JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.56.139

20.197.56.139 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.56.139

Whois 20.197.56.139

IP Abuse Reports for 20.197.56.139:

This IP address has been reported a total of 105 times from 102 distinct sources. 20.197.56.139 was first reported on June 30th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarkGGN	2026-07-01 00:37:56 (1 minute ago)	Web attack. 20.197.56.139 - - [01/Jul/2026:02:37:55 +0200] "GET /edit.php HTTP/1.1" 401 172 "-" "-" ... show more Web attack. 20.197.56.139 - - [01/Jul/2026:02:37:55 +0200] "GET /edit.php HTTP/1.1" 401 172 "-" "-" 20.197.56.139 - - [01/Jul/2026:02:37:56 +0200] "GET /.well-known/about.php HTTP/1.1" 401 172 "-" "-" show less	Web App Attack
🇩🇪 Ba-Yu	2026-07-01 00:32:33 (7 minutes ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 SCHAPPY	2026-07-01 00:28:56 (10 minutes ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇫🇷 Eldeberen	2026-07-01 00:26:23 (13 minutes ago)	Vulnerability scan attempt through HTTP protocol	Web App Attack
🇫🇷 ✨	2026-07-01 00:25:09 (14 minutes ago)	Domain : redirect.netenergy.uk Rule : config 2026-07-01 00:23:04 217.194.210.152 GET /wp-content/plu ... show more Domain : redirect.netenergy.uk Rule : config 2026-07-01 00:23:04 217.194.210.152 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.197.56.139 HTTP/1.1 - - essentialoils.com 404 0 2 1436 91 128 - - show less	Hacking SQL Injection
🇺🇦 URAN Publishing Service	2026-07-01 00:18:10 (21 minutes ago)	20.197.56.139 - - [01/Jul/2026:03:18:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.197.56.139 - - [01/Jul/2026:03:18:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 721 "-" "-" ... show less	Web App Attack
🇦🇺 FireGuard Server	2026-07-01 00:10:05 (29 minutes ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇸🇪 SkyDancer	2026-07-01 00:08:11 (31 minutes ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇩🇪 Hary74656	2026-07-01 00:02:03 (37 minutes ago)	[Wed Jul 01 02:01:54.735004 2026] [core:info] [pid 597873:tid 598036] [client 20.197.56.139:23859] A ... show more [Wed Jul 01 02:01:54.735004 2026] [core:info] [pid 597873:tid 598036] [client 20.197.56.139:23859] AH00128: File does not exist: /home/harald/www/webmail/wp-content/admin.php ... show less	Bad Web Bot
🇬🇧 Smish	2026-06-30 23:49:05 (50 minutes ago)	HONEYPOT HIT --> Fail2ban time=1782863343 log=2026-07-01T00:49:03+01:00 ip=20.197.56.139 host=as2106 ... show more HONEYPOT HIT --> Fail2ban time=1782863343 log=2026-07-01T00:49:03+01:00 ip=20.197.56.139 host=as210667.net method=GET uri="/adminfuns.php" status=404 ua="-" ref="-" rid=5db9dfc183bdd39161cf1be3213a3dd1 show less	Web App Attack
🇳🇱 thedreamer.nl	2026-06-30 23:46:53 (52 minutes ago)	20.197.56.139 - - [01/Jul/2026:01:46:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.197.56.139 - - [01/Jul/2026:01:46:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.197.56.139 - - [01/Jul/2026:01:46:46 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.197.56.139 - - [01/Jul/2026:01:46:46 +0200] "GET /geforce.php HTTP/1.1" 404 27 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.197.56.139 - - [01/Jul/2026:01:46:47 +0200] "GET /cc.php HTTP/1.1" 404 27 "-" "-" "IN" "Pune" "18.52110" "73.85020" ... show less	Brute-Force Bad Web Bot
🇩🇪 london2038.com	2026-06-30 23:35:48 (1 hour ago)	Probing for exploits 20.197.56.139 - - [01/Jul/2026:01:35:27 +0200] "GET /wp-content/plugins/hellopr ... show more Probing for exploits 20.197.56.139 - - [01/Jul/2026:01:35:27 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 20.197.56.139 - - [01/Jul/2026:01:35:45 +0200] "GET /w.php HTTP/1.1" 422 0 "-" "-" show less	Hacking Web App Attack
🇧🇷 dominioz	2026-06-30 23:14:51 (1 hour ago)	2026-06-30 23:14:32 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.197.56.139 HTTP/1.1 ... show more 2026-06-30 23:14:32 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.197.56.139 HTTP/1.1 - - 404 1440 2026-06-30 23:14:32 GET /this_is_a_new_hello_world.php - - 20.197.56.139 HTTP/1.1 - - 404 1440 2026-06-30 23:14:32 GET /geforce.php - - 20.197.56.139 HTTP/1.1 - - 404 1440 2026-06-30 23:14:32 GET /cc.php - - 20.197.56.139 HTTP/1.1 - - 404 1440 ... show less	Web App Attack
🇫🇮 kumiko	2026-06-30 23:08:57 (1 hour ago)	[2026-07-01 02:08:56] Apache auth failure: brute force attempt, file probing	Brute-Force Bad Web Bot
🇺🇸 Gabriel Camargo	2026-06-30 22:51:06 (1 hour ago)	20.197.56.139 - - [30/Jun/2026:17:51:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.197.56.139 - - [30/Jun/2026:17:51:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.197.56.139 - - [30/Jun/2026:17:51:05 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.197.56.139 - - [30/Jun/2026:17:51:05 -0500] "GET /geforce.php HTTP/1.1" 301 178 "-" "-" ... show less	Brute-Force SSH

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 182.62.232.65

🇩🇪 130.12.180.57

🇦🇹 104.23.162.189

🇺🇸 47.251.165.222

🇲🇽 187.191.48.23

🇧🇷 187.2.106.167

🇪🇨 186.68.83.105

🇺🇸 178.128.0.34

🇺🇸 172.253.83.87

🇫🇷 141.94.206.6

🇨🇳 123.88.230.233

🇨🇳 112.94.253.133

🇿🇦 102.182.46.73

🇷🇺 91.185.75.244

🇩🇪 64.89.163.245

🇺🇸 64.62.156.165

🇭🇰 46.247.61.35

🇨🇦 45.194.92.62

🇺🇸 45.154.154.44

🇺🇸 12.154.188.66