JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.204.146.105

Recent Activity

Abuse Confidence Score

100% Critical

2,004 reports

721 reporters · latest 1 day ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇳 India
City: Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

2,004 from 721 distinct reporters

First reported

September 2nd 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 492 🇺🇸 United States of America 383 🇫🇷 France 248

Most common categories Web App Attack 1,606 Bad Web Bot 577 Brute-Force 414 Hacking 382 Port Scan 167

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-10-28 04:47:53 (1 day ago)	Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-28 04:23:31 (1 day ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇺🇸 Rayulcifer	2026-10-27 21:52:25 (1 day ago)	[Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct ... show more [Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 21 13:20:46.228142 2026] [authz_core:error] [pid 3543067:tid 140117167552192] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Wed Oct 21 13:20:46.445363 2026] [authz_core:error] [pid 3543067:tid 140120167237312] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/languages/about.php [Wed Oct 21 13:20:46.655425 2026] [authz_core:error] [pid 3543067:tid 140118803343040] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/kir.php [Wed Oct 21 13:20:46.862942 2026] [authz_core:error] [pid 3543067:tid 140116983011008] [client 20.204.146.105: ... show less	Brute-Force SSH
🇳🇱 Alt255	2026-10-27 04:23:31 (2 days ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7386 "-" "-" 20.20 ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7386 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/languages/about.php HTTP/1.1" 404 2101 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /kir.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /init-notica.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /n7wmf4i9.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:0 ... show less	Bad Web Bot Web App Attack
🇩🇪 www.Examensfragen.de	2026-10-26 21:58:41 (2 days ago)		Web Spam Bad Web Bot
🇺🇸 Rayulcifer	2026-10-26 21:22:36 (2 days ago)	[Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct ... show more [Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 21 13:20:46.228142 2026] [authz_core:error] [pid 3543067:tid 140117167552192] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Wed Oct 21 13:20:46.445363 2026] [authz_core:error] [pid 3543067:tid 140120167237312] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/languages/about.php [Wed Oct 21 13:20:46.655425 2026] [authz_core:error] [pid 3543067:tid 140118803343040] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/kir.php [Wed Oct 21 13:20:46.862942 2026] [authz_core:error] [pid 3543067:tid 140116983011008] [client 20.204.146.105: ... show less	Brute-Force SSH
Anonymous	2026-10-26 19:52:55 (2 days ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-25 13:47:14 (3 days ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7386 "-" "-" 20.20 ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7386 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:07 +0200\] "GET /wp-content/languages/about.php HTTP/1.1" 404 2101 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /kir.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /init-notica.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:08 +0200\] "GET /n7wmf4i9.php HTTP/1.1" 404 328 "-" "-" 20.204.146.105 - - \[20/Oct/2026:19:24:0 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-24 13:46:29 (4 days ago)	fail2ban jail apache-scanner: 20.204.146.105 - - [12/Oct/2026:06:34:09 -0700] "GET /mini.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.146.105 - - ... show more fail2ban jail apache-scanner: 20.204.146.105 - - [12/Oct/2026:06:34:09 -0700] "GET /mini.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.146.105 - - [12/Oct/2026:06:34:10 -0700] "GET /aa.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.146.105 - - [12/Oct/2026:06:34:10 -0700] "GET /c.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.146.105 - - [12/Oct/2026:06:34:11 -0700] "GET /f.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.146.105 - - [12/Oct/2026:06:34:11 -0700] "GET /w.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (W show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:39:36 (4 days ago)	Fail2Ban automatic report - jail: recidive	Brute-Force SSH DDoS Attack
🇺🇸 1cyb3rpunk	2026-10-23 18:42:53 (5 days ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-23 18:17:01 (5 days ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇩🇪 rh24	2026-10-23 10:00:06 (6 days ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
🇺🇸 Rayulcifer	2026-10-23 06:27:10 (6 days ago)	[Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct ... show more [Wed Oct 21 13:20:46.020084 2026] [authz_core:error] [pid 3543067:tid 140117788317376] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 21 13:20:46.228142 2026] [authz_core:error] [pid 3543067:tid 140117167552192] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Wed Oct 21 13:20:46.445363 2026] [authz_core:error] [pid 3543067:tid 140120167237312] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/languages/about.php [Wed Oct 21 13:20:46.655425 2026] [authz_core:error] [pid 3543067:tid 140118803343040] [client 20.204.146.105:27272] AH01630: client denied by server configuration: proxy:http://localhost:4000/kir.php [Wed Oct 21 13:20:46.862942 2026] [authz_core:error] [pid 3543067:tid 140116983011008] [client 20.204.146.105: ... show less	Brute-Force SSH
Anonymous	2026-10-22 20:06:41 (6 days ago)	fail2ban: recidive jail (2 hits in 15724800s) on skipper	Hacking

Showing 1 to 15 of 2004 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 24.150.7.109

🇿🇼 197.221.232.44

🇧🇷 187.111.28.131

🇺🇸 184.96.190.62

🇨🇴 181.79.159.5

🇺🇸 152.163.101.181

🇳🇱 138.226.239.90

🇩🇪 135.125.226.143

🇧🇷 128.201.121.122

🇺🇸 97.148.85.106

🇳🇱 45.148.10.152

🇵🇰 39.60.90.62

🇨🇦 192.24.52.97

🇲🇽 186.96.158.180

🇻🇳 180.93.59.8

🇧🇷 177.84.5.30

🇺🇸 136.49.127.20

🇳🇬 102.88.168.159

🇺🇸 66.249.65.73

🇬🇧 51.148.1.225