JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.43.19.237

20.43.19.237 was found in our database!

This IP was reported 840 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.43.19.237

Whois 20.43.19.237

IP Abuse Reports for 20.43.19.237:

This IP address has been reported a total of 840 times from 487 distinct sources. 20.43.19.237 was first reported on April 14th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 eliosbrocchi	2026-04-15 17:55:43 (1 month ago)	[Wed Apr 15 19:55:34.743354 2026] [proxy_fcgi:error] [pid 261194:tid 261286] [client 20.43.19.237:81 ... show more [Wed Apr 15 19:55:34.743354 2026] [proxy_fcgi:error] [pid 261194:tid 261286] [client 20.43.19.237:8146] AH01071: Got error 'Primary script unknown' [Wed Apr 15 19:55:36.628930 2026] [proxy_fcgi:error] [pid 261194:tid 261253] [client 20.43.19.237:8146] AH01071: Got error 'Primary script unknown' [Wed Apr 15 19:55:39.592902 2026] [proxy_fcgi:error] [pid 261194:tid 261299] [client 20.43.19.237:8146] AH01071: Got error 'Primary script unknown' [Wed Apr 15 19:55:40.595335 2026] [proxy_fcgi:error] [pid 261194:tid 261260] [client 20.43.19.237:8146] AH01071: Got error 'Primary script unknown' [Wed Apr 15 19:55:42.410280 2026] [proxy_fcgi:error] [pid 261194:tid 261251] [client 20.43.19.237:8146] AH01071: Got error 'Primary script unknown' ... show less	VPN IP
🇳🇱 debestelapp	2026-04-15 17:51:56 (1 month ago)		Web App Attack
🇩🇪 macrob	2026-04-15 17:50:09 (1 month ago)	2026/04/15 17:50:04 [error] 651824#651824: 153886314 access forbidden by rule, client: 20.43.19.237 ... show more 2026/04/15 17:50:04 [error] 651824#651824: 153886314 access forbidden by rule, client: 20.43.19.237, server: bonocom.org, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "bonocom.org" 2026/04/15 17:50:07 [error] 651824#651824: 153886374 access forbidden by rule, client: 20.43.19.237, server: bonocom.org, request: "GET /wp-admin/atomlib.php HTTP/1.1", host: "bonocom.org" 2026/04/15 17:50:07 [error] 651824#651824: 153886359 access forbidden by rule, client: 20.43.19.237, server: bonocom.org, request: "GET /.ufc/ss.php HTTP/1.1", host: "bonocom.org" ... show less	Web App Attack
🇩🇪 netclix.gr	2026-04-15 17:49:26 (1 month ago)	(PERMBLOCK) 20.43.19.237 (CA/Canada/-) has had more than 2 temp blocks in the last 604800 secs; Port ... show more (PERMBLOCK) 20.43.19.237 (CA/Canada/-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇧 Bytemark	2026-04-15 17:47:41 (1 month ago)	20.43.19.237 - - [15/Apr/2026:18:38:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 493 "-" "-" 20.43.19.23 ... show more 20.43.19.237 - - [15/Apr/2026:18:38:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 493 "-" "-" 20.43.19.237 - - [15/Apr/2026:18:38:44 +0100] "GET /xmlrpc.php HTTP/1.1" 404 293 "-" "-" 20.43.19.237 - - [15/Apr/2026:18:47:40 +0100] "GET /xmlrpc.php HTTP/1.1" 301 493 "-" "-" show less	Brute-Force Web App Attack
🇦🇹 René Hickersberger	2026-04-15 17:46:30 (1 month ago)	malicious bot detected: violations="hit-honeypot"; user_agent=""	Web App Attack
🇨🇦 yukon.ca	2026-04-15 17:35:09 (1 month ago)	Web Server Enforcement Violation: HTTP Webshells Activity Port:80	Hacking Exploited Host
🇫🇷 ELYAZ	2026-04-15 17:35:06 (1 month ago)	(y3) Failed access -byebye- from 20.43.19.237 (CA/Canada/-): (CF_ENABLE)	Hacking
🇩🇪 electra	2026-04-15 17:33:24 (1 month ago)	Attempted to access path /wp-content/plugins/hellopress/wp_filemanager.php (GET request)	Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-04-15 17:26:03 (1 month ago)	[Wed Apr 15 18:15:56.622173 2026] [proxy_fcgi:error] [pid 2144541:tid 140447276054080] [client 20.43 ... show more [Wed Apr 15 18:15:56.622173 2026] [proxy_fcgi:error] [pid 2144541:tid 140447276054080] [client 20.43.19.237:5083] AH01071: Got error 'Primary script unknown' [Wed Apr 15 18:26:02.837496 2026] [proxy_fcgi:error] [pid 2144541:tid 140447309624896] [client 20.43.19.237:5012] AH01071: Got error 'Primary script unknown' [Wed Apr 15 18:26:02.970345 2026] [proxy_fcgi:error] [pid 2144541:tid 140446462355008] [client 20.43.19.237:5012] AH01071: Got error 'Primary script unknown' [Wed Apr 15 18:26:03.106421 2026] [proxy_fcgi:error] [pid 2144541:tid 140446814684736] [client 20.43.19.237:5012] AH01071: Got error 'Primary script unknown' [Wed Apr 15 18:26:03.255472 2026] [proxy_fcgi:error] [pid 2144541:tid 140447284446784] [client 20.43.19.237:5012] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇮🇪 AutosOnShow	2026-04-15 17:12:05 (1 month ago)	blocked for webapp attack \| path requested: /widgets.php \| seen at 2026-04-15 17:11:05.838 \|	Web App Attack
🇳🇱 JCB	2026-04-15 17:12:00 (1 month ago)	20.43.19.237 - - [15/Apr/2026:06:26:33 +0300] "GET /widgets.php HTTP/1.1" 404 236 20.43.19.237 - - ... show more 20.43.19.237 - - [15/Apr/2026:06:26:33 +0300] "GET /widgets.php HTTP/1.1" 404 236 20.43.19.237 - - [15/Apr/2026:06:26:33 +0300] "GET /noop.php HTTP/1.1" 404 236 ... show less	Web App Attack
🇫🇮 Ba-Yu	2026-04-15 17:11:29 (1 month ago)	General hacking/exploits/scanning	Port Scan Exploited Host Web App Attack
Anonymous	2026-04-15 17:11:00 (1 month ago)	20.43.19.237 - - [15/Apr/2026:19:10:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.43.19.237 - - [15/Apr/2026:19:10:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:55 +0200] "GET /wp-head.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:55 +0200] "GET /users.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:56 +0200] "GET /alfanew.PHP7 HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:56 +0200] "GET /ms.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:57 +0200] "GET /msl.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:57 +0200] "GET /obfs.php HTTP/1.1" 404 49604 20.43.19.237 - - [15/Apr/2026:19:10:57 +0200] "GET /options-reading.php HTTP/1.1" 404 49603 20.43.19.237 - - [15/Apr/2026:19:10:58 +0200] "GET /ms-sites.php HTTP/1.1" 404 49603 20.43.19.237 - - [15/Apr/2026:19:10:58 +0200] "GET /yasnu.php HTTP/1.1" 404 49604 ... show less	Web Spam Web App Attack
Anonymous	2026-04-15 17:10:13 (1 month ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot

Showing 106 to 120 of 840 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.84.100.201

🇺🇸 135.233.112.103

🇻🇳 113.171.81.144

🇲🇲 103.203.135.151

🇷🇺 92.241.120.249

🇧🇷 45.205.1.243

🇳🇱 45.148.10.121

🇮🇹 34.17.118.205

🇺🇸 8.229.207.28

🇩🇴 186.149.252.42

🇺🇸 97.122.251.63

🇺🇸 68.235.52.99

🇺🇸 52.176.211.73

🇩🇪 47.91.76.73

🇬🇧 35.203.211.108

🇺🇸 2a09:bac5:a538:1be1::2c7:76

🇺🇸 216.24.219.158

🇬🇧 193.163.125.173

🇵🇪 190.119.63.98

🇮🇳 182.95.230.150