AbuseIPDB » 20.205.128.189

Check an IP Address, Domain Name, or Subnet

e.g. 3.235.140.84, microsoft.com, or 5.188.10.0/24

20.205.128.189 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 37%: ?

37%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Hong Kong
City	Hong Kong, Hong Kong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.205.128.189

Whois 20.205.128.189

IP Abuse Reports for 20.205.128.189:

This IP address has been reported a total of 87 times from 60 distinct sources. 20.205.128.189 was first reported on June 5th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
MHuiG	03 Jul 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: me.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-07-03T16:04:09Z rayName: 7250daf9f9024d92 ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
TTWebhosting	02 Jul 2022	(mod_security) mod_security (id:913113) triggered by 20.205.128.189 (HK/Hong Kong/Central and Wester ... show more(mod_security) mod_security (id:913113) triggered by 20.205.128.189 (HK/Hong Kong/Central and Western District/Central/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
MHuiG	02 Jul 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: cdn.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-07-02T03:51:43Z rayName: 72446caeded22495 ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
4server	30 Jun 2022	[ThuJun3023:57:07.8690062022][:error][pid6252:tid47790581368576][client20.205.128.189:63254][client2 ... show more[ThuJun3023:57:07.8690062022][:error][pid6252:tid47790581368576][client20.205.128.189:63254][client20.205.128.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"luganosbnb.ch\"][uri\"/\"][unique_id\"Yr4cM1s6YAFUu3FAXqOLvAAAAAE\"][ThuJun3023:57:11.4412062022][:error][pid2680:tid47790619191040][client20.205.128.189:63318][client20.205.128.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"www.lugano show less	Blog Spam
MHuiG	30 Jun 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: api.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-06-30T08:21:51Z rayName: 72357da6b9f8b40a ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
4server	28 Jun 2022	[WedJun2901:55:55.0590202022][:error][pid30324:tid47873500739328][client20.205.128.189:53474][client ... show more[WedJun2901:55:55.0590202022][:error][pid30324:tid47873500739328][client20.205.128.189:53474][client20.205.128.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"maurokorangraf.ch\"][uri\"/\"][unique_id\"YruVC3trCwdbHESvrnw5IwAAAEE\"][WedJun2901:55:56.8176542022][:error][pid30387:tid47873504941824][client20.205.128.189:53500][client20.205.128.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"maur show less	Port Scan Brute-Force Web App Attack
GabrielJST	28 Jun 2022	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 20.205.128.189 (HK/H ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 20.205.128.189 (HK/Hong Kong/-) show less	Bad Web Bot
MHuiG	28 Jun 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: friends.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-06-28T08:41:44Z rayName: 722520039bd63d06 ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
backslash	27 Jun 2022		SQL Injection
MHuiG	27 Jun 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-06-27T11:12:30Z rayName: 721dbf7d8db68956 ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
GlobalSiteGuard	26 Jun 2022	Bad Web Bot (python-requests).	Bad Web Bot
Ba-Yu	23 Jun 2022	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
MHuiG	22 Jun 2022	The IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDe ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallrules clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: HK clientIP: 20.205.128.189 clientRequestHTTPHost: ssl.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2022-06-22T05:28:30Z rayName: 71f294b84b1d6e28 ruleId: 77ecba7cc56b4076bbe1b31c164d0dc1 userAgent: python-requests/2.27.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Anonymous	12 Jun 2022	enlinea.de 20.205.128.189 [06/Jun/2022:19:38:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 749 "-" "Moz ... show moreenlinea.de 20.205.128.189 [06/Jun/2022:19:38:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" enlinea.de 20.205.128.189 [06/Jun/2022:19:38:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Web App Attack
bernd	12 Jun 2022	VPN IP	VPN IP