JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.219.185.206

Recent Activity

Abuse confidence score ?

100% Critical

780 reports

533 reporters · latest 1 minute ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.219.185.206

Export CSV

This IP address has been reported a total of 780 times from 533 distinct sources. 20.219.185.206 was first reported on October 2nd 2026, and the most recent report was 1 minute ago. In the last 60 days, the top reporter locations were: Germany with 198 reports; United States of America with 142 reports; France with 98 reports. The most common categories in these recent reports were: Web App Attack 591 times; Bad Web Bot 191 times; Hacking 170 times; Brute-Force 162 times; Port Scan 72 times; Other 131 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 antlac1	2026-10-03 19:39:01 (1 minute ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇵🇱 miriks	2026-10-03 19:37:58 (2 minutes ago)	Automated scan detected: GET /warm.php7 — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show more Automated scan detected: GET /warm.php7 — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇩🇪 TheDjRider	2026-10-03 19:33:00 (7 minutes ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-10-03T19:32:57.397746336Z. Context: http_status=404 show less	Web App Attack
🇩🇪 Jarda_H	2026-10-03 19:32:58 (7 minutes ago)	php-url-scan Attack Detected	Hacking Web App Attack
🇬🇧 Marten Mark	2026-10-03 19:29:22 (11 minutes ago)	20.219.185.206 - - [03/Oct/2026:19:29:20 +0000] "GET /2.php HTTP/2.0" 404 169 "-" "Mozilla/5.0 (Wind ... show more 20.219.185.206 - - [03/Oct/2026:19:29:20 +0000] "GET /2.php HTTP/2.0" 404 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:29:21 +0000] "GET /ALFA_DATA/alfacgiapi/ HTTP/2.0" 404 23131 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:29:21 +0000] "GET /ALFA_DATA/alfacgiapi/ HTTP/2.0" 404 23131 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:29:22 +0000] "GET /a.php HTTP/2.0" 404 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:29:22 +0000] "GET /a.php HTTP/2.0" 404 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 ... show less	Port Scan Web App Attack
🇩🇪 Dennis	2026-10-03 19:27:21 (13 minutes ago)	20.219.185.206 has been banned for triggering http-probing (11 events over 1.878838042s).	Brute-Force Web App Attack
🇺🇸 lavnet.net	2026-10-03 19:25:18 (15 minutes ago)	20.219.185.206 - - [03/Oct/2026:19:25:17 +0000] "GET /2.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Win ... show more 20.219.185.206 - - [03/Oct/2026:19:25:17 +0000] "GET /2.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:25:17 +0000] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:19:25:17 +0000] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-10-03 19:23:38 (16 minutes ago)	20.219.185.206 - - [03/Oct/2026:21:23:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.219.185.206 - - [03/Oct/2026:21:23:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:34 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:34 +0200] "GET /congeree.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:35 +0200] "GET /x.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:35 +0200] "GET /go.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:35 +0200] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:35 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:35 +0200] "GET /1ac.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:36 +0200] "GET /flm.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:23:36 +0200] "GET /40341.php HTTP/1.1" 404 164 "-" "-" 20.219.185.206 - - ... show less	Bad Web Bot Web App Attack
🇮🇩 soc-yk	2026-10-03 19:18:11 (22 minutes ago)	Type: web_scanning Risk: 100 Events: 3820 Evidence: - Automated hostile web probing detected - Repe ... show more Type: web_scanning Risk: 100 Events: 3820 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified show less	Web App Attack
🇩🇪 Marc	2026-10-03 19:12:05 (28 minutes ago)	20.219.185.206 - - [03/Oct/2026:21:12:04 +0200] "GET /mini.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (W ... show more 20.219.185.206 - - [03/Oct/2026:21:12:04 +0200] "GET /mini.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:21:12:04 +0200] "GET /chosen.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:21:12:04 +0200] "GET /kj.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
🇵🇱 Niko's Stuff	2026-10-03 19:10:15 (30 minutes ago)	Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/20.219.185.2 ... show more Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/20.219.185.206 show less	Web App Attack Hacking
🇬🇧 Mendip_Defender	2026-10-03 19:08:28 (31 minutes ago)	20.219.185.206 - - [03/Oct/2026:20:08:26 +0100] "GET /mini.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 ( ... show more 20.219.185.206 - - [03/Oct/2026:20:08:26 +0100] "GET /mini.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:20:08:26 +0100] "GET /chosen.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.185.206 - - [03/Oct/2026:20:08:27 +0100] "GET /kj.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇷🇺 Deynekin.com	2026-10-03 19:06:33 (33 minutes ago)	This IP address has been identified as part of a botnet infrastructure used by threat actors, indica ... show more This IP address has been identified as part of a botnet infrastructure used by threat actors, indicating automated and malicious activity. show less	Fraud Orders Web App Attack SSH Web Spam FTP Brute-Force Phishing Email Spam Port Scan Brute-Force Exploited Host Hacking SQL Injection
🇫🇷 UnixPrime	2026-10-03 19:03:38 (36 minutes ago)	20.219.185.206 - - [03/Oct/2026:21:03:23 +0200] "GET /admin.php? HTTP/1.1" 404 27 "-" "-" 20.219.185 ... show more 20.219.185.206 - - [03/Oct/2026:21:03:23 +0200] "GET /admin.php? HTTP/1.1" 404 27 "-" "-" 20.219.185.206 - - [03/Oct/2026:21:03:38 +0200] "GET /admin.php/admin.php HTTP/1.1" 404 27 "-" "-" ... show less	Bad Web Bot Web App Attack
🇷🇺 ago.su	2026-10-03 19:02:59 (37 minutes ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack

Showing 1 to 15 of 780 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇾🇹 41.242.116.25

🇨🇳 218.88.196.214

🇮🇳 210.89.45.20

🇺🇸 208.82.118.98

🇦🇷 181.20.118.244

🇨🇦 85.217.149.71

🇻🇪 38.188.240.158

🇺🇸 20.55.44.181

🇮🇳 203.145.165.2

🇹🇼 203.66.168.131

🇺🇸 195.184.76.216

🇫🇷 169.40.142.202

🇮🇩 160.187.174.22

🇨🇳 120.48.179.46

🇨🇳 110.166.81.12

🇮🇶 65.20.202.4

🇨🇳 59.37.94.126

🇬🇧 2.57.17.125

🇩🇪 194.187.176.223

🇹🇼 111.70.23.231