JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.106.92

20.205.106.92 was found in our database!

This IP was reported 332 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.106.92

Whois 20.205.106.92

IP Abuse Reports for 20.205.106.92:

This IP address has been reported a total of 332 times from 162 distinct sources. 20.205.106.92 was first reported on May 27th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 serverutama	2026-05-28 10:02:01 (1 week ago)	Nginx scanner: 20.205.106.92 - - [28/May/2026:17:00:04 +0700] "GET /wp-content/uploads/index.php HTT ... show more Nginx scanner: 20.205.106.92 - - [28/May/2026:17:00:04 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Web App Attack Bad Web Bot
🇳🇱 MacLotsen	2026-05-28 09:51:59 (1 week ago)	[Thu May 28 11:51:57.361439 2026] [php7:error] [pid 111050] [client 20.205.106.92:6700] script '/var ... show more [Thu May 28 11:51:57.361439 2026] [php7:error] [pid 111050] [client 20.205.106.92:6700] script '/var/www/degastrobar.nl/inputs.php' not found or unable to stat [Thu May 28 11:51:58.005755 2026] [php7:error] [pid 108565] [client 20.205.106.92:6734] script '/var/www/degastrobar.nl/admin.php' not found or unable to stat [Thu May 28 11:51:58.702676 2026] [php7:error] [pid 108568] [client 20.205.106.92:3363] script '/var/www/degastrobar.nl/goods.php' not found or unable to stat ... show less	Web App Attack Brute-Force
🇫🇷 fabrice	2026-05-28 09:43:36 (1 week ago)	Repeated Trusted domain errors : 20.205.106.92 - - [28/May/2026:11:43:36 +0200] "GET /wp-admin/ HTTP ... show more Repeated Trusted domain errors : 20.205.106.92 - - [28/May/2026:11:43:36 +0200] "GET /wp-admin/ HTTP/1.1" 403 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇷 dominioz	2026-05-28 09:06:33 (1 week ago)	2026-05-28 09:05:33 GET /inputs.php - - 20.205.106.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+ ... show more 2026-05-28 09:05:33 GET /inputs.php - - 20.205.106.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 404 25596 2026-05-28 09:05:33 GET /ioxi-o.php - - 20.205.106.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 404 25596 2026-05-28 09:05:33 GET /function/function.php - - 20.205.106.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 404 25596 2026-05-28 09:05:34 GET /rip.php - - 20.205.106.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 404 25596 ... show less	Web App Attack
Anonymous	2026-05-28 09:03:14 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-05-28 08:38:58 (1 week ago)	[Thu May 28 11:38:53.963015 2026] [proxy_fcgi:error] [pid 1356009:tid 1356014] [client 20.205.106.92 ... show more [Thu May 28 11:38:53.963015 2026] [proxy_fcgi:error] [pid 1356009:tid 1356014] [client 20.205.106.92:0] AH01071: Got error 'Primary script unknown' [Thu May 28 11:38:54.178396 2026] [proxy_fcgi:error] [pid 1356010:tid 1356041] [client 20.205.106.92:0] AH01071: Got error 'Primary script unknown' [Thu May 28 11:38:54.638676 2026] [proxy_fcgi:error] [pid 1356010:tid 1356058] [client 20.205.106.92:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
Anonymous	2026-05-28 08:12:46 (1 week ago)	PSCSERV WPSCAN 20.205.106.92	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-05-28 08:12:27 (1 week ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.205.106.92 172.71.215.109 - - [28/May/2026:05:12 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.205.106.92 172.71.215.109 - - [28/May/2026:05:12:17 -0300] "GET /inputs.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇩🇪 findlab	2026-05-28 07:35:01 (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 KitsuneTech	2026-05-28 07:29:25 (1 week ago)	20.205.106.92 - - [28/May/2026:02:29:25 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 260 ... show more 20.205.106.92 - - [28/May/2026:02:29:25 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 ph	2026-05-28 07:13:58 (1 week ago)	Bad web bot attempting to run wp-content on non-WP site	Hacking Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-05-28 06:54:53 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /wp-content/themes/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Ba-Yu	2026-05-28 06:10:07 (1 week ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇦🇺 2000cn.com.au	2026-05-28 05:28:08 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Web App Attack Hacking
Anonymous	2026-05-28 05:26:08 (1 week ago)		Web App Attack

Showing 241 to 255 of 332 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 98.66.233.228

🇨🇳 82.157.183.136

🇺🇸 20.169.104.65

🇺🇸 209.141.46.71

🇧🇪 207.175.83.199

🇵🇸 199.250.150.104

🇧🇷 177.38.153.50

🇩🇪 155.117.127.153

🇸🇬 134.209.102.117

🇧🇷 108.165.179.155

🇳🇱 84.22.101.204

🇺🇸 66.132.172.233

🇮🇳 49.43.235.154

🇰🇷 20.196.203.243

🇷🇴 2.57.122.238

🇮🇩 202.162.199.146

🇧🇷 200.196.50.91

🇬🇧 195.96.139.219

🇻🇳 180.93.36.16

🇧🇷 168.0.68.184