JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.235.71

20.197.235.71 was found in our database!

This IP was reported 309 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.235.71

Whois 20.197.235.71

IP Abuse Reports for 20.197.235.71:

This IP address has been reported a total of 309 times from 241 distinct sources. 20.197.235.71 was first reported on October 16th 2021, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-06-17 07:33:00 (48 minutes ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 17. 00:01:15 Source IP: 20.197 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 17. 00:01:15 Source IP: 20.197.235.71 Portion of the log(s): 20.197.235.71 - [17/Jun/2026:00:01:15 +0200] "GET /wp-includes/Text/ HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:14 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:14 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:14 +0200] "GET /flower.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:14 +0200] "GET /shoyo.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:14 +0200] "GET /wp-links.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:13 +0200] "GET /8573.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:13 +0200] "GET /file58.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:13 +0200] "GET /bel.php HTTP/1.1" 404 153 "-" "-" 20.197.235.71 - [17/Jun/2026:00:01:13 +0200] "GET /bgymj show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-17 05:14:04 (3 hours ago)	429 attacks on PHP URLs: GET /dd.php HTTP/1.1	Web App Attack
🇱🇮 wmek	2026-06-17 03:21:29 (4 hours ago)	Attack (3x confirmed): cpfence-block(30x),cpfence-block(35x),cpfence-block(5x). Port: 443/tcp. URI: ... show more Attack (3x confirmed): cpfence-block(30x),cpfence-block(35x),cpfence-block(5x). Port: 443/tcp. URI: web-service. WAF rule: 0. Protocol: HTTPS. Detected by: WAF/IDS (OWASP CRS ModSecurity). show less	Web App Attack Port Scan
🇩🇪 SiyCah	2026-06-17 03:00:02 (5 hours ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-17 00:26:52 (7 hours ago)	Too many Status 40X (61) Too many Status 50X (141) Request Overload (266)	Brute-Force Web App Attack
🇩🇪 Philister11	2026-06-17 00:26:47 (7 hours ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (BR/AS8075)	Web App Attack Hacking
🇱🇻 garmtech.com	2026-06-17 00:18:08 (8 hours ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇪🇸 netfactotum	2026-06-17 00:17:45 (8 hours ago)		Hacking Web App Attack
Anonymous	2026-06-17 00:07:01 (8 hours ago)	Automated web scanner. Requested suspicious paths: /Ar.php, /aaf.php, /this_is_a_new_hello_world.php ... show more Automated web scanner. Requested suspicious paths: /Ar.php, /aaf.php, /this_is_a_new_hello_world.php, /ultra.php, /wp-content/plugins/hellopress/wp_filemanager.php. UTC: 2026-06-16 23:09:33. show less	Web App Attack
🇺🇸 TAY	2026-06-17 00:05:18 (8 hours ago)	20.197.235.71 - - [17/Jun/2026:08:05:12 +0800] "GET /f7.update.php HTTP/1.1" 301 443 "-" "-" 20.197. ... show more 20.197.235.71 - - [17/Jun/2026:08:05:12 +0800] "GET /f7.update.php HTTP/1.1" 301 443 "-" "-" 20.197.235.71 - - [17/Jun/2026:08:05:12 +0800] "GET /f7.update.php HTTP/1.1" 403 2053 "-" "-" 20.197.235.71 - - [17/Jun/2026:08:05:17 +0800] "GET /2P.update.php HTTP/1.1" 301 443 "-" "-" ... show less	Brute-Force
🇩🇪 Philister11	2026-06-17 00:04:45 (8 hours ago)	CrowdSec: crowdsecurity/http-probing (BR/AS8075)	Web App Attack Hacking
🇩🇪 itsolon	2026-06-17 00:02:55 (8 hours ago)	[17/Jun/2026:02:02:49 +0200] 17816545693.460407 20.197.235.71 12740 217.154.7.177 80 [17/Jun/2026:02 ... show more [17/Jun/2026:02:02:49 +0200] 17816545693.460407 20.197.235.71 12740 217.154.7.177 80 [17/Jun/2026:02:02:51 +0200] 178165457194.350825 20.197.235.71 12740 217.154.7.177 80 [17/Jun/2026:02:02:52 +0200] 178165457212.031253 20.197.235.71 12740 217.154.7.177 80 [17/Jun/2026:02:02:53 +0200] 178165457328.193092 20.197.235.71 12740 217.154.7.177 80 [17/Jun/2026:02:02:53 +0200] 178165457368.760796 20.197.235.71 12740 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 mw	2026-06-17 00:01:43 (8 hours ago)	GET /wp-admin/network/edit.php HTTP/1.1	Web App Attack
🇪🇸 alferez	2026-06-17 00:01:17 (8 hours ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇫🇷 Campus France	2026-06-17 00:00:28 (8 hours ago)	[Wed Jun 17 02:00:21.766615 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/va ... show more [Wed Jun 17 02:00:21.766615 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/var/www/html/campus-perpignan/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jun 17 02:00:22.208034 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/var/www/html/campus-perpignan/1.php' not found or unable to stat [Wed Jun 17 02:00:22.594693 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/var/www/html/campus-perpignan/dropdown.php' not found or unable to stat [Wed Jun 17 02:00:22.983343 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/var/www/html/campus-perpignan/wp-content/languages/index.php' not found or unable to stat [Wed Jun 17 02:00:23.633331 2026] [php:error] [pid 3714684] [client 20.197.235.71:30286] script '/var/www/html/campus-perpignan/666.php' not found or unable to stat ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 309 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4020:c00::12a

🇺🇸 2001:470:1:c84::9e

🇲🇾 205.186.64.137

🇨🇳 202.99.211.194

🇨🇱 201.186.40.250

🇲🇦 196.115.163.254

🇺🇸 192.3.219.77

🇺🇸 192.3.142.148

🇫🇷 185.135.137.194

🇯🇵 172.104.100.117

🇺🇸 165.154.162.250

🇺🇸 165.154.36.105

🇯🇵 161.129.34.28

🇺🇸 159.203.140.159

🇳🇱 142.93.231.169

🇺🇸 128.241.229.52

🇨🇳 118.196.56.74

🇮🇳 106.51.83.25

🇨🇳 103.217.193.33

🇧🇩 103.87.136.178