JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.120.142

20.205.120.142 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.120.142

Whois 20.205.120.142

IP Abuse Reports for 20.205.120.142:

This IP address has been reported a total of 169 times from 148 distinct sources. 20.205.120.142 was first reported on July 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-06 19:00:43 (2 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 ghostwarriors	2026-07-06 08:56:54 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-07-04 06:27:16 (5 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇳🇱 Site.eu	2026-07-03 17:28:26 (5 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-03 15:04:03 (5 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇧🇪 Ivo Vynckier	2026-07-03 13:00:00 (5 days ago)	20.205.120.142 - - [02/Jul/2026:23:27:29 +0200] "GET /wp-content/cache/ HTTP/1.1" 301 304 "-" "-" 2 ... show more 20.205.120.142 - - [02/Jul/2026:23:27:29 +0200] "GET /wp-content/cache/ HTTP/1.1" 301 304 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:30 +0200] "GET /gecko.php HTTP/1.1" 301 296 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:30 +0200] "GET /wp-includes/ HTTP/1.1" 301 299 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:31 +0200] "GET /aa.php HTTP/1.1" 301 293 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:31 +0200] "GET /0x.php HTTP/1.1" 301 293 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:32 +0200] "GET /zxz.php HTTP/1.1" 301 294 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:32 +0200] "GET /www.php HTTP/1.1" 301 294 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:33 +0200] "GET /wicked.php HTTP/1.1" 301 297 "-" "-" 20.205.120.142 - - [02/Jul/2026:23:27:33 +0200] "GET /HLA-dd.php HTTP/1.1" 404 27 "-" "-" show less	Web App Attack
🇪🇸 pipeline.es	2026-07-03 08:39:27 (6 days ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
Anonymous	2026-07-03 08:01:00 (6 days ago)	Bad behavior, scanning server for exploitable files	Exploited Host Web App Attack Hacking
🇬🇧 openstrike.co.uk	2026-07-03 05:16:09 (6 days ago)	371 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php ... show more 371 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php HTTP/1.1 show less	Web App Attack
🇪🇸 librebit	2026-07-03 04:39:16 (6 days ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇧🇪 taivas.nl	2026-07-03 04:32:34 (6 days ago)	Many_bad_calls	Web App Attack
🇩🇪 SiyCah	2026-07-03 03:00:01 (6 days ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-07-03 02:35:29 (6 days ago)	20.205.120.142 - - [03/Jul/2026:05:35:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.205.120.142 - - [03/Jul/2026:05:35:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 706 "-" "-" ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-03 02:21:06 (6 days ago)	embodiment.mareeshefford.com:443 20.205.120.142 - - [03/Jul/2026:12:21:04 +1000] "GET /wp-content/ad ... show more embodiment.mareeshefford.com:443 20.205.120.142 - - [03/Jul/2026:12:21:04 +1000] "GET /wp-content/admin.php HTTP/1.1" 404 67507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇮 6kilowatti	2026-07-03 02:15:25 (6 days ago)	2026/07/03 05:15:24 [error] 1184#1184: 16896 FastCGI sent in stderr: "Primary script unknown" while ... show more 2026/07/03 05:15:24 [error] 1184#1184: 16896 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.205.120.142, server: oh6ah.fi, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" 2026/07/03 05:15:24 [error] 1184#1184: *16896 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.205.120.142, server: oh6ah.fi, request: "GET /goods.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" ... show less	Web App Attack

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 213.111.76.111

🇨🇳 203.55.221.42

🇵🇪 200.37.179.83

🇮🇷 185.18.213.184

🇨🇳 117.175.51.134

🇫🇷 94.176.161.46

🇷🇺 78.136.223.227

🇺🇸 72.234.16.75

🇺🇸 70.91.135.181

🇺🇸 68.225.62.203

🇩🇪 64.89.163.93

🇳🇱 45.43.151.173

🇺🇸 44.220.212.245

🇬🇧 8.208.10.94

🇵🇱 176.53.159.198

🇻🇳 171.243.149.144

🇧🇩 103.124.251.246

🇺🇸 92.112.92.200

🇫🇷 86.208.186.150

🇺🇸 66.198.221.50