JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.198.116.199

20.198.116.199 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.198.116.199

Whois 20.198.116.199

IP Abuse Reports for 20.198.116.199:

This IP address has been reported a total of 99 times from 94 distinct sources. 20.198.116.199 was first reported on July 3rd 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Brict IT	2026-07-03 16:28:03 (4 minutes ago)		Bad Web Bot Web App Attack
Anonymous	2026-07-03 16:24:40 (8 minutes ago)	20.198.116.199 - - [03/Jul/2026:18:24:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.198.116.199 - - [03/Jul/2026:18:24:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 402 805 "-" "-" ... show less	Web App Attack
🇩🇪 pigro	2026-07-03 16:22:02 (10 minutes ago)	20.198.116.199 - - [03/Jul/2026:18:21:58 +0200] "GET //7.php? HTTP/1.1" 404 153 "-" "-" 20.198.116.1 ... show more 20.198.116.199 - - [03/Jul/2026:18:21:58 +0200] "GET //7.php? HTTP/1.1" 404 153 "-" "-" 20.198.116.199 - - [03/Jul/2026:18:22:01 +0200] "GET //cr7.php HTTP/1.1" 404 153 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-03 16:13:19 (19 minutes ago)	20.198.116.199 - - [04/Jul/2026:00:13:16 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.198.116.199 - - [04/Jul/2026:00:13:16 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:17 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:17 +0800] "GET /zoko.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:17 +0800] "GET /w.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:17 +0800] "GET /133.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:18 +0800] "GET /7.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:18 +0800] "GET /wp3.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:18 +0800] "GET /7.php? HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:18 +0800] "GET /faze.php HTTP/1.1" 404 16 "-" "-" 20.198.116.199 - - [04/Jul/2026:00:13:19 +0800] "GET /axds.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 todix	2026-07-03 16:10:58 (21 minutes ago)	WebAttack or semilar from 20.198.116.199	Web App Attack
🇫🇷 Sklurk	2026-07-03 16:06:55 (25 minutes ago)	Web App Attack	Web App Attack
🇳🇱 thedreamer.nl	2026-07-03 15:53:25 (39 minutes ago)	20.198.116.199 - - [03/Jul/2026:17:53:12 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.198.116.199 - - [03/Jul/2026:17:53:12 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.198.116.199 - - [03/Jul/2026:17:53:13 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.198.116.199 - - [03/Jul/2026:17:53:14 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "IN" "Pune" "18.52110" "73.85020" 20.198.116.199 - - [03/Jul/2026:17:53:15 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "IN" "Pune" "18.52110" "73.85020" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-07-03 15:46:35 (46 minutes ago)	Unauthorized access attempts: [GET] //inc.php [GET] //wp-admin/user/index.php [GET] /lufix.php [GET ... show more Unauthorized access attempts: [GET] //inc.php [GET] //wp-admin/user/index.php [GET] /lufix.php [GET] /auu.php [GET] //edit.php [GET] /odf7udtspqtpxzyxmw2rcCdefault.php [GET] /iQps3ldefault.php [GET] //wp-includes/css/dist/ [GET] /rrdbtjru.php [GET] /axds.php [GET] /heat1.php [GET] /sixxis.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php [GET] /wp3.php UA: Unknown show less	Web App Attack
🇫🇮 NoaQT	2026-07-03 15:45:53 (46 minutes ago)	2026-07-03T15:45:51.873908+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:51. ... show more 2026-07-03T15:45:51.873908+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:51.873] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 337/299/0/0/0 0/0 "GET //7.php? HTTP/1.1" 2026-07-03T15:45:52.033108+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:52.032] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 337/299/0/0/0 0/0 "GET /faze.php HTTP/1.1" 2026-07-03T15:45:52.192119+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:52.192] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 337/299/0/0/0 0/0 "GET /axds.php HTTP/1.1" 2026-07-03T15:45:52.344411+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:52.344] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 337/299/0/0/0 0/0 "GET /nz.php HTTP/1.1" 2026-07-03T15:45:52.503433+00:00 ingress-1 haproxy[290]: 20.198.116.199:13071 [03/Jul/2026:15:45:52.503] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 337/299/0/0/0 0/0 "GET /bi ... show less	DDoS Attack
🇺🇸 WellSpring	2026-07-03 15:38:57 (53 minutes ago)	wordpress scan on 920.today/wp-admin/user/index.php — WellSpr.ing/NetSentinel civic-AI security laye ... show more wordpress scan on 920.today/wp-admin/user/index.php — WellSpr.ing/NetSentinel civic-AI security layer show less	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-07-03 15:31:50 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /xa.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 djboddington	2026-07-03 15:25:40 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇫🇷 pm33	2026-07-03 15:25:38 (1 hour ago)	Unauthorized connections HTTP 403	Web App Attack
🇩🇪 ramazan	2026-07-03 15:25:11 (1 hour ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: //7.php? /133.php /7.php /axds.php /faze.php	Web App Attack Hacking
Anonymous	2026-07-03 15:22:43 (1 hour ago)	SIEM ALERT AUTO REPORT	Email Spam

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.197

🇨🇳 171.217.92.211

🇨🇳 119.29.93.87

🇸🇬 101.47.15.26

🇺🇸 47.145.62.32

🇬🇧 2a06:4880:6000::8e

🇰🇷 218.145.181.48

🇺🇸 216.126.236.232

🇷🇴 193.32.162.9

🇰🇷 121.142.87.218

🇳🇱 91.92.40.7

🇯🇵 60.40.45.223

🇺🇸 23.234.119.154

🇺🇸 23.234.118.54

🇦🇷 181.97.125.174

🇺🇸 172.253.2.21

🇺🇸 147.185.132.52

🇵🇭 124.106.225.25

🇺🇸 91.230.168.93

🇺🇸 23.234.118.100