JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.205.12.169

Recent Activity

Abuse Confidence Score

100% Critical

1,955 reports

746 reporters · latest 2 days ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,955 from 746 distinct reporters

First reported

September 23rd 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 520 🇺🇸 United States of America 302 🇫🇷 France 227

Most common categories Web App Attack 1,423 Brute-Force 574 Bad Web Bot 510 Hacking 403 Port Scan 207

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-10-27 21:52:25 (2 days ago)	[Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep ... show more [Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep 27 18:23:20.304482 2026] [authz_core:error] [pid 1381636:tid 137893297231552] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Sep 27 18:23:20.515179 2026] [authz_core:error] [pid 1381636:tid 137894421329600] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Sun Sep 27 18:23:20.730949 2026] [authz_core:error] [pid 1381636:tid 137892802324160] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Sun Sep 27 18:23:20.934624 2026] [authz_core:error] [pid 1381636:tid 137893347587776] [client 20.205.12.169:53556] AH01630: client denie ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-10-26 21:22:37 (3 days ago)	[Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep ... show more [Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep 27 18:23:20.304482 2026] [authz_core:error] [pid 1381636:tid 137893297231552] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Sep 27 18:23:20.515179 2026] [authz_core:error] [pid 1381636:tid 137894421329600] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Sun Sep 27 18:23:20.730949 2026] [authz_core:error] [pid 1381636:tid 137892802324160] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Sun Sep 27 18:23:20.934624 2026] [authz_core:error] [pid 1381636:tid 137893347587776] [client 20.205.12.169:53556] AH01630: client denie ... show less	Brute-Force SSH
Anonymous	2026-10-24 13:46:39 (5 days ago)	fail2ban jail apache-scanner: 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /yich.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-blink.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 ... show more fail2ban jail apache-scanner: 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /yich.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-blink.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-logis.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wsxedc.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /idolet.php?p= HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /weem.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /vitellose.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /carcassed.php?p= HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /esc.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /2.php HTTP/1.1" 403 447 "-" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:52:06 (5 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-10-22 07:01:18 (1 week ago)	[Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep ... show more [Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep 27 18:23:20.304482 2026] [authz_core:error] [pid 1381636:tid 137893297231552] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Sep 27 18:23:20.515179 2026] [authz_core:error] [pid 1381636:tid 137894421329600] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Sun Sep 27 18:23:20.730949 2026] [authz_core:error] [pid 1381636:tid 137892802324160] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Sun Sep 27 18:23:20.934624 2026] [authz_core:error] [pid 1381636:tid 137893347587776] [client 20.205.12.169:53556] AH01630: client denie ... show less	Brute-Force SSH
Anonymous	2026-10-21 13:20:14 (1 week ago)	fail2ban jail apache-scanner: 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /yich.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-blink.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 ... show more fail2ban jail apache-scanner: 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /yich.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-blink.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wp-logis.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:51 -0700] "GET /wsxedc.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /idolet.php?p= HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /weem.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /vitellose.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /carcassed.php?p= HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /esc.php HTTP/1.1" 403 447 "-" "-" 20.205.12.169 - - [23/Sep/2026:05:29:52 -0700] "GET /2.php HTTP/1.1" 403 447 "-" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:28:21 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-20 07:11:06 (1 week ago)	T: f2b 404 5x	Web App Attack
Anonymous	2026-10-20 06:55:26 (1 week ago)	B: f2b 404 5x	Web App Attack
🇩🇪 IVski.com	2026-10-18 05:24:56 (1 week ago)	IVski WAF \| Sensitive file probe detected - looking for .env	Hacking Brute-Force Web App Attack
🇦🇺 Klaverstyn	2026-10-17 04:56:34 (1 week ago)	Persistent attacker, repeat offender	Hacking
🇨🇦 zXero	2026-10-17 00:29:47 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇧🇪 madeit	2026-10-16 14:40:39 (1 week ago)		Web App Attack
🇨🇦 zXero	2026-10-15 12:14:55 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-10-14 14:48:48 (2 weeks ago)	[Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep ... show more [Sun Sep 27 18:23:20.071932 2026] [authz_core:error] [pid 1381636:tid 137893834102464] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Sep 27 18:23:20.304482 2026] [authz_core:error] [pid 1381636:tid 137893297231552] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Sep 27 18:23:20.515179 2026] [authz_core:error] [pid 1381636:tid 137894421329600] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Sun Sep 27 18:23:20.730949 2026] [authz_core:error] [pid 1381636:tid 137892802324160] [client 20.205.12.169:53556] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Sun Sep 27 18:23:20.934624 2026] [authz_core:error] [pid 1381636:tid 137893347587776] [client 20.205.12.169:53556] AH01630: client denie ... show less	Brute-Force SSH

Showing 1 to 15 of 1955 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇴 202.86.149.20

🇫🇷 201.24.187.52

🇹🇷 195.170.186.232

🇵🇰 160.250.122.105

🇲🇦 105.71.19.164

🇸🇬 94.231.206.13

🇸🇦 93.112.209.10

🇫🇷 85.217.140.45

🇩🇪 83.97.116.241

🇮🇹 78.134.49.171

🇵🇱 34.158.232.116

🇭🇰 8.217.174.148

🇷🇴 2.57.122.238

🇺🇸 2602:80d:1008::50

🇨🇳 220.202.112.64

🇧🇷 201.71.192.108

🇩🇪 193.22.147.143

🇵🇾 170.245.132.255

🇺🇸 170.187.163.117

🇺🇸 138.197.109.69