20.2.199.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
No reports in the last 60 days
20.2.199.2 has been reported 21 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
21 from
20 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 28 malicious requests on 2025-12-22 (e.g., env/backup probes, brute-force, or error bursts).
|
Hacking Web App Attack SSH | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2025-12-22
|
Hacking Web App Attack SSH | |
| 🇧🇪 cmbplf |
104 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php
|
Brute-Force Bad Web Bot | |
| 🇳🇱 Roderic |
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
|
Port Scan | |
| Anonymous |
wordpress-trap
|
Web App Attack | |
| 🇺🇦 URAN Publishing Service |
20.2.199.2 - - [22/Dec/2025:14:03:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 276 "-" "-"
20.2.199.2 - - [22/Dec/2025:14:09:20 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 196 "-" "-"
...
|
Web App Attack | |
| 🇮🇹 IRT@Unisi |
Multiple web server 400 error codes from same source ip.
|
Bad Web Bot | |
| 🇧🇾 lns.bz |
Too many 404 requests [BY]
|
Web App Attack | |
| 🇳🇿 Antinson |
Scraping with a high error ratio and request rate
|
Bad Web Bot | |
| 🇫🇷 masterguru |
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-196)
|
Hacking | |
| 🇺🇸 Rocky Mountain Bioengineering Symposium |
20.2.199.2 - - [22/Dec/2025:03:53:05 -0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 485 "-" "-"
...
|
Web App Attack | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-probing - events: 11
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown