JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.206.88.199

20.206.88.199 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.206.88.199

Whois 20.206.88.199

IP Abuse Reports for 20.206.88.199:

This IP address has been reported a total of 136 times from 125 distinct sources. 20.206.88.199 was first reported on July 8th 2026, and the most recent report was 27 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 on-com	2026-07-08 10:32:53 (27 seconds ago)	URL scan	Brute-Force Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-08 10:31:34 (1 minute ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 Apache	2026-07-08 10:31:31 (1 minute ago)	(mod_security) mod_security (id:20000010) triggered by 20.206.88.199 (BR/Brazil/-): 5 in the last 30 ... show more (mod_security) mod_security (id:20000010) triggered by 20.206.88.199 (BR/Brazil/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇫🇷 LRob	2026-07-08 10:31:16 (2 minutes ago)	CrowdSec: crowdsecurity/http-probing \| req: ["/admin.php","/blurbs.php","/bajah.php","/a.php","/edit ... show more CrowdSec: crowdsecurity/http-probing \| req: ["/admin.php","/blurbs.php","/bajah.php","/a.php","/edit.php","/hosty.php","/k.php","/mosty.php","/aaa.php","/file5.php","/222.php"] \| UA: ["-"] show less	Port Scan Web App Attack
🇵🇱 nakordoni.eu	2026-07-08 10:30:03 (3 minutes ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Microsoft Corporation (BR), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇳🇱 taivas.nl	2026-07-08 10:30:02 (3 minutes ago)	General_bad_requests	Bad Web Bot
🇬🇧 djboddington	2026-07-08 10:28:31 (4 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 conrad10781	2026-07-08 10:26:04 (7 minutes ago)	nginx-4xx	Web App Attack
Anonymous	2026-07-08 10:23:31 (9 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 20.206.88.199 (BR/Brazil/-)	SQL Injection
🇷🇺 DZBOT	2026-07-08 10:22:32 (10 minutes ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 Major Hostility	2026-07-08 10:21:58 (11 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world ... show more "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 "GET ///admin.php HTTP/1.1" 404 "GET /blurbs.php HTTP/1.1" 404 "GET /bajah.php HTTP/1.1" 404 "GET //a.php HTTP/1.1" 404 "GET /edit.php HTTP/1.1" 404 "GET //hosty.php HTTP/1.1" 404 "GET /k.php HTTP/1.1" 404 "GET //mosty.php HTTP/1.1" 404 "GET /aaa.php HTTP/1.1" 404 "GET /file5.php HTTP/1.1" 404 "GET /222.php HTTP/1.1" 404 "GET /test.php HTTP/1.1" 404 "GET /aaa.php?p= HTTP/1.1" 404 "GET /11.php HTTP/1.1" 404 "GET /mac.php HTTP/1.1" 404 "GET /chosen.php? HTTP/1.1" 404 "GET /cream1.php HTTP/1.1" 404 "GET /wp-content/uploads/ HTTP/1.1" show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-08 10:18:25 (14 minutes ago)	[Wed Jul 08 11:18:24.243170 2026] [proxy_fcgi:error] [pid 1598672:tid 139822784255552] [client 20.20 ... show more [Wed Jul 08 11:18:24.243170 2026] [proxy_fcgi:error] [pid 1598672:tid 139822784255552] [client 20.206.88.199:40379] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:18:24.512390 2026] [proxy_fcgi:error] [pid 1598672:tid 139822775862848] [client 20.206.88.199:40379] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:18:24.785938 2026] [proxy_fcgi:error] [pid 1598672:tid 139822626747968] [client 20.206.88.199:40379] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:18:25.035690 2026] [proxy_fcgi:error] [pid 1598672:tid 139822643533376] [client 20.206.88.199:40379] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:18:25.253558 2026] [proxy_fcgi:error] [pid 1598672:tid 139821704009280] [client 20.206.88.199:40379] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 phoenix1jl96	2026-07-08 10:17:45 (15 minutes ago)	2026/07/08 12:17:10 [error] 1339002#1339002: 247248 open() "/home/user-data/www/default/cgi-bin/ind ... show more 2026/07/08 12:17:10 [error] 1339002#1339002: 247248 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.206.88.199, server: autodiscover.adguardian.ledemon.us, request: "GET //cgi-bin/index.php HTTP/1.1", host: "autodiscover.adguardian.ledemon.us" 2026/07/08 12:17:14 [error] 1339002#1339002: *247248 open() "/home/user-data/www/default/cgi-bin/admin.php" failed (2: No such file or directory), client: 20.206.88.199, server: autodiscover.adguardian.ledemon.us, request: "GET //cgi-bin/admin.php HTTP/1.1", host: "autodiscover.adguardian.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇧🇬 Stoyko Stoykov	2026-07-08 10:16:06 (17 minutes ago)	20.206.88.199 - - [08/Jul/2026:13:16:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.206.88.199 - - [08/Jul/2026:13:16:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇩🇪 webanyone	2026-07-08 10:15:45 (17 minutes ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.172.228

🇧🇪 34.53.204.108

🇩🇪 193.124.20.253

🇩🇪 185.242.3.195

🇺🇸 162.158.247.248

🇲🇦 160.164.164.12

🇺🇸 159.203.188.243

🇨🇳 121.204.171.142

🇲🇾 121.122.246.157

🇮🇳 103.69.9.16

🇳🇱 89.21.67.152

🇨🇳 36.140.123.73

🇧🇪 34.38.244.132

🇺🇸 216.24.210.102

🇰🇼 188.236.182.37

🇳🇱 158.173.3.189

🇯🇵 157.107.245.41

🇮🇹 151.49.154.46

🇦🇫 149.54.15.90

🇨🇳 120.48.130.213