472834 2026] [authz_core:error] [pid 39865:tid 140444121937600] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Oct 04 20:52:22.662552 2026] [authz_core:error] [pid 39865:tid 140446974080704] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/ocean/gZqjPe.php [Sun Oct 04 20:52:22.846247 2026] [authz_core:error] [pid 39865:tid 140444247762624] [client 20.198.74.230:30997] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/css/colors/midnight/ZDOUJz.php [Sun Oct 04 20:52:23.030728 2026] [authz_core:error] [pid 39865:tid 140444289726144] ... show less	Brute-Force SSH
Anonymous	2026-10-21 13:19:55 (2 weeks ago)	fail2ban jail apache-scanner: 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /cu.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /bd.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] " ... show more fail2ban jail apache-scanner: 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /cu.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:30 -0700] "GET /bd.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] "GET /n.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:31 -0700] "GET /zeal.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:32 -0700] "GET /public/moon.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:32 -0700] "GET /ws61.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:33 -0700] "GET /mailer.php7 HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:33 -0700] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:34 -0700] "GET /wp-includes/assets/go.php HTTP/1.1" 403 471 "-" "-" 20.198.74.230 - - [28/Sep/2026:17:29:34 -0700] "GET /files.php HTTP/1 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:28:11 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-20 07:10:58 (2 weeks ago)	T: f2b 404 5x	Web App Attack
Anonymous	2026-10-20 06:55:22 (2 weeks ago)	B: f2b 404 5x	Web App Attack
🇦🇺 Klaverstyn	2026-10-17 04:56:31 (2 weeks ago)	Persistent attacker, repeat offender	Hacking
🇨🇦 zXero	2026-10-17 00:29:36 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇧🇪 madeit	2026-10-16 14:45:52 (2 weeks ago)		Web App Attack

Showing 1 to 15 of 1973 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.109.252.174

🇧🇩 103.158.118.130

🇮🇩 103.156.164.5

🇺🇸 72.253.251.7

🇬🇧 213.171.216.91

🇺🇸 206.81.12.187

🇺🇸 205.210.31.42

🇪🇸 194.146.92.50

🇮🇩 103.153.62.88

🇧🇩 103.137.67.87

🇧🇩 103.135.79.184

🇦🇺 103.26.236.225

🇧🇩 103.13.193.92

🇳🇱 45.148.10.157

🇮🇷 217.218.36.68

🇺🇸 188.212.136.180

🇨🇳 180.184.51.110

🇳🇱 167.99.210.137

🇦🇷 129.224.215.179

🇹🇼 116.59.10.150