20.210.122.138

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
28 reports
26 reporters · latest 6 hours ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 4 🇳🇱 Netherlands 4
Most common categories Web App Attack 20 Brute-Force 10 Bad Web Bot 6 Hacking 4 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇿🇦 conure.sh
csagent: score 19.3: shell drop sweep x1, webshell name x1; 2 domain(s) in 12s
Web App Attack
🇨🇭 Masterpiece
Web scanning (http-admin-interface-probing), 4 requests.
Web App Attack
🇱🇻 GooddayGroup
Automated probing for sensitive configuration files and environment leaks.
Hacking Brute-Force
🇯🇵 S.O.B.A. Dev.
Web vulnerability scanning
Brute-Force Web Spam Web App Attack
🇨🇭 Masterpiece
Web scanner probing for non-existent paths (wp-login, .env, xmlrpc and similar). 81 requests within one hour.
Web App Attack
🇺🇸 gamabe
Detected crowdsecurity/http-wordpress-scan attack pattern. Reported by CrowdSec IDS.
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf
Brute-Force Bad Web Bot
🇫🇷 ap_ram
mae-404 : Too many 404 errors
Brute-Force
🇩🇪 Gwyneth Llewelyn
20.210.122.138 - - [14/Nov/2026:23:02:39 +0000] "GET /wp-admin.php HTTP/2.0" 404 994 "http://bestasquadradas.org/wp-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Bad Web Bot
🇩🇪 dbmwebdesign
Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban
Web App Attack
🇺🇸 ArturShelby
Suspicious file access: /.well-known/admin.php
Web App Attack
🇺🇸 ph
Bad web bot attempting to run lock360.php on non-WP site
Hacking Bad Web Bot Web App Attack
🇩🇪 on-com
URL scan
Brute-Force Web App Attack
🇿🇦 conure.sh
csagent: score 20.0: webshell name x2; 2 domain(s) in 0s
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 179.60.75.93
🇸🇬 145.223.134.182
🇨🇳 112.45.179.78
🇩🇪 109.160.32.39
🇮🇳 103.208.153.15
🇨🇳 58.38.61.4
🇦🇺 147.90.206.141
🇺🇸 108.162.237.41
🇹🇬 102.64.216.25
🇭🇰 101.36.122.18
🇮🇳 64.227.187.28
🇯🇵 34.146.204.5
🇺🇸 3.140.244.121
🇩🇪 185.201.137.143
🇩🇪 94.26.106.199
🇪🇸 91.213.120.174
🇺🇸 66.132.172.182
🇺🇸 209.141.47.217
🇺🇸 162.216.150.146
🇺🇸 143.105.23.30
feedback