JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.195.192.35

20.195.192.35 was found in our database!

This IP was reported 306 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.195.192.35

Whois 20.195.192.35

IP Abuse Reports for 20.195.192.35:

This IP address has been reported a total of 306 times from 249 distinct sources. 20.195.192.35 was first reported on May 24th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-05-24 11:55:06 (1 week ago)	[Sun May 24 12:55:04.696729 2026] [proxy_fcgi:error] [pid 4155464:tid 139773704386112] [client 20.19 ... show more [Sun May 24 12:55:04.696729 2026] [proxy_fcgi:error] [pid 4155464:tid 139773704386112] [client 20.195.192.35:60429] AH01071: Got error 'Primary script unknown' [Sun May 24 12:55:05.127208 2026] [proxy_fcgi:error] [pid 4155464:tid 139775050794560] [client 20.195.192.35:60429] AH01071: Got error 'Primary script unknown' [Sun May 24 12:55:05.558134 2026] [proxy_fcgi:error] [pid 4155464:tid 139775025616448] [client 20.195.192.35:60429] AH01071: Got error 'Primary script unknown' [Sun May 24 12:55:05.787044 2026] [proxy_fcgi:error] [pid 4155464:tid 139774794913344] [client 20.195.192.35:60429] AH01071: Got error 'Primary script unknown' [Sun May 24 12:55:06.017705 2026] [proxy_fcgi:error] [pid 4155464:tid 139775034009152] [client 20.195.192.35:60429] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-05-24 11:52:47 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇨🇦 polycoda	2026-05-24 11:51:55 (1 week ago)	🔥 VERY AGGRESSIVE SCANNER probed over 100 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-05-24 11:50:18 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Guardian	2026-05-24 11:49:56 (1 week ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 20.195.192.35 [24/May/2026:11:49:55] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.195.192.35 [24/May/2026:11:49:56] "GET /x.php HTTP/1.1" show less	Port Scan Web App Attack
🇫🇷 solution.it	2026-05-24 11:49:40 (1 week ago)	[Sun May 24 13:49:40.214157 2026] [php7:error] [pid 2093211:tid 2093211] [client 20.195.192.35:5110] ... show more [Sun May 24 13:49:40.214157 2026] [php7:error] [pid 2093211:tid 2093211] [client 20.195.192.35:5110] script '/var/www/html/blog.solution.it/x.php' not found or unable to stat show less	Web App Attack
Anonymous	2026-05-24 11:49:35 (1 week ago)	T: f2b 404 5x	Web App Attack
🇮🇩 Burayot	2026-05-24 11:48:04 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.195.192.35 (BR/Brazil/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.195.192.35 (BR/Brazil/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 netllama	2026-05-24 11:46:10 (1 week ago)	20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 236 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /x.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /201.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /ops.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:45 -0700] "GET /samll.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:46 -0700] "GET /ingfo.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:46 -0700] "GET /c55cdler.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:46 -0700] "GET /error_log.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:46 -0700] "GET /xenon1337.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:46 -0700] "GET /alfa403.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [24/May/2026:04:45:47 -0700] "GET /test11.php HTTP/1.1" 4 ... show less	Hacking Web App Attack
🇺🇸 lnklnx	2026-05-24 11:44:38 (1 week ago)	www.lnklnx.com:80 20.195.192.35 - - [24/May/2026:06:44:36 -0500] "GET /wp-content/plugins/hellopress ... show more www.lnklnx.com:80 20.195.192.35 - - [24/May/2026:06:44:36 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 647 "-" "-" ... show less	Web App Attack
🇦🇺 2000cn.com.au	2026-05-24 11:44:05 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 igerman	2026-05-24 11:42:35 (1 week ago)	caddy probes: web: GET /.well-known/about.php(DROP), GET /201.php(DROP), GET /25d653587fdfd1.php(DRO ... show more caddy probes: web: GET /.well-known/about.php(DROP), GET /201.php(DROP), GET /25d653587fdfd1.php(DROP), GET /2P.php(DROP), GET /alfa403.php(DROP), GET /c55cdler.php(DROP), GET /casp3.php(DROP), GET /error_log.php(DROP), GET /half.php(DROP), GET /ingfo.php(DROP), GET /koala.php(DROP), GET /like.php(DROP), GET /mac.php(DROP), GET /ops.php(DROP), GET /samll.php(DROP), GET /test11.php(DROP), GET /tires.php(DROP), GET /wefile.php(DROP), GET /x.php(DROP), GET /xenon1337.php(DROP) \| wordpress: GET /wordpress/wp-admin/maint/(DROP), GET /wp-admin/css/colour.php(DROP), GET /wp-admin/js/(DROP), GET /wp-content/plugins/hellopress/wp_filemanager.php(DROP), GET /wp-includes/blocks/post-comments-form/(DROP) show less	Web App Attack
🇫🇷 masterguru	2026-05-24 11:41:16 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.195.192.35 (BR/Brazil/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.195.192.35 (BR/Brazil/-): 2 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-05-24 11:37:19 (1 week ago)	20.195.192.35 - - [24/May/2026:13:36:56 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.195.192.35 - - [24/May/2026:13:36:56 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:56 +0200] "GET /x.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:56 +0200] "GET /201.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:56 +0200] "GET /ops.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:57 +0200] "GET /samll.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:57 +0200] "GET /ingfo.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:57 +0200] "GET /c55cdler.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:59 +0200] "GET /error_log.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:59 +0200] "GET /xenon1337.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:36:59 +0200] "GET /alfa403.php HTTP/1.1" 404 485 "-" "-" 20.195.192.35 - - [24/May/2026:13:37:00 +0200] "GET /test11.php HT ... show less	DDoS Attack
🇫🇮 Christopher Hughes	2026-05-24 11:35:03 (1 week ago)	[Sun May 24 12:35:01.300480 2026] [proxy_fcgi:error] [pid 4142461:tid 139773695993408] [client 20.19 ... show more [Sun May 24 12:35:01.300480 2026] [proxy_fcgi:error] [pid 4142461:tid 139773695993408] [client 20.195.192.35:60368] AH01071: Got error 'Primary script unknown' [Sun May 24 12:35:01.754505 2026] [proxy_fcgi:error] [pid 4142461:tid 139774811698752] [client 20.195.192.35:60368] AH01071: Got error 'Primary script unknown' [Sun May 24 12:35:01.970431 2026] [proxy_fcgi:error] [pid 4142461:tid 139774593586752] [client 20.195.192.35:60368] AH01071: Got error 'Primary script unknown' [Sun May 24 12:35:02.187060 2026] [proxy_fcgi:error] [pid 4142461:tid 139773687600704] [client 20.195.192.35:60368] AH01071: Got error 'Primary script unknown' [Sun May 24 12:35:02.446010 2026] [proxy_fcgi:error] [pid 4142461:tid 139775034009152] [client 20.195.192.35:60368] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 241 to 255 of 306 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.46.85.198

🇺🇸 65.49.1.59

🇺🇸 64.62.156.199

🇯🇵 8.216.14.99

🇮🇩 180.248.22.28

🇵🇭 165.154.100.252

🇺🇸 162.216.150.206

🇨🇦 134.122.33.120

🇲🇾 113.211.96.235

🇧🇩 103.183.62.3

🇨🇳 61.151.249.194

🇧🇪 34.140.236.87

🇭🇰 199.45.154.188

🇹🇼 198.235.24.126

🇮🇳 182.95.187.86

🇺🇸 172.208.49.189

🇫🇮 147.185.133.83

🇨🇳 123.160.172.51

🇺🇸 91.230.168.121

🇪🇸 85.86.181.39