JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.7.197.202

Neutral Activity

Abuse confidence score ?

0% Low Risk

48 reports

32 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.7.197.202 has been reported 48 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.7.197.202

Export CSV

This IP address has been reported a total of 48 times from 32 distinct sources. 20.7.197.202 was first reported on October 29th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 AC - Team	2022-11-14 16:38:42 (3 years ago)	20.7.197.202 - - [14/Nov/2022:18:38:41 -0300] "GET /xleet.php HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Wi ... show more 20.7.197.202 - - [14/Nov/2022:18:38:41 -0300] "GET /xleet.php HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 akcurate.de	2022-11-14 14:34:41 (3 years ago)	[Mon Nov 14 20:32:58.893280 2022] [proxy_fcgi:error] [pid 253844:tid 253893] [client 20.7.197.202:65 ... show more [Mon Nov 14 20:32:58.893280 2022] [proxy_fcgi:error] [pid 253844:tid 253893] [client 20.7.197.202:65048] AH01071: Got error 'Primary script unknown' [Mon Nov 14 20:33:10.025364 2022] [proxy_fcgi:error] [pid 253630:tid 253797] [client 20.7.197.202:61978] AH01071: Got error 'Primary script unknown' [Mon Nov 14 20:33:54.364500 2022] [proxy_fcgi:error] [pid 253630:tid 253796] [client 20.7.197.202:55684] AH01071: Got error 'Primary script unknown' [Mon Nov 14 20:34:32.054727 2022] [proxy_fcgi:error] [pid 253844:tid 253886] [client 20.7.197.202:61398] AH01071: Got error 'Primary script unknown' [Mon Nov 14 20:34:38.948480 2022] [proxy_fcgi:error] [pid 253630:tid 253842] [client 20.7.197.202:54670] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇬🇧 Epimetheus	2022-11-14 09:44:44 (3 years ago)	Unauthorized access attempts: From: 20.7.197.202 Method: HTTP GET URI Path: /xltavrat.php UA: ... show more Unauthorized access attempts: From: 20.7.197.202 Method: HTTP GET URI Path: /xltavrat.php UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" show less	Web App Attack
🇺🇸 raymarron.com	2022-11-14 09:13:05 (3 years ago)	/xleet-shell.php /xltavrat.php /wp-content/themes/seotheme/db.php?u /wp-commentin.php /makhdamx. ... show more /xleet-shell.php /xltavrat.php /wp-content/themes/seotheme/db.php?u /wp-commentin.php /makhdamx.php show less	Web App Attack
🇬🇧 no1knows.com	2022-11-14 00:06:01 (3 years ago)	2022/11/14 05:03:00 [error] 435008#435008: 11093 FastCGI sent in stderr: "Primary script unknown" w ... show more 2022/11/14 05:03:00 [error] 435008#435008: 11093 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.7.197.202, server: _, request: "GET /makhdamx.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2022/11/14 05:04:31 [error] 435008#435008: 11095 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.7.197.202, server: _, request: "GET /wp-commentin.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" 2022/11/14 05:05:58 [error] 435008#435008: 11098 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.7.197.202, server: _, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com" ... show less	Brute-Force Bad Web Bot
🇧🇷 AC - Team	2022-11-13 23:10:57 (3 years ago)	20.7.197.202 - - [14/Nov/2022:01:10:56 -0300] "GET /xleet.php HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Wi ... show more 20.7.197.202 - - [14/Nov/2022:01:10:56 -0300] "GET /xleet.php HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Exploited Host Web App Attack
Anonymous	2022-11-13 22:27:38 (3 years ago)	Attempted search for exploits and vulnerabilities detected by fail2ban noscript ...	Brute-Force Web App Attack
🇩🇪 mygcode.de	2022-11-13 21:37:09 (3 years ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/themes/seotheme/db.php	Web App Attack
🇫🇷 Guardian	2022-11-13 20:59:20 (3 years ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning, Scanning for installed WordPress and vulnerabilities 20.7.197.202 [14/Nov/2022:01:58:31] "GET /makhdamx.php HTTP/1.1" 20.7.197.202 [14/Nov/2022:01:59:19] "GET /wp-commentin.php HTTP/1.1" show less	Port Scan Web App Attack
🇳🇱 taivas.nl	2022-11-13 20:30:04 (3 years ago)	web_app_attack	Email Spam
🇦🇺 Bay13	2022-11-12 01:59:17 (3 years ago)	f2b urlscanners	Hacking Web App Attack
🇨🇦 Mediashaker	2022-11-11 03:40:03 (3 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.197.202 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.7.197.202 (US/United States/-) show less	Port Scan
🇩🇪 iNetWorker	2022-11-10 01:34:55 (3 years ago)	trolling for resource vulnerabilities	Web App Attack
🇦🇺 Bay13	2022-11-09 18:02:57 (3 years ago)	f2b urlscanners	Hacking Web App Attack
🇫🇷 Security_Whaller	2022-11-07 06:06:00 (3 years ago)	Malicious activity	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.44.26.212

🇺🇸 172.93.148.166

🇺🇸 162.216.150.234

🇩🇪 152.53.135.52

🇷🇴 92.118.39.71

🇧🇬 79.124.58.142

🇧🇬 79.124.40.162

🇮🇳 74.225.253.2

🇰🇷 39.121.165.97

🇬🇧 35.203.210.34

🇲🇽 189.194.140.170

🇺🇸 159.223.134.163

🇺🇸 137.184.207.81

🇨🇳 111.225.214.128

🇺🇸 104.236.24.96

🇩🇪 104.207.62.69

🇺🇸 104.196.161.44

🇬🇧 94.7.21.164

🇳🇱 77.91.71.11

🇨🇳 58.213.107.138