JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.42.209.194

20.42.209.194 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.42.209.194

Whois 20.42.209.194

IP Abuse Reports for 20.42.209.194:

This IP address has been reported a total of 137 times from 120 distinct sources. 20.42.209.194 was first reported on January 2nd 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 John Critchley	2026-01-11 19:11:11 (6 months ago)	Automated ban for 20.42.209.194 after 5+ hits.	Brute-Force Web App Attack
Anonymous	2026-01-04 20:03:52 (6 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 100%, Country: AU, Attack patterns: Wor ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 100%, Country: AU, Attack patterns: WordPress scanning, SQL injection, Webshell probing show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-01-03 23:00:42 (6 months ago)	Auto-ban: 33 malicious requests on 2026-01-02 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 33 malicious requests on 2026-01-02 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇩🇪 paprika	2026-01-03 16:12:04 (6 months ago)	Automated report #1: 48 attacks detected. Types: Brute-force (login).	Email Spam Brute-Force
Anonymous	2026-01-03 09:12:09 (6 months ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-01-03 07:20:41 (6 months ago)	spamd: identified spam	Email Spam
🇬🇧 openstrike.co.uk	2026-01-03 06:14:30 (6 months ago)	180 attacks on PHP URLs: GET /claa.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2026-01-03 05:06:16 (6 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇨🇦 TechnoSolutions CL	2026-01-03 03:11:01 (6 months ago)	20.42.209.194 - - [03/Jan/2026:03:10:33 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.42.209.194 - - [03/Jan/2026:03:10:33 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 405 150 "-" "-" 20.42.209.194 - - [03/Jan/2026:03:10:51 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 405 150 "-" "-" 20.42.209.194 - - [03/Jan/2026:03:11:00 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" 405 150 "-" "-" 20.42.209.194 - - [03/Jan/2026:03:11:00 +0000] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 Stefan Dreher	2026-01-03 03:06:55 (6 months ago)	20.42.209.194 - - [03/Jan/2026:04:06:52 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.42.209.194 - - [03/Jan/2026:04:06:52 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.42.209.194 - - [03/Jan/2026:04:06:52 +0100] "GET /mda.php HTTP/1.1" 404 153 "-" "-" 20.42.209.194 - - [03/Jan/2026:04:06:53 +0100] "GET /cheka.php HTTP/1.1" 404 153 "-" "-" 20.42.209.194 - - [03/Jan/2026:04:06:53 +0100] "GET /cabs.php HTTP/1.1" 404 153 "-" "-" 20.42.209.194 - - [03/Jan/2026:04:06:54 +0100] "GET /classgoto24.php HTTP/1.1" 404 153 "-" "-" ... show less	Hacking Brute-Force
🇫🇷 Quarks Solutions	2026-01-03 02:58:44 (6 months ago)	crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
Anonymous	2026-01-03 02:50:32 (6 months ago)	[03/Jan/2026:02:50:27 +0000] - - 401 - GET https siem.physaphae.fr "/wp-content/plugins/hellopress/w ... show more [03/Jan/2026:02:50:27 +0000] - - 401 - GET https siem.physaphae.fr "/wp-content/plugins/hellopress/wp_filemanager.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50:28 +0000] - - 401 - GET https siem.physaphae.fr "/mda.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50:29 +0000] - - 401 - GET https siem.physaphae.fr "/cheka.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50:29 +0000] - - 401 - GET https siem.physaphae.fr "/cabs.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50:30 +0000] - - 401 - GET https siem.physaphae.fr "/classgoto24.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50:30 +0000] - - 401 - GET https siem.physaphae.fr "/zsz.php" [Client 20.42.209.194] [Length 176] [Gzip -] [Sent-to 192.168.1.223] "-" "-" [03/Jan/2026:02:50 ... show less	Web App Attack
🇫🇷 solution.it	2026-01-03 02:45:03 (6 months ago)	[Sat Jan 03 03:45:02.897163 2026] [php7:error] [pid 972530:tid 972530] [client 20.42.209.194:19129] ... show more [Sat Jan 03 03:45:02.897163 2026] [php7:error] [pid 972530:tid 972530] [client 20.42.209.194:19129] script '/var/www/html/mda.php' not found or unable to stat show less	Web App Attack
🇩🇪 neogenius	2026-01-03 02:38:53 (6 months ago)	Web App Attack	Brute-Force Web App Attack
🇬🇧 rakkor	2026-01-03 02:32:17 (6 months ago)	2026/01/03 02:31:53 [error] 10038#10038: 8308600 open() "/var/lib/letsencrypt/.well-known/acme-chal ... show more 2026/01/03 02:31:53 [error] 10038#10038: 8308600 open() "/var/lib/letsencrypt/.well-known/acme-challenge/index.php" failed (2: No such file or directory), client: 20.42.209.194, server: _, request: "GET /.well-known/acme-challenge/index.php HTTP/1.1", host: "portainer.rakkor.uk" 2026/01/03 02:32:16 [error] 10038#10038: *8308600 open() "/var/lib/letsencrypt/.well-known/acme-challenge/wp-login.php" failed (2: No such file or directory), client: 20.42.209.194, server: _, request: "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1", host: "portainer.rakkor.uk" ... show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 195.33.200.58

🇳🇱 92.63.197.5

🇫🇷 91.231.89.248

🇨🇭 89.217.203.224

🇺🇸 72.84.253.22

🇰🇷 211.253.9.49

🇧🇷 205.210.31.196

🇺🇸 198.211.114.225

🇳🇱 195.178.110.217

🇺🇸 104.28.215.220

🇭🇰 103.195.4.68

🇫🇷 91.231.89.232

🇨🇭 20.203.135.57

🇧🇪 198.235.24.203

🇪🇹 196.191.151.172

🇺🇸 147.185.132.31

🇯🇵 118.194.228.101

🇵🇭 116.50.169.6

🇧🇩 103.21.41.148

🇫🇷 91.231.89.226