JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.171.193

20.205.171.193 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.171.193

Whois 20.205.171.193

IP Abuse Reports for 20.205.171.193:

This IP address has been reported a total of 52 times from 49 distinct sources. 20.205.171.193 was first reported on July 15th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-15 06:39:23 (2 minutes ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
Anonymous	2026-07-15 06:38:04 (4 minutes ago)	Bot / scanning and/or hacking attempts: GET /cgi-bin/index.php HTTP/1.1, GET /semiirrep.php HTTP/1.1 ... show more Bot / scanning and/or hacking attempts: GET /cgi-bin/index.php HTTP/1.1, GET /semiirrep.php HTTP/1.1, GET //wander.php HTTP/1.1, GET //w1px.php HTTP/1.1, GET /public/class-walker-footer-dev.php HTTP/1.1, GET /qterm.php HTTP/1.1, GET /output.php HTTP/1.1, GET /de.php HTTP/1.1, GET /7.php HTTP/1.1, GET /yawa.php HTTP/1.1, GET /Geforce.php HTTP/1.1, GET /lanka.php HTTP/1.1, GET /error_log.php HTTP/1.1, GET /grsiuk.php HTTP/1.1, GET /0byte.php HTTP/1.1, GET /maraz.php HTTP/1.1, GET /s1.php HTTP/1.1, GET /fresh3.php HTTP/1.1, GET /easy.php HTTP/1.1, GET /ioxi.php HTTP/1.1, GET /tfm.php HTTP/1.1, GET /ws66.php HTTP/1.1, GET /cc13.php HTTP/1.1, GET /logs1.php HTTP/1.1, GET /knmt.php HTTP/1.1, GET /0x0x.php HTTP/1.1, GET /lkui.php HTTP/1.1, GET /wp-p2r3q9c8k4.php HTTP/1.1, GET /35.php HTTP/1.1, GET /wp-admin/css/colors/blue/about.php HTTP/1.1, GET /wp-style.php HTTP/1.1 show less	Hacking Web App Attack
🇧🇾 lns.bz	2026-07-15 06:25:03 (17 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 Guardian	2026-07-15 06:24:53 (17 minutes ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning (x2) 20.205.171.193 [15/Jul/2026:06:24:51] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.205.171.193 [15/Jul/2026:06:24:51] "GET /this_is_a_new_hello_world.php HTTP/1.1" 20.205.171.193 [15/Jul/2026:06:24:52] "GET /bpsoe.php HTTP/1.1" show less	Port Scan Web App Attack
🇬🇧 Apache	2026-07-15 06:23:23 (18 minutes ago)	(mod_security) mod_security (id:20000010) triggered by 20.205.171.193 (SG/Singapore/-): 5 in the las ... show more (mod_security) mod_security (id:20000010) triggered by 20.205.171.193 (SG/Singapore/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇫🇷 phoenix1jl96	2026-07-15 06:13:53 (28 minutes ago)	2026/07/15 08:12:45 [error] 197029#197029: 469042 open() "/home/user-data/www/default/cgi-bin/index ... show more 2026/07/15 08:12:45 [error] 197029#197029: 469042 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.205.171.193, server: mta-sts.aqteeve.com, request: "GET /cgi-bin/index.php HTTP/1.1", host: "mta-sts.aqteeve.com" 2026/07/15 08:13:22 [error] 197029#197029: *469052 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.205.171.193, server: mta-sts.aqteeve.com, request: "GET /cgi-bin/index.php HTTP/1.1", host: "mta-sts.aqteeve.com" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇩🇪 R.G.	2026-07-15 06:11:35 (30 minutes ago)	(ScanningForFiles) Scanning for files triggerd 20.205.171.193 (SG/Singapore/-): 10 in the last 600 s ... show more (ScanningForFiles) Scanning for files triggerd 20.205.171.193 (SG/Singapore/-): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 maxpower	2026-07-15 06:08:45 (33 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.205.171.193 (SG/Singapore/-): 1 in the las ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.205.171.193 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.205.171.193 - - [15/Jul/2026:08:08:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" "-" host=mail.luilomo.it show less	Port Scan
Anonymous	2026-07-15 06:05:31 (36 minutes ago)	20.205.171.193 - - [15/Jul/2026:08:05:30 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.205.171.193 - - [15/Jul/2026:08:05:30 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 5750 "-" "-" ... show less	Web App Attack
🇩🇪 LRob	2026-07-15 05:48:26 (53 minutes ago)	CrowdSec: crowdsecurity/http-wordpress-scan \| req: /wp-content/plugins/hellopress/wp_filemanager.php ... show more CrowdSec: crowdsecurity/http-wordpress-scan \| req: /wp-content/plugins/hellopress/wp_filemanager.php \| 4 distinct paths \| UA: - show less	Web App Attack
🇩🇪 big-cloud.nl	2026-07-15 05:31:09 (1 hour ago)	Try to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
Anonymous	2026-07-15 05:28:00 (1 hour ago)	20.205.171.193 - - [15/Jul/2026:02:27:48 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.205.171.193 - - [15/Jul/2026:02:27:48 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 1810 "-" "-" 20.205.171.193 - - [15/Jul/2026:02:27:50 -0300] "GET //wp-content/cong.php HTTP/1.1" 403 1810 "-" "-" 20.205.171.193 - - [15/Jul/2026:02:27:59 -0300] "GET //wp-includes/l10n/ HTTP/1.1" 404 157 "-" "-" ... show less	Port Scan
Anonymous	2026-07-15 05:16:35 (1 hour ago)	[Wed Jul 15 06:16:32.218354 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394 ... show more [Wed Jul 15 06:16:32.218354 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394] script '/var/lib/web-share/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 15 06:16:32.593758 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394] script '/var/lib/web-share/ip.php' not found or unable to stat [Wed Jul 15 06:16:33.324797 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394] script '/var/lib/web-share/wp-temp.php' not found or unable to stat [Wed Jul 15 06:16:34.418873 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394] script '/var/lib/web-share/jj.php' not found or unable to stat [Wed Jul 15 06:16:34.820973 2026] [php:error] [pid 1701699:tid 1701699] [client 20.205.171.193:35394] script '/var/lib/web-share/x.php' not found or unable to stat ... show less	Web App Attack
🇦🇺 artful	2026-07-15 05:16:00 (1 hour ago)	Excessive errors, high load and multiple hits per second	Web App Attack
Anonymous	2026-07-15 05:07:40 (1 hour ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:1ce3:32b:e5e3:94b6:782b:728

🇺🇸 172.234.40.229

🇺🇸 65.49.1.30

🇮🇳 2401:4900:1cb4:3281:f55c:6e71:b3b8:139e

🇺🇸 172.234.217.129

🇺🇸 162.216.150.39

🇸🇬 45.82.78.100

🇸🇬 13.67.51.171

🇬🇧 2a06:4883:9000::aa

🇳🇱 2a00:1450:4013:c06::129

🇮🇳 2401:4900:1c85:135b:2dd7:c00f:8b60:53ea

🇮🇷 85.185.201.10

🇺🇸 66.132.195.49

🇬🇧 35.203.210.252

🇨🇳 27.155.172.74

🇮🇳 2401:4900:1c74:6b8b:284b:3edc:524a:4d6b

🇮🇳 2401:4900:1c70:3af7:a859:3ab5:5e2b:c910

🇳🇱 2001:67c:e60:c0c:192:42:116:142

🇺🇸 193.3.53.8

🇺🇸 192.169.249.148