JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.35.123

20.205.35.123 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.35.123

Whois 20.205.35.123

IP Abuse Reports for 20.205.35.123:

This IP address has been reported a total of 214 times from 169 distinct sources. 20.205.35.123 was first reported on June 30th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Ivo Vynckier	2026-07-01 14:01:00 (11 hours ago)	20.205.35.123 - - [30/Jun/2026:22:48:38 +0200] "GET /wso.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Wind ... show more 20.205.35.123 - - [30/Jun/2026:22:48:38 +0200] "GET /wso.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.35.123 - - [30/Jun/2026:22:48:39 +0200] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 2322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.35.123 - - [30/Jun/2026:22:48:39 +0200] "GET /wp-file.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-07-01 13:04:27 (12 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
Anonymous	2026-07-01 09:13:57 (16 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-07-01 05:14:54 (20 hours ago)	3166 attacks on PHP URLs, ACME URLs: GET /NewFile.php HTTP/1.1 GET /.well-known/acme-challenge/makea ... show more 3166 attacks on PHP URLs, ACME URLs: GET /NewFile.php HTTP/1.1 GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1 show less	Web App Attack
🇧🇪 taivas.nl	2026-07-01 04:32:52 (20 hours ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-07-01 04:16:12 (21 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇪🇸 librebit	2026-07-01 03:58:56 (21 hours ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇺🇸 Charlesiv	2026-07-01 02:02:57 (23 hours ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporat ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /.well-known/ Timestamp: 2026-07-01T01:26:59Z Ray ID: a141a02d7abe1059 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 convos	2026-07-01 01:25:14 (23 hours ago)	HONEYPOT TRIGGERED [HP-MR1E8KMC-0706T9]: GET /admin.php on hq.it-solutionsusa.com \| UA: Mozilla/5.0 ... show more HONEYPOT TRIGGERED [HP-MR1E8KMC-0706T9]: GET /admin.php on hq.it-solutionsusa.com \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) \| TS: 2026-07-01T01:25:13.956Z show less	Port Scan Web App Attack
🇩🇪 yvoictra	2026-07-01 01:24:11 (23 hours ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-wordpress-scan	Web App Attack
🇩🇪 macrob	2026-07-01 01:16:28 (1 day ago)	2026/07/01 01:16:26 [error] 720046#720046: 341886046 access forbidden by rule, client: 20.205.35.12 ... show more 2026/07/01 01:16:26 [error] 720046#720046: 341886046 access forbidden by rule, client: 20.205.35.123, server: binixo.es, request: "GET /admin.php HTTP/2.0", host: "binixo.es" 2026/07/01 01:16:27 [error] 720047#720047: 341903917 access forbidden by rule, client: 20.205.35.123, server: binixo.es, request: "GET /wp-includes/block-supports/ HTTP/2.0", host: "binixo.es" 2026/07/01 01:16:27 [error] 720049#720049: 341833800 access forbidden by rule, client: 20.205.35.123, server: binixo.es, request: "GET /wp-content/admin.php HTTP/2.0", host: "binixo.es" ... show less	Web App Attack
🇫🇮 Vaino Karppi	2026-07-01 01:14:52 (1 day ago)	Honeypot triggered: Tried to access restricted page /.well-known/pki-validation/admin.php	Hacking
Anonymous	2026-07-01 01:06:57 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 20.205.35.123 (HK/Hong Kong/-)	SQL Injection
🇩🇪 Admin-Gito	2026-07-01 01:04:52 (1 day ago)	20.205.35.123 - - [01/Jul/2026:03:01:21 +0200] "GET /wp-includes/css/about.php HTTP/1.1" 404 355315 ... show more 20.205.35.123 - - [01/Jul/2026:03:01:21 +0200] "GET /wp-includes/css/about.php HTTP/1.1" 404 355315 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:01:29 +0200] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 355320 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:01:31 +0200] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 355334 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:01:50 +0200] "GET /wp-includes/css.php HTTP/1.1" 404 355309 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:01:51 +0200] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 404 355334 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:02:01 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 355358 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:02:04 +0200] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 355333 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:02:07 +0200] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 355322 "-" "-" 20.205.35.123 - - [01/Jul/2026:03:02:10 +0200] "GET /wp-includes/Text/autoload_clas ... show less	Web App Attack
🇬🇧 andypiper	2026-07-01 01:02:57 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.197.207

🇨🇳 203.93.173.11

🇧🇪 198.235.24.214

🇬🇧 195.96.139.74

🇬🇧 193.163.125.66

🇺🇸 191.102.187.43

🇮🇳 182.95.229.110

🇷🇺 178.178.234.214

🇧🇷 172.253.233.30

🇨🇳 124.88.113.73

🇫🇮 95.217.20.174

🇫🇷 91.231.89.119

🇨🇦 85.217.149.5

🇭🇰 47.83.207.150

🇺🇸 44.183.27.58

🇸🇬 43.173.179.194

🇨🇳 14.103.123.80

🇺🇿 213.230.86.114

🇧🇪 198.235.24.209

🇷🇺 193.242.105.24