JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.192.193

20.197.192.193 was found in our database!

This IP was reported 2,135 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.192.193

Whois 20.197.192.193

IP Abuse Reports for 20.197.192.193:

This IP address has been reported a total of 2,135 times from 674 distinct sources. 20.197.192.193 was first reported on July 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 guillaume illien	2026-07-23 05:27:51 (1 hour ago)	20.197.192.193 - - [23/Jul/2026:05:27:45 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.192.193 - - [23/Jul/2026:05:27:45 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:47 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:48 +0000] "GET /b3.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:48 +0000] "GET /help1.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:49 +0000] "GET /ww.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:49 +0000] "GET /bthil.php HTTP/1.1" 301 178 "-" "-" 20.197.192.193 - - [23/Jul/2026:05:27:50 +0000] "GET /fpwch.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
Anonymous	2026-07-23 05:17:06 (1 hour ago)	20.197.192.193 - - [23/Jul/2026:05:17:06 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.192.193 - - [23/Jul/2026:05:17:06 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 509 "-" "-" ... show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-23 05:15:11 (1 hour ago)	72 attacks on PHP URLs: GET /pros.php HTTP/1.1	Web App Attack
🇩🇪 McClay	2026-07-23 05:14:30 (1 hour ago)	Illegal access attempt:20.197.192.193 - - [23/Jul/2026:07:14:29 +0200] "GET /wp-login.php HTTP/1.1" ... show more Illegal access attempt:20.197.192.193 - - [23/Jul/2026:07:14:29 +0200] "GET /wp-login.php HTTP/1.1" 301 600 "-" "-" ... show less	Hacking Web App Attack
🇫🇮 Christopher Hughes	2026-07-23 05:13:34 (1 hour ago)	[Thu Jul 23 06:13:33.004608 2026] [proxy_fcgi:error] [pid 2118690:tid 139826040907328] [client 20.19 ... show more [Thu Jul 23 06:13:33.004608 2026] [proxy_fcgi:error] [pid 2118690:tid 139826040907328] [client 20.197.192.193:7174] AH01071: Got error 'Primary script unknown' [Thu Jul 23 06:13:33.230333 2026] [proxy_fcgi:error] [pid 2118690:tid 139825839580736] [client 20.197.192.193:7174] AH01071: Got error 'Primary script unknown' [Thu Jul 23 06:13:33.457455 2026] [proxy_fcgi:error] [pid 2118690:tid 139826049300032] [client 20.197.192.193:7174] AH01071: Got error 'Primary script unknown' [Thu Jul 23 06:13:33.677176 2026] [proxy_fcgi:error] [pid 2118690:tid 139825873151552] [client 20.197.192.193:7174] AH01071: Got error 'Primary script unknown' [Thu Jul 23 06:13:33.888847 2026] [proxy_fcgi:error] [pid 2118690:tid 139826634544704] [client 20.197.192.193:7174] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 dpinse	2026-07-23 05:04:14 (1 hour ago)	Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /koala.php) @ 2026-07-23T0 ... show more Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /koala.php) @ 2026-07-23T05:04:14Z show less	Brute-Force
🇦🇺 MAGIC	2026-07-23 05:03:55 (1 hour ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2026-07-23 04:50:05 (1 hour ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 oijon.net	2026-07-23 04:49:52 (1 hour ago)	[Thu Jul 23 00:49:49.455361 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] ... show more [Thu Jul 23 00:49:49.455361 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] script '/var/www/max/this_is_a_new_hello_world.php' not found or unable to stat [Thu Jul 23 00:49:49.764793 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] script '/var/www/max/puc.php' not found or unable to stat [Thu Jul 23 00:49:50.380627 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] script '/var/www/max/chosen.php' not found or unable to stat [Thu Jul 23 00:49:50.722672 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] script '/var/www/max/file5.php' not found or unable to stat [Thu Jul 23 00:49:51.361603 2026] [php:error] [pid 323913:tid 323913] [client 20.197.192.193:39558] script '/var/www/max/fpwch.php' not found or unable to stat ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tg_de	2026-07-23 04:40:24 (1 hour ago)	580 attempts since 16.07.2026 17:38:17 CEST - last search for: /bfdnl.php	Web App Attack
🇺🇸 Epimetheus	2026-07-23 04:38:28 (1 hour ago)	Unauthorized access attempts: [GET] /fffm.php [GET] /xa.php [GET] /zxz.php [GET] /domvf.php [GET] / ... show more Unauthorized access attempts: [GET] /fffm.php [GET] /xa.php [GET] /zxz.php [GET] /domvf.php [GET] /bu6.php [GET] /bfdnl.php [GET] /wom.php [GET] /file18.php [GET] /pros.php [GET] /cro.php [GET] /ingfo.php [GET] /cddlr.php [GET] /byp7.php [GET] /celjc.php [GET] /bsend.php [GET] /wp-Blogs.php [GET] /sixxis.php [GET] /track.php [GET] /prosell2.php [GET] /nux.php [GET] /kurtlar.php [GET] /red.php [GET] /xyn.php [GET] /wp-wpbak.php [GET] /ee.php [GET] /afodf.php [GET] /file1.php [GET] /link.php [GET] /csa.php [GET] /bthil.php [GET] /num.php [GET] /fpwch.php [GET] /new.php [GET] /403.php [GET] /ww.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php [GET] /help1.php [GET] /this_is_a_new_hello_world.php [GET] /b3.php UA: Unknown show less	Web App Attack
🇮🇹 mediarama.com	2026-07-23 04:34:04 (1 hour ago)	Banned by Fail2Ban	Web App Attack
🇧🇷 Halux	2026-07-23 04:33:18 (1 hour ago)	20.197.192.193 Probing protected path or service	Web App Attack
🇸🇬 lancernz	2026-07-23 04:32:54 (1 hour ago)	Auto-detected: 39 hits on autosport.org.nz within 100 log lines. Blocked by Cowork server monitoring ... show more Auto-detected: 39 hits on autosport.org.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-23 04:23:33 (2 hours ago)	20.197.192.193 - - [23/Jul/2026:07:23:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.192.193 - - [23/Jul/2026:07:23:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4221 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 2135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac5:55fd:1028::19c:28f

🇧🇪 198.235.24.172

🇧🇪 198.235.24.162

🇳🇱 195.178.110.227

🇨🇿 172.71.15.108

🇨🇦 158.69.197.98

🇺🇸 147.185.132.243

🇺🇸 146.88.241.129

🇹🇭 118.173.49.130

🇻🇪 92.118.182.64

🇨🇦 85.217.149.58

🇸🇬 84.75.148.169

🇺🇸 66.132.172.251

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇺🇸 43.173.75.15

🇭🇰 43.135.107.229

🇹🇼 198.235.24.125

🇦🇴 193.163.125.62

🇳🇴 185.12.59.118