JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.219.185.206

Recent Activity

Abuse Confidence Score

100% Critical

3,117 reports

880 reporters · latest 3 hours ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇳 India
City: Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

3,117 from 880 distinct reporters

First reported

October 2nd 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 722 🇺🇸 United States of America 595 🇫🇷 France 426

Most common categories Web App Attack 2,334 Bad Web Bot 866 Hacking 672 Brute-Force 650 Port Scan 293

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-31 04:29:41 (3 hours ago)	Repeat offender: banned by fail2ban 2 times across jails	Hacking
🇨🇭 Peter-Johann Sarbach	2026-10-30 11:50:33 (20 hours ago)	Hacking website	Hacking
Anonymous	2026-10-30 04:23:48 (1 day ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
Anonymous	2026-10-28 04:23:49 (3 days ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇺🇸 Rayulcifer	2026-10-27 21:52:33 (3 days ago)	[Fri Oct 02 23:02:28.691045 2026] [authz_core:error] [pid 2219017:tid 140444289726144] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct ... show more [Fri Oct 02 23:02:28.691045 2026] [authz_core:error] [pid 2219017:tid 140444289726144] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 02 23:02:28.877162 2026] [authz_core:error] [pid 2219017:tid 140444239369920] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 02 23:02:29.064540 2026] [authz_core:error] [pid 2219017:tid 140443207591616] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/go.php [Fri Oct 02 23:02:29.254915 2026] [authz_core:error] [pid 2219017:tid 140446957295296] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Fri Oct 02 23:02:29.444975 2026] [authz_core:error] [pid 2219017:tid 140443174020800] [client 20.219.185.206:39844] AH01630: client d ... show less	Brute-Force SSH
🇫🇷 CaduVet	2026-10-27 15:35:51 (3 days ago)	2026-10-03 12:26:35,875 fail2ban.actions \[2606\]: NOTICE \[http-noscript\] Ban 20.219.185.206 2026-10-04 13:31:55,703 fail2ban.actions \[2606\]: NOTICE \[http-noscript\] Ban 20.219.185.206 2026-10-04 21:14:57,117 fail2ban.actions ... show more 2026-10-03 12:26:35,875 fail2ban.actions \[2606\]: NOTICE \[http-noscript\] Ban 20.219.185.206 2026-10-04 13:31:55,703 fail2ban.actions \[2606\]: NOTICE \[http-noscript\] Ban 20.219.185.206 2026-10-04 21:14:57,117 fail2ban.actions \[2606\]: NOTICE \[http-noscript\] Ban 20.219.185.206 ... show less	Brute-Force
🇺🇸 Rayulcifer	2026-10-26 21:22:45 (4 days ago)	[Fri Oct 02 23:02:28.691045 2026] [authz_core:error] [pid 2219017:tid 140444289726144] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct ... show more [Fri Oct 02 23:02:28.691045 2026] [authz_core:error] [pid 2219017:tid 140444289726144] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 02 23:02:28.877162 2026] [authz_core:error] [pid 2219017:tid 140444239369920] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 02 23:02:29.064540 2026] [authz_core:error] [pid 2219017:tid 140443207591616] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/go.php [Fri Oct 02 23:02:29.254915 2026] [authz_core:error] [pid 2219017:tid 140446957295296] [client 20.219.185.206:39844] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Fri Oct 02 23:02:29.444975 2026] [authz_core:error] [pid 2219017:tid 140443174020800] [client 20.219.185.206:39844] AH01630: client d ... show less	Brute-Force SSH
Anonymous	2026-10-26 19:53:13 (4 days ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-10-26 03:14:43 (5 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.219.185.206 172.71.198.186 - - [07/Oct/2026:02:24:24 -0300] "GET /2.php HTTP/1.1" 404 18193	Bad Web Bot
🇧🇷 Peregrine	2026-10-25 03:14:04 (6 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.219.185.206 172.71.198.186 - - [07/Oct/2026:02:24:24 -0300] "GET /2.php HTTP/1.1" 404 18193	Bad Web Bot
Anonymous	2026-10-24 13:47:34 (6 days ago)	fail2ban jail apache-scanner: 20.219.185.206 - - [02/Oct/2026:15:21:28 -0700] "GET /ws.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [ ... show more fail2ban jail apache-scanner: 20.219.185.206 - - [02/Oct/2026:15:21:28 -0700] "GET /ws.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [02/Oct/2026:15:21:29 -0700] "GET /404.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [02/Oct/2026:15:21:29 -0700] "GET /wp-admin/user.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [02/Oct/2026:15:21:29 -0700] "GET /wp-conf.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [02/Oct/2026:15:21:30 -0700] "GET /wp-content/themes/hideo/netwo show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:52:29 (6 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-23 18:17:20 (1 week ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-10-23 03:14:02 (1 week ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.219.185.206 172.71.198.186 - - [07/Oct/2026:02:24:24 -0300] "GET /2.php HTTP/1.1" 404 18193	Bad Web Bot
🇺🇸 printedwicked	2026-10-22 22:24:49 (1 week ago)	PW Sentinel on printedwicked.com: blocked (analyst). Automated report.	Port Scan

Showing 1 to 15 of 3117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 186.248.197.77

🇹🇷 185.148.240.80

🇧🇷 138.94.87.230

🇨🇳 118.196.114.236

🇺🇸 65.49.20.75

🇺🇸 65.49.20.67

🇬🇧 193.32.209.226

🇮🇳 113.11.231.104

🇨🇳 101.96.229.2

🇬🇧 87.236.176.122

🇫🇷 85.217.140.13

🇫🇷 85.217.140.2

🇮🇳 59.179.31.238

🇳🇱 45.156.87.70

🇧🇪 198.235.24.244

🇺🇸 187.40.234.57

🇫🇷 185.177.72.23

🇺🇸 147.182.225.86

🇺🇸 104.22.160.24

🇦🇺 103.43.75.56