JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.96.99

20.205.96.99 was found in our database!

This IP was reported 324 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.96.99

Whois 20.205.96.99

IP Abuse Reports for 20.205.96.99:

This IP address has been reported a total of 324 times from 196 distinct sources. 20.205.96.99 was first reported on July 1st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-08 01:57:29 (4 hours ago)	[WedJul0803:57:26.4657052026][security2:error][pid2104643:tid2104672][client20.205.96.99:0]ModSecuri ... show more [WedJul0803:57:26.4657052026][security2:error][pid2104643:tid2104672][client20.205.96.99:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"webmail.formet.ch\"][uri\"/wp-content/uploads/index.php\"][unique_id\"ak2uhp3nqbMIbdFM6O2FjAAAABI\"] show less	Port Scan Brute-Force Web App Attack
🇸🇬 wulan17	2026-07-08 01:38:54 (4 hours ago)	Fail2ban: Web bot/vulnerability scanning detected.	Bad Web Bot
🇩🇪 MarkGGN	2026-07-08 01:20:56 (4 hours ago)	Web attack. 20.205.96.99 - - [08/Jul/2026:03:20:55 +0200] "GET /ws.php HTTP/1.1" 404 146 "-" "-" 20. ... show more Web attack. 20.205.96.99 - - [08/Jul/2026:03:20:55 +0200] "GET /ws.php HTTP/1.1" 404 146 "-" "-" 20.205.96.99 - - [08/Jul/2026:03:20:56 +0200] "GET /wp-conf.php HTTP/1.1" 404 146 "-" "-" show less	Web App Attack
🇬🇧 andypiper	2026-07-08 01:00:48 (5 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 Campus France	2026-07-08 00:18:40 (5 hours ago)	[Wed Jul 08 02:18:32.528672 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/ ... show more [Wed Jul 08 02:18:32.528672 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/www/html/brume.org/radios/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 08 02:18:36.776403 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/www/html/brume.org/radios/themes.php' not found or unable to stat [Wed Jul 08 02:18:38.315506 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/www/html/brume.org/radios/ws.php' not found or unable to stat [Wed Jul 08 02:18:39.087659 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/www/html/brume.org/radios/wp-conf.php' not found or unable to stat [Wed Jul 08 02:18:39.875632 2026] [php:error] [pid 2113498] [client 20.205.96.99:9950] script '/var/www/html/brume.org/radios/wp-login.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 Philister11	2026-07-08 00:15:44 (6 hours ago)	CrowdSec: crowdsecurity/http-crawl-non_statics (HK/AS8075)	Bad Web Bot Web App Attack
🇺🇸 micropedro	2026-07-07 23:45:05 (6 hours ago)	3 incidents: web scanning/attack. First: 2026-07-02 16:37, Last: 2026-07-07 19:45 UTC. Triggers: ngi ... show more 3 incidents: web scanning/attack. First: 2026-07-02 16:37, Last: 2026-07-07 19:45 UTC. Triggers: nginx-sensitive-files,nginx-botsearch. show less	Hacking Bad Web Bot Web App Attack
🇧🇷 Francisco Carlos	2026-07-07 23:24:18 (6 hours ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, wordpress. Sample: GET /wp-login.php show less	Hacking Bad Web Bot Web App Attack
🇩🇪 fleckenbase	2026-07-07 21:52:18 (8 hours ago)	apache-noscript ...	Brute-Force Web App Attack
🇵🇱 strefapi_com	2026-07-07 21:48:57 (8 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇬🇧 djboddington	2026-07-07 21:44:21 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇫🇮 kumiko	2026-07-07 21:40:49 (8 hours ago)	[2026-07-08 00:40:49] Probing for WordPress exploits [2 requests] "GET /wp-content/BypassBest.php ... show more [2026-07-08 00:40:49] Probing for WordPress exploits [2 requests] "GET /wp-content/BypassBest.php HTTP/1.1" 403 "GET /wp-content/style.php HTTP/1.1" 403 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-07-07 21:20:41 (8 hours ago)	[2026-07-08 00:20:41] Probing for WordPress exploits [2 requests] "GET /wp-content/plugins/hellopr ... show more [2026-07-08 00:20:41] Probing for WordPress exploits [2 requests] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 "GET /index.php/wp-includes/PHPMailer/ HTTP/1.1" 403 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-07 21:16:04 (9 hours ago)	Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇪 KIDOS	2026-07-07 21:15:45 (9 hours ago)	IIS malicious activity: burst_requests	Web App Attack

Showing 1 to 15 of 324 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.61

🇫🇷 176.175.59.170

🇸🇬 45.82.78.104

🇹🇼 198.235.24.122

🇲🇦 196.92.7.246

🇳🇱 193.176.31.150

🇬🇧 193.176.29.24

🇫🇷 185.177.72.17

🇸🇪 171.25.158.57

🇭🇰 165.154.40.93

🇮🇳 152.58.34.45

🇫🇮 147.185.133.141

🇧🇩 103.100.234.190

🇫🇷 85.217.140.41

🇩🇪 69.5.169.10

🇺🇸 66.132.172.100

🇫🇮 2.26.0.66

🇬🇧 213.166.84.57

🇧🇪 198.235.24.193

🇺🇸 195.184.76.203