JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.232.199.39

191.232.199.39 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft do Brasil Imp. e Com. Software e Video G
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.232.199.39

Whois 191.232.199.39

IP Abuse Reports for 191.232.199.39:

This IP address has been reported a total of 144 times from 125 distinct sources. 191.232.199.39 was first reported on July 26th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 patrisei	2026-07-26 19:26:20 (3 minutes ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing show less	Port Scan Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-07-26 19:23:35 (6 minutes ago)	CloudFlare WAF REPORT: /wp-content/plugins/fix/up.php	Bad Web Bot Web App Attack
🇺🇸 WizardsToolkit	2026-07-26 19:15:02 (15 minutes ago)	attempted to access	Web App Attack
🇩🇪 JLKnoch Software GmbH	2026-07-26 19:11:49 (18 minutes ago)	CrowdSec crowdsecurity/http-probing	Brute-Force Web App Attack
🇹🇷 oalver	2026-07-26 19:11:28 (18 minutes ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_auth_flood ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_auth_flood, nginx_404_flood, nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-admin/images/admin.php (HTTP 404); 404_flood: 10 requests to /wp-admin/css/colors/index.php (HTTP 404) within 60s; auth_flood: 8 requests to /wp-includes/ (HTTP 403) within 60s. First seen: 2026-07-26. Risk score: 70/100. show less	Web App Attack
🇩🇪 macrob	2026-07-26 19:09:09 (20 minutes ago)	2026/07/26 19:09:06 [error] 2941818#2941818: 414435792 access forbidden by rule, client: 191.232.19 ... show more 2026/07/26 19:09:06 [error] 2941818#2941818: 414435792 access forbidden by rule, client: 191.232.199.39, server: binixo.mx, request: "GET /admin.php HTTP/1.1", host: "binixo.mx" 2026/07/26 19:09:07 [error] 2941818#2941818: 414435792 access forbidden by rule, client: 191.232.199.39, server: binixo.mx, request: "GET /wp-includes/block-supports/ HTTP/1.1", host: "binixo.mx" 2026/07/26 19:09:07 [error] 2941818#2941818: 414435792 access forbidden by rule, client: 191.232.199.39, server: binixo.mx, request: "GET /wp-content/admin.php HTTP/1.1", host: "binixo.mx" ... show less	Web App Attack
🇸🇪 nekopavel	2026-07-26 19:00:25 (29 minutes ago)	191.232.199.39 - - [26/Jul/2026:21:00:23 +0200]"GET /wp-includes/block-supports/ HTTP/1.1" 301 0"-" ... show more 191.232.199.39 - - [26/Jul/2026:21:00:23 +0200]"GET /wp-includes/block-supports/ HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.004" "0.004""Campinas" "BR" 191.232.199.39 - - [26/Jul/2026:21:00:23 +0200]"GET /wp-content/admin.php HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.005" "0.004""Campinas" "BR" 191.232.199.39 - - [26/Jul/2026:21:00:24 +0200]"GET /wp-admin/images/admin.php HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.005" "0.003""Campinas" "BR" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 etu brutus	2026-07-26 18:50:19 (39 minutes ago)	191.232.199.39 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇫🇷 pm33	2026-07-26 18:46:41 (43 minutes ago)	Excessive crawling HTTP 404	Web App Attack
🇺🇸 RLDD	2026-07-26 18:44:00 (46 minutes ago)	WP probing for vulnerabilities -lev	Web App Attack
🇫🇮 Christopher Hughes	2026-07-26 18:33:04 (57 minutes ago)	wp-includes scan	Web App Attack
🇫🇷 mrcrassi	2026-07-26 18:25:52 (1 hour ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/plugins/fix/up.php UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 jbouwh	2026-07-26 18:17:46 (1 hour ago)	[Sun Jul 26 20:17:39.892976 2026] [authz_core:error] [pid 907611:tid 907611] [client 191.232.199.39: ... show more [Sun Jul 26 20:17:39.892976 2026] [authz_core:error] [pid 907611:tid 907611] [client 191.232.199.39:3153] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/uploads/2024/index.php [Sun Jul 26 20:17:40.478132 2026] [authz_core:error] [pid 907611:tid 907611] [client 191.232.199.39:3153] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/uploads/index.php [Sun Jul 26 20:17:45.554633 2026] [authz_core:error] [pid 907611:tid 907611] [client 191.232.199.39:3153] AH01630: client denied by server configuration: /data/srv/[redacted]/wp-content/uploads/admin.php show less	Web App Attack
Anonymous	2026-07-26 18:13:28 (1 hour ago)	191.232.199.39 - - [26/Jul/2026:20:13:28 +0200] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 169 "-" ... show more 191.232.199.39 - - [26/Jul/2026:20:13:28 +0200] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 169 "-" "Mozilla/5.0" show less	Web App Attack
Anonymous	2026-07-26 18:07:17 (1 hour ago)	(PERMBLOCK) 191.232.199.39 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 191.232.199.39 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.94

🇳🇱 185.224.128.16

🇮🇳 182.18.139.237

🇸🇬 156.240.235.171

🇺🇿 84.54.71.138

🇪🇸 79.117.213.49

🇰🇷 59.152.168.184

🇳🇿 45.133.7.135

🇬🇧 35.203.210.180

🇺🇸 34.46.171.102

🇫🇷 23.180.120.145

🇷🇺 213.165.192.233

🇺🇸 206.55.187.146

🇹🇼 198.235.24.49

🇧🇷 177.4.55.14

🇩🇪 166.0.0.66

🇭🇰 152.32.172.177

🇳🇱 138.124.30.187

🇮🇳 103.194.243.199

🇮🇩 103.99.214.211