JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.204.136.73

20.204.136.73 was found in our database!

This IP was reported 637 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.204.136.73

Whois 20.204.136.73

IP Abuse Reports for 20.204.136.73:

This IP address has been reported a total of 637 times from 234 distinct sources. 20.204.136.73 was first reported on May 27th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-05-29 08:34:16 (5 days ago)	Type: suspicious_network_activity Threat: wordpress_enumerator Risk: 68 Events: 625 Evidence: - Per ... show more Type: suspicious_network_activity Threat: wordpress_enumerator Risk: 68 Events: 625 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇩🇪 paissangroup	2026-05-29 08:26:57 (5 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 slay3r9903	2026-05-29 08:22:12 (5 days ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇺🇸 nyt	2026-05-29 08:17:26 (5 days ago)	Hacking, Web App Attack, suspicious: Web Shell Upload	Hacking Web App Attack
🇦🇹 penguin-solutions.at	2026-05-29 08:10:28 (5 days ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 raph	2026-05-29 07:47:56 (5 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇺🇸 ersei.net	2026-05-29 07:45:35 (5 days ago)	Brute force multiple 403s	Brute-Force
🇩🇪 FeG Deutschland	2026-05-29 07:35:26 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 webanyone	2026-05-29 07:30:19 (5 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 helios.live	2026-05-29 07:22:11 (5 days ago)	2026/05/29 07:22:09 [error] 2311035#2311035: 1168741 FastCGI sent in stderr: "Primary script unknow ... show more 2026/05/29 07:22:09 [error] 2311035#2311035: 1168741 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.204.136.73, server: kocerroxy.com, request: "GET /inputs.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 20.204.136.73 - - [29/May/2026:07:22:09 +0000] "GET /inputs.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2026/05/29 07:22:10 [error] 2311035#2311035: *1168741 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.204.136.73, server: kocerroxy.com, request: "GET /ioxi-o.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 20.204.136.73 - - [29/May/2026:07:22:10 +0000] "GET /ioxi-o.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ... show less	Web App Attack
🇫🇷 Savoie	2026-05-29 07:18:00 (5 days ago)	20.204.136.73 *.* - [29/May/2026:09:18:31 +0200] "GET /inputs.php HTTP/1.1" 302 250 "-" "Mozilla ... show more 20.204.136.73 *.* - [29/May/2026:09:18:31 +0200] "GET /inputs.php HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" AND : GET /ioxi-o.php HTTP/1.1 GET /function/function.php HTTP/1.1 GET /rip.php HTTP/1.1 GET /admin.php HTTP/1.1 GET /wp-content/uploads/index.php HTTP/1.1 etc. etc. etc. show less	Bad Web Bot Web App Attack
Anonymous	2026-05-29 07:16:40 (5 days ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇹🇷 Detmach	2026-05-29 07:15:12 (5 days ago)	Security attack detected. Multiple failed attempts from 20.204.136.73. IP banned for 1440 minutes at ... show more Security attack detected. Multiple failed attempts from 20.204.136.73. IP banned for 1440 minutes at 29.05.2026 10:15:07. Failed attempts: 1 show less	Brute-Force
🇩🇪 4server	2026-05-29 07:14:05 (5 days ago)	[FriMay2909:14:02.5129552026][security2:error][pid1849816:tid1849923][client20.204.136.73:0]ModSecur ... show more [FriMay2909:14:02.5129552026][security2:error][pid1849816:tid1849923][client20.204.136.73:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\*\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5100\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/index.php\"][severity\"CRITICAL\"][hostname\"gpwealth.ch\"][uri\"/wp-content/uploads/index.php\"][unique_id\"ahk8ugI7-H7hgZAfmFvBwAAAAMo\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 macrob	2026-05-29 07:11:42 (5 days ago)	2026/05/29 07:11:40 [error] 4160934#4160934: 264959896 access forbidden by rule, client: 20.204.136 ... show more 2026/05/29 07:11:40 [error] 4160934#4160934: 264959896 access forbidden by rule, client: 20.204.136.73, server: finami.mx, request: "GET /admin.php HTTP/2.0", host: "finami.mx" 2026/05/29 07:11:40 [error] 4160934#4160934: 264959905 access forbidden by rule, client: 20.204.136.73, server: finami.mx, request: "GET /wp-content/uploads/index.php HTTP/2.0", host: "finami.mx" 2026/05/29 07:11:41 [error] 4160931#4160931: 264959952 access forbidden by rule, client: 20.204.136.73, server: finami.mx, request: "GET /wp-admin/user.php HTTP/2.0", host: "finami.mx" ... show less	Web App Attack

Showing 436 to 450 of 637 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2400:cb00:636:1000:b50f:1cee:aaa1:4b8f

🇮🇩 103.165.139.145

🇮🇷 85.133.193.72

🇩🇪 45.129.242.233

🇨🇳 14.103.144.18

🇨🇴 190.121.134.193

🇺🇸 162.216.149.95

🇧🇷 152.32.200.243

🇺🇸 66.132.195.36

🇨🇳 58.49.26.202

🇩🇪 46.249.99.124

🇳🇱 45.148.10.121

🇺🇸 23.94.44.102

🇺🇸 18.220.198.91

🇰🇷 222.239.251.12

🇬🇧 188.240.59.31

🇨🇳 182.138.158.85

🇺🇸 104.194.9.81

🇳🇱 77.174.164.37

🇺🇸 65.49.20.84