JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.193.160

20.197.193.160 was found in our database!

This IP was reported 249 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.193.160

Whois 20.197.193.160

IP Abuse Reports for 20.197.193.160:

This IP address has been reported a total of 249 times from 198 distinct sources. 20.197.193.160 was first reported on May 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-05-31 04:27:43 (3 days ago)	20.197.193.160 - - [31/May/2026:06:22:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.193.160 - - [31/May/2026:06:22:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" "BR" "Campinas" "-22.90350" "-47.05650" 20.197.193.160 - - [31/May/2026:06:22:26 +0200] "GET /core/init.php HTTP/1.1" 404 27 "-" "-" "BR" "Campinas" "-22.90350" "-47.05650" 20.197.193.160 - - [31/May/2026:06:22:26 +0200] "GET /aa.php HTTP/1.1" 404 27 "-" "-" "BR" "Campinas" "-22.90350" "-47.05650" 20.197.193.160 - - [31/May/2026:06:22:26 +0200] "GET /xmrlpc.php HTTP/1.1" 404 27 "-" "-" "BR" "Campinas" "-22.90350" "-47.05650" ... show less	Brute-Force Bad Web Bot
🇷🇺 DZBOT	2026-05-31 04:25:40 (3 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 Jarda_H	2026-05-31 04:08:27 (3 days ago)	http-probing	Web App Attack
🇩🇪 Holger	2026-05-31 04:04:10 (3 days ago)	WordPress WebAttack	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-31 04:03:48 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇫🇷 Phenix Info	2026-05-31 04:00:57 (3 days ago)	SmallGuard.fr/Prestashop Honeypot	Web App Attack
🇺🇸 deskpass.com	2026-05-31 03:48:17 (3 days ago)	GET /php8.php	Web App Attack
Anonymous	2026-05-31 03:20:12 (3 days ago)		DNS Compromise DDoS Attack
Anonymous	2026-05-31 03:16:20 (3 days ago)	20.197.193.160 - - [31/May/2026:05:16:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.193.160 - - [31/May/2026:05:16:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 402 805 "-" "-" ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-05-31 03:09:35 (3 days ago)	[Sun May 31 03:59:32.677530 2026] [proxy_fcgi:error] [pid 251864:tid 139775050794560] [client 20.197 ... show more [Sun May 31 03:59:32.677530 2026] [proxy_fcgi:error] [pid 251864:tid 139775050794560] [client 20.197.193.160:10535] AH01071: Got error 'Primary script unknown' [Sun May 31 04:09:33.710992 2026] [proxy_fcgi:error] [pid 251918:tid 139774778127936] [client 20.197.193.160:24488] AH01071: Got error 'Primary script unknown' [Sun May 31 04:09:34.361834 2026] [proxy_fcgi:error] [pid 251918:tid 139774811698752] [client 20.197.193.160:24488] AH01071: Got error 'Primary script unknown' [Sun May 31 04:09:34.576620 2026] [proxy_fcgi:error] [pid 251918:tid 139775025616448] [client 20.197.193.160:24488] AH01071: Got error 'Primary script unknown' [Sun May 31 04:09:34.792691 2026] [proxy_fcgi:error] [pid 251918:tid 139774761342528] [client 20.197.193.160:24488] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 solution.it	2026-05-31 03:09:14 (3 days ago)	[Sun May 31 05:09:13.284798 2026] [php7:error] [pid 3941334:tid 3941334] [client 20.197.193.160:2024 ... show more [Sun May 31 05:09:13.284798 2026] [php7:error] [pid 3941334:tid 3941334] [client 20.197.193.160:20248] script '/var/www/html/blog.solution.it/aa.php' not found or unable to stat show less	Web App Attack
🇺🇸 Epimetheus	2026-05-31 02:56:45 (3 days ago)	Unauthorized access attempts: [GET] /ca4.php [GET] /init.php [GET] /alfa.php [GET] /99.php [GET] /a ... show more Unauthorized access attempts: [GET] /ca4.php [GET] /init.php [GET] /alfa.php [GET] /99.php [GET] /a5.php [GET] /wp-theme.php [GET] /fs.php [GET] /hplfuns.php [GET] /aaa.php [GET] /son1.php [GET] /7.php [GET] /zo.php [GET] /acp.php [GET] /1a.php [GET] /19.php [GET] /bc.php [GET] /2.php [GET] /xmrlpc.php [GET] /about.php [GET] /profile.php [GET] /wp-the.php [GET] /bb.php [GET] /wp.php [GET] /class.php [GET] /test.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php UA: Unknown show less	Web App Attack
🇫🇮 Christopher Hughes	2026-05-31 02:49:29 (3 days ago)	[Sun May 31 03:49:27.666869 2026] [proxy_fcgi:error] [pid 251918:tid 139774190933568] [client 20.197 ... show more [Sun May 31 03:49:27.666869 2026] [proxy_fcgi:error] [pid 251918:tid 139774190933568] [client 20.197.193.160:46985] AH01071: Got error 'Primary script unknown' [Sun May 31 03:49:27.888405 2026] [proxy_fcgi:error] [pid 251918:tid 139775034009152] [client 20.197.193.160:46985] AH01071: Got error 'Primary script unknown' [Sun May 31 03:49:28.105742 2026] [proxy_fcgi:error] [pid 251918:tid 139773637277248] [client 20.197.193.160:46985] AH01071: Got error 'Primary script unknown' [Sun May 31 03:49:28.323058 2026] [proxy_fcgi:error] [pid 251918:tid 139774778127936] [client 20.197.193.160:46985] AH01071: Got error 'Primary script unknown' [Sun May 31 03:49:28.813765 2026] [proxy_fcgi:error] [pid 251918:tid 139773645669952] [client 20.197.193.160:46985] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-05-31 02:47:05 (3 days ago)	20.197.193.160 - - [31/May/2026:02:47:05 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.193.160 - - [31/May/2026:02:47:05 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 381 "-" "-" ... show less	Bad Web Bot Web App Attack
🇫🇷 viki53	2026-05-31 02:45:26 (3 days ago)	Website hacking attempt (path: /wp-content/plugins/hellopress/wp_filemanager.php)	Hacking Web App Attack

Showing 121 to 135 of 249 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.237

🇷🇺 185.16.214.226

🇧🇬 79.124.49.174

🇧🇬 78.128.114.102

🇷🇺 5.44.172.84

🇺🇸 2607:f8b0:4001:c72::122

🇵🇱 2001:41d0:602:2e48::1

🇰🇷 220.88.220.59

🇮🇩 163.7.8.79

🇺🇸 130.131.163.217

🇫🇷 79.141.5.155

🇺🇸 66.132.172.113

🇳🇱 64.89.162.12

🇫🇷 51.77.222.9

🇸🇬 47.84.111.212

🇮🇩 43.252.105.3

🇩🇿 41.101.132.154

🇿🇦 41.56.83.172

🇧🇷 38.226.140.108

🇨🇳 27.17.197.105