JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.195.181.10

20.195.181.10 was found in our database!

This IP was reported 687 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.195.181.10

Whois 20.195.181.10

IP Abuse Reports for 20.195.181.10:

This IP address has been reported a total of 687 times from 295 distinct sources. 20.195.181.10 was first reported on July 23rd 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Skyrider	2026-07-27 03:44:28 (2 minutes ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
Anonymous	2026-07-27 03:32:46 (13 minutes ago)	Aggressive web scan	Web App Attack
🇱🇻 garmtech.com	2026-07-27 03:31:57 (14 minutes ago)	Attempted access to sensitive endpoint (/wp-content/uploads/index.php) detected. Automated scan or u ... show more Attempted access to sensitive endpoint (/wp-content/uploads/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 deskpass.com	2026-07-27 03:27:26 (19 minutes ago)	GET /wp-content/admin.php","timestamp":"2026-07-27T03:23:54.849Z"}	Web App Attack
🇫🇮 Christopher Hughes	2026-07-27 03:27:08 (19 minutes ago)	[Mon Jul 27 04:27:06.838095 2026] [proxy_fcgi:error] [pid 2260950:tid 139826099623488] [client 20.19 ... show more [Mon Jul 27 04:27:06.838095 2026] [proxy_fcgi:error] [pid 2260950:tid 139826099623488] [client 20.195.181.10:27265] AH01071: Got error 'Primary script unknown' [Mon Jul 27 04:27:07.069514 2026] [proxy_fcgi:error] [pid 2260950:tid 139826116408896] [client 20.195.181.10:27265] AH01071: Got error 'Primary script unknown' [Mon Jul 27 04:27:07.543880 2026] [proxy_fcgi:error] [pid 2260950:tid 139826527454784] [client 20.195.181.10:27265] AH01071: Got error 'Primary script unknown' [Mon Jul 27 04:27:07.756016 2026] [proxy_fcgi:error] [pid 2260950:tid 139825436927552] [client 20.195.181.10:27265] AH01071: Got error 'Primary script unknown' [Mon Jul 27 04:27:08.251948 2026] [proxy_fcgi:error] [pid 2260950:tid 139826519062080] [client 20.195.181.10:27265] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 Epimetheus	2026-07-27 03:24:44 (21 minutes ago)	Unauthorized access attempts: [GET] /atomlib.php [GET] /system_log.php [GET] /zwso.php [GET] /wp-co ... show more Unauthorized access attempts: [GET] /atomlib.php [GET] /system_log.php [GET] /zwso.php [GET] /wp-content/themes/admin.php [GET] /simple.php [GET] /ioxi-o.php [GET] /term.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 Baking333	2026-07-27 03:08:22 (38 minutes ago)	[redacted] 20.195.181.10 - - [27/Jul/2026:04:08:14 +0100] "GET /[redacted] HTTP/1.1" 405 392 "-" "Mo ... show more [redacted] 20.195.181.10 - - [27/Jul/2026:04:08:14 +0100] "GET /[redacted] HTTP/1.1" 405 392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 20.195.181.10 - - [27/Jul/2026:04:08:20 +0100] "GET /cgi-bin/ HTTP/1.1" 307 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-27 03:06:13 (40 minutes ago)	20.195.181.10 - - [27/Jul/2026:06:06:12 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 785 ... show more 20.195.181.10 - - [27/Jul/2026:06:06:12 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 785 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-27 03:00:06 (46 minutes ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/admin.php	Web App Attack
🇺🇸 slay3r9903	2026-07-27 02:55:11 (51 minutes ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇱🇻 garmtech.com	2026-07-27 02:49:56 (56 minutes ago)	Attempted access to sensitive endpoint (/wp-content/plugins/twenty/login.php) detected. Automated sc ... show more Attempted access to sensitive endpoint (/wp-content/plugins/twenty/login.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 SX Communications	2026-07-27 02:41:55 (1 hour ago)	Web vulnerability scanning / probing from 20.195.181.10: automated requests for CMS admin paths, log ... show more Web vulnerability scanning / probing from 20.195.181.10: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 5 hits; paths: /abc.php, /about.php, /goods.php, /defaults.php, /.well-known/. show less	Port Scan Hacking Web App Attack
🇸🇪 vaia.cloud	2026-07-27 02:40:02 (1 hour ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇺🇸 SX Communications	2026-07-27 02:31:06 (1 hour ago)	Web vulnerability scanning / probing from 20.195.181.10: automated requests for CMS admin paths, log ... show more Web vulnerability scanning / probing from 20.195.181.10: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 6 hits; paths: /file.php, /adminfuns.php, /sf.php, /wp-content/admin.php, /wp-content/uploads/. show less	Port Scan Hacking Web App Attack
🇫🇷 mail.avx.gr	2026-07-27 02:29:25 (1 hour ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 20.195.181.10 - - [27/Jul/2026:05:29:25 +0300] "GE ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 20.195.181.10 - - [27/Jul/2026:05:29:25 +0300] "GET /info.php HTTP/1.1" 404 382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 687 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇳🇱 192.76.153.253

🇩🇪 165.232.114.23

🇩🇪 159.65.126.241

🇪🇸 158.158.32.229

🇺🇸 147.185.132.245

🇧🇬 79.124.59.78

🇸🇬 13.229.49.150

🇭🇰 220.246.46.144

🇳🇱 213.177.179.80

🇹🇼 210.61.64.135

🇮🇩 202.155.14.71

🇧🇷 191.219.8.134

🇳🇱 176.65.149.64

🇮🇶 169.224.126.205

🇩🇪 167.172.106.184

🇭🇰 165.154.23.25

🇩🇪 164.92.163.77

🇮🇩 163.7.11.155

🇩🇪 157.230.100.240