JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.195.192.35

20.195.192.35 was found in our database!

This IP was reported 306 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.195.192.35

Whois 20.195.192.35

IP Abuse Reports for 20.195.192.35:

This IP address has been reported a total of 306 times from 249 distinct sources. 20.195.192.35 was first reported on May 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 ScamAware	2026-05-24 22:05:55 (1 week ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: vulnerable_code_probe (V ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: vulnerable_code_probe (Vulnerable code and known exploit paths). Hits from same IP in last 60 minutes: 2. Unique request paths counted internally: 2. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-24 22:05:03 (1 week ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-24 22:01:36 (1 week ago)	Auto-ban: >3000 req/min op 2026-05-24	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-05-24 22:00:29 (1 week ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /xstelth.php Timestamp: 2026-05-24T21:37:13Z Ray ID: a00f70bb0c826e54 UA: Empty string show less	Bad Web Bot
🇺🇸 jfz-abuse	2026-05-24 21:57:22 (1 week ago)	fail2ban: apache-php-recon ...	Web App Attack
🇩🇪 Vegascosmetics	2026-05-24 21:51:29 (1 week ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-24 21:45:28 (1 week ago)	Portscan: TCP/80 (6x)	Port Scan
🇺🇦 URAN Publishing Service	2026-05-24 21:42:22 (1 week ago)	20.195.192.35 - - [25/May/2026:00:42:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.195.192.35 - - [25/May/2026:00:42:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 713 "-" "-" ... show less	Web App Attack
🇫🇷 Thaliruth	2026-05-24 21:39:17 (1 week ago)	20.195.192.35 - - [24/May/2026:23:39:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.195.192.35 - - [24/May/2026:23:39:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1060 "-" "-" ... show less	Brute-Force Web App Attack
🇺🇸 NXTwoThou	2026-05-24 21:38:52 (1 week ago)	/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇫🇷 Campus France	2026-05-24 21:32:29 (1 week ago)	[Sun May 24 23:32:25.046215 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var ... show more [Sun May 24 23:32:25.046215 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var/www/html/campus-perpignan/x.php' not found or unable to stat [Sun May 24 23:32:25.662338 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var/www/html/campus-perpignan/201.php' not found or unable to stat [Sun May 24 23:32:27.956891 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var/www/html/campus-perpignan/ops.php' not found or unable to stat [Sun May 24 23:32:28.388753 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var/www/html/campus-perpignan/samll.php' not found or unable to stat [Sun May 24 23:32:28.774111 2026] [php:error] [pid 3813934] [client 20.195.192.35:5107] script '/var/www/html/campus-perpignan/ingfo.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Bruno	2026-05-24 21:28:48 (1 week ago)	20.195.192.35 - - [24/May/2026:23:28:09 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1 ... show more 20.195.192.35 - - [24/May/2026:23:28:09 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:09 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:17 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:19 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:24 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:24 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:27 +0200] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:29 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:35 +0200] "GET /wp-includes/Requests/ HTTP/1.1" 403 406 "-" "-" 20.195.192.35 - - [24/May/2026:23:28:48 +0200] "GET /wp-includes/js/jquery/ HT ... show less	Web App Attack
Anonymous	2026-05-24 21:27:35 (1 week ago)	20.195.192.35 - - [25/May/2026:05:27:33 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.195.192.35 - - [25/May/2026:05:27:33 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:34 +0800] "GET /x.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:34 +0800] "GET /x.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:34 +0800] "GET /201.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:34 +0800] "GET /201.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:35 +0800] "GET /ops.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:35 +0800] "GET /ops.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:35 +0800] "GET /samll.php HTTP/1.1" 404 16 "-" "-" 20.195.192.35 - - [25/May/2026:05:27:35 +0800] "GET /samll.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 WizardsToolkit	2026-05-24 21:24:18 (1 week ago)	tried to access forbidden files; attempted to access /wp-content/plugins/hellopress/wp_filemanager.p ... show more tried to access forbidden files; attempted to access /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 AetherFox	2026-05-24 21:24:16 (1 week ago)	AetherFox VoidGuard detected: [Sun May 24 21:24:12.710214 2026] [authz_core:error] [pid 1472574:tid ... show more AetherFox VoidGuard detected: [Sun May 24 21:24:12.710214 2026] [authz_core:error] [pid 1472574:tid 1472583] [client 20.195.192.35:65012] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-content/plugins/hellopress/wp_filemanager.php [Sun May 24 21:24:13.624123 2026] [authz_core:error] [pid 1472574:tid 1472586] [client 20.195.192.35:65012] AH01630: client denied by server configuration: proxy:https://[MASKED]/x.php [Sun May 24 21:24:14.218294 2026] [authz_core:error] [pid 1472574:tid 1472600] [client 20.195.192.35:65012] AH01630: client denied by server configuration: proxy:https://[MASKED]/201.php [Sun May 24 21:24:15.129484 2026] [authz_core:error] [pid 1472574:tid 1472579] [client 20.195.192.35:65012] AH01630: client denied by server configuration: proxy:https://[MASKED]/ops.php [Sun May 24 21:24:15.729660 2026] [authz_core:error] [pid 1472574:tid 1472587] [client 20.195.192.35:65012] AH01630: client denied by server configurat ... show less	Bad Web Bot Web App Attack

Showing 61 to 75 of 306 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2a02:4780:6:1858:0:1afc:e9fb:1

🇩🇪 194.88.98.88

🇩🇪 167.94.145.31

🇨🇦 138.197.164.175

🇺🇸 107.151.233.216

🇬🇧 89.37.172.152

🇺🇸 34.58.124.191

🇧🇷 205.210.31.246

🇿🇦 196.192.181.202

🇳🇱 195.178.110.188

🇮🇶 169.224.88.119

🇩🇪 139.59.208.49

🇮🇩 103.170.32.41

🇳🇱 45.144.212.199

🇫🇷 15.224.104.183

🇺🇸 162.216.150.174

🇺🇸 64.62.156.105

🇰🇷 1.214.214.114

🇲🇾 175.141.245.179

🇧🇷 143.255.0.52