JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.193.174

20.197.193.174 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.193.174

Whois 20.197.193.174

IP Abuse Reports for 20.197.193.174:

This IP address has been reported a total of 209 times from 176 distinct sources. 20.197.193.174 was first reported on May 31st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Epimetheus	2026-05-31 18:52:46 (3 days ago)	Unauthorized access attempts: [GET] /new4.php [GET] /kolda.php [GET] /hello.php [GET] /v2.php [GET] ... show more Unauthorized access attempts: [GET] /new4.php [GET] /kolda.php [GET] /hello.php [GET] /v2.php [GET] /lv.php [GET] /new.php [GET] /333.php [GET] /explorer/index_.php [GET] /wp-ver.php [GET] /file59.php [GET] /hplfuns.php [GET] /ms-edit.php [GET] /mifta.php UA: Unknown show less	Web App Attack
🇺🇸 factor1	2026-05-31 18:42:44 (3 days ago)	Fail2ban at atlas Reports Abuse.	Bad Web Bot
🇫🇮 Christopher Hughes	2026-05-31 18:40:30 (3 days ago)	[Sun May 31 19:40:29.024783 2026] [proxy_fcgi:error] [pid 269981:tid 139774409045568] [client 20.197 ... show more [Sun May 31 19:40:29.024783 2026] [proxy_fcgi:error] [pid 269981:tid 139774409045568] [client 20.197.193.174:21491] AH01071: Got error 'Primary script unknown' [Sun May 31 19:40:29.257575 2026] [proxy_fcgi:error] [pid 269981:tid 139774945916480] [client 20.197.193.174:21491] AH01071: Got error 'Primary script unknown' [Sun May 31 19:40:29.504471 2026] [proxy_fcgi:error] [pid 269981:tid 139774358689344] [client 20.197.193.174:21491] AH01071: Got error 'Primary script unknown' [Sun May 31 19:40:29.744881 2026] [proxy_fcgi:error] [pid 269981:tid 139775042401856] [client 20.197.193.174:21491] AH01071: Got error 'Primary script unknown' [Sun May 31 19:40:30.005553 2026] [proxy_fcgi:error] [pid 269981:tid 139774929131072] [client 20.197.193.174:21491] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 [email protected]	2026-05-31 18:40:28 (3 days ago)	Brute force 81 attempts	DDoS Attack SQL Injection Brute-Force SSH
Anonymous	2026-05-31 18:19:08 (3 days ago)	Attempt to scan vulnerabilities	Hacking
🇩🇪 AetherFox	2026-05-31 18:14:57 (3 days ago)	AetherFox VoidGuard detected: [Sun May 31 18:14:42.188737 2026] [authz_core:error] [pid 2516581:tid ... show more AetherFox VoidGuard detected: [Sun May 31 18:14:42.188737 2026] [authz_core:error] [pid 2516581:tid 2516625] [client 20.197.193.174:12867] AH01630: client denied by server configuration: proxy:http://[MASKED]/ [Sun May 31 18:14:42.188799 2026] [authz_core:error] [pid 2516581:tid 2516625] [client 20.197.193.174:12867] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun May 31 18:14:51.987020 2026] [authz_core:error] [pid 2516581:tid 2516600] [client 20.197.193.174:37637] AH01630: client denied by server configuration: proxy:http://[MASKED]/ [Sun May 31 18:14:51.987084 2026] [authz_core:error] [pid 2516581:tid 2516600] [client 20.197.193.174:37637] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun May 31 18:14:56.648766 2026] [authz_core:error] [pid 2516581:tid 2516605] [client 20.197.193.174:37637] AH01630: client denied by server configuration: proxy:http://[MASKED]/ ... show less	Bad Web Bot Web App Attack
🇪🇸 yvoictra	2026-05-31 18:04:11 (3 days ago)	20.197.193.174 - - [31/May/2026:20:04:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.193.174 - - [31/May/2026:20:04:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4316 "-" "-" 20.197.193.174 - - [31/May/2026:20:04:10 +0200] "GET /ff.php HTTP/1.1" 404 3434 "-" "-" 20.197.193.174 - - [31/May/2026:20:04:10 +0200] "GET /x.php HTTP/1.1" 404 4316 "-" "-" 20.197.193.174 - - [31/May/2026:20:04:10 +0200] "GET /tires.php HTTP/1.1" 404 4316 "-" "-" 20.197.193.174 - - [31/May/2026:20:04:11 +0200] "GET /wp-block.php HTTP/1.1" 404 4316 "-" "-" ... show less	Brute-Force Web App Attack
Anonymous	2026-05-31 18:00:29 (3 days ago)	20.197.193.174 - - [31/May/2026:20:00:27 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.197.193.174 - - [31/May/2026:20:00:27 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "mickael.org" 20.197.193.174 - - [31/May/2026:20:00:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" "mickael.org" 20.197.193.174 - - [31/May/2026:20:00:28 +0200] "GET /ff.php HTTP/1.1" 301 162 "-" "-" "-" "mickael.org" 20.197.193.174 - - [31/May/2026:20:00:28 +0200] "GET /ff.php HTTP/1.1" 404 146 "-" "-" "-" "mickael.org" 20.197.193.174 - - [31/May/2026:20:00:28 +0200] "GET /x.php HTTP/1.1" 301 162 "-" "-" "-" "mickael.org" 20.197.193.174 - - [31/May/2026:20:00:29 +0200] "GET /x.php HTTP/1.1" 404 146 "-" "-" "-" "mickael.org" show less	Brute-Force
🇨🇿 ptlab	2026-05-31 18:00:03 (3 days ago)	Detected wp_admin attack from WP-host.	Hacking Web App Attack
🇪🇸 masterguru	2026-05-31 17:53:04 (3 days ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking
🇪🇸 netfactotum	2026-05-31 17:52:38 (3 days ago)		Hacking Web App Attack
Anonymous	2026-05-31 17:42:37 (3 days ago)	20.197.193.174 - - [31/May/2026:13:42:17 -0400] "GET /ff.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 ... show more 20.197.193.174 - - [31/May/2026:13:42:17 -0400] "GET /ff.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:18 -0400] "GET /x.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:18 -0400] "GET /tires.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:18 -0400] "GET /wp-block.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:19 -0400] "GET /wp-der.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:19 -0400] "GET /ah25.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:19 -0400] "GET /inputs.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:20 -0400] "GET /samll.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:20 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:20 -0400] "GET /favicon.php HTTP/1.0" 404 16 "-" "-" 20.197.193.174 - - [31/May/2026:13:42:21 -0400] "GET /aboutc.php HTTP/1.0" 404 16 "-" " ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-31 17:42:25 (3 days ago)	[31/May/2026:17:42:24 +0000] host=lovelyrender.app server=lovelyrender.app ip=20.197.193.174 method= ... show more [31/May/2026:17:42:24 +0000] host=lovelyrender.app server=lovelyrender.app ip=20.197.193.174 method=GET req=/db.php uri=/index.php status=302 bytes=5 rt=0.020 urt=0.020 ref="-" ua="-" ... show less	Web App Attack Bad Web Bot
🇦🇺 paulshipley.com.au	2026-05-31 17:41:00 (3 days ago)	underconstruction.paulshipley.info:443 20.197.193.174 - - [01/Jun/2026:03:41:00 +1000] "GET /inputs. ... show more underconstruction.paulshipley.info:443 20.197.193.174 - - [01/Jun/2026:03:41:00 +1000] "GET /inputs.php HTTP/1.1" 404 466 "-" "-" ... show less	Web App Attack
🇩🇪 Vegascosmetics	2026-05-31 17:36:09 (3 days ago)	Kingcopy(AI-IDS) Report: IP 20.197.193.174 wurde nach 3 Angriffsversuchen automatisch geblockt. Patt ... show more Kingcopy(AI-IDS) Report: IP 20.197.193.174 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: /wp- - Vegas Cosmetics Security System show less	Hacking Web App Attack

Showing 91 to 105 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.46.85.198

🇺🇸 65.49.1.59

🇺🇸 64.62.156.199

🇯🇵 8.216.14.99

🇮🇩 180.248.22.28

🇵🇭 165.154.100.252

🇺🇸 162.216.150.206

🇨🇦 134.122.33.120

🇲🇾 113.211.96.235

🇧🇩 103.183.62.3

🇨🇳 61.151.249.194

🇧🇪 34.140.236.87

🇭🇰 199.45.154.188

🇹🇼 198.235.24.126

🇮🇳 182.95.187.86

🇺🇸 172.208.49.189

🇫🇮 147.185.133.83

🇨🇳 123.160.172.51

🇺🇸 91.230.168.121

🇪🇸 85.86.181.39