JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.210.205.212

20.210.205.212 was found in our database!

This IP was reported 182 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.210.205.212

Whois 20.210.205.212

IP Abuse Reports for 20.210.205.212:

This IP address has been reported a total of 182 times from 146 distinct sources. 20.210.205.212 was first reported on July 5th 2026, and the most recent report was 27 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-07-05 17:17:30 (27 seconds ago)	trolling for resource vulnerabilities	Web App Attack
🇬🇷 setupgr	2026-07-05 17:13:43 (4 minutes ago)	(mod_security) mod_security (id:1000001) triggered by 20.210.205.212 (JP/Japan/Tokyo/Shibuya City/-/ ... show more (mod_security) mod_security (id:1000001) triggered by 20.210.205.212 (JP/Japan/Tokyo/Shibuya City/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Jul 05 20:13:38.354810 2026] [security2:error] [pid 2978:tid 3131] [client 20.210.205.212:3336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.cpanagiotou.gr"] [uri "/wp-content/about.php"] [unique_id "akqQwgvxyAwCJxzheZQojQAAAxc"] show less	Port Scan
🇫🇷 LRNP	2026-07-05 17:13:06 (4 minutes ago)	_:80 20.210.205.212 - - [05/Jul/2026:17:13:03 +0000] "GET /wp-content/plugins/hellopress/wp_filemana ... show more _:80 20.210.205.212 - - [05/Jul/2026:17:13:03 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:03 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:04 +0000] "GET /admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:04 +0000] "GET /public/css.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:04 +0000] "GET /classwithtostring.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:05 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:05 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:05 +0000] "GET /gelay.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - [05/Jul/2026:17:13:05 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.210.205.212 - - ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-05 17:07:07 (10 minutes ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=JP; ASN=8075 MICROSOFT-CORP-MSN-AS-BLOCK show less	Hacking
Anonymous	2026-07-05 17:01:07 (16 minutes ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇫🇷 Lunix	2026-07-05 16:57:50 (20 minutes ago)		Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-07-05 16:53:05 (24 minutes ago)	(php_susp_dir) srv102 PHP in suspicious dir 20.210.205.212 (JP/Japan/-): 1 in the last 3600 secs; Po ... show more (php_susp_dir) srv102 PHP in suspicious dir 20.210.205.212 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 chrisj	2026-07-05 16:52:55 (25 minutes ago)	[Sun Jul 05 16:52:51.089058 2026] [proxy_fcgi:error] [pid 515550:tid 515630] [client 20.210.205.212: ... show more [Sun Jul 05 16:52:51.089058 2026] [proxy_fcgi:error] [pid 515550:tid 515630] [client 20.210.205.212:37263] AH01071: Got error 'Primary script unknown' [Sun Jul 05 16:52:52.295249 2026] [proxy_fcgi:error] [pid 515550:tid 515626] [client 20.210.205.212:37263] AH01071: Got error 'Primary script unknown' [Sun Jul 05 16:52:54.519007 2026] [proxy_fcgi:error] [pid 515550:tid 515609] [client 20.210.205.212:37263] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇬🇧 Greg Poulson	2026-07-05 16:50:03 (27 minutes ago)	Our website was hit by this DDOS at a rate of 164 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇱🇻 garmtech.com	2026-07-05 16:41:38 (36 minutes ago)	Attempted access to sensitive endpoint (/wp-content/admin.php) detected. Automated scan or unauthori ... show more Attempted access to sensitive endpoint (/wp-content/admin.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 macrob	2026-07-05 16:40:38 (37 minutes ago)	2026/07/05 16:40:36 [error] 1561371#1561371: 352954636 access forbidden by rule, client: 20.210.205 ... show more 2026/07/05 16:40:36 [error] 1561371#1561371: 352954636 access forbidden by rule, client: 20.210.205.212, server: binixo.com.ua, request: "GET /wp-admin/js/index.php HTTP/1.1", host: "binixo.com.ua" 2026/07/05 16:40:37 [error] 1561371#1561371: 352954636 access forbidden by rule, client: 20.210.205.212, server: binixo.com.ua, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "binixo.com.ua" 2026/07/05 16:40:37 [error] 1561371#1561371: 352954636 access forbidden by rule, client: 20.210.205.212, server: binixo.com.ua, request: "GET /wp-content/about.php HTTP/1.1", host: "binixo.com.ua" ... show less	Web App Attack
Anonymous	2026-07-05 16:39:20 (38 minutes ago)	[Sun Jul 05 12:39:19.875046 2026] [php7:error] [pid 3493447] [client 20.210.205.212:25798] script '/ ... show more [Sun Jul 05 12:39:19.875046 2026] [php7:error] [pid 3493447] [client 20.210.205.212:25798] script '/var/www/llamadareal.com/this_is_a_new_hello_world.php' not found or unable to stat [Sun Jul 05 12:39:20.356981 2026] [php7:error] [pid 3493447] [client 20.210.205.212:25798] script '/var/www/llamadareal.com/admin.php' not found or unable to stat ... show less	Brute-Force Web App Attack SSH
🇨🇭 backslash	2026-07-05 16:33:00 (44 minutes ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 chrisj	2026-07-05 16:32:47 (45 minutes ago)	[Sun Jul 05 16:32:46.082560 2026] [proxy_fcgi:error] [pid 515550:tid 515627] [client 20.210.205.212: ... show more [Sun Jul 05 16:32:46.082560 2026] [proxy_fcgi:error] [pid 515550:tid 515627] [client 20.210.205.212:11543] AH01071: Got error 'Primary script unknown' [Sun Jul 05 16:32:46.481310 2026] [proxy_fcgi:error] [pid 515550:tid 515630] [client 20.210.205.212:11543] AH01071: Got error 'Primary script unknown' [Sun Jul 05 16:32:47.346700 2026] [proxy_fcgi:error] [pid 515550:tid 515607] [client 20.210.205.212:11543] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-05 16:25:11 (52 minutes ago)	20.210.205.212 - - [05/Jul/2026:13:25:09 -0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 ... show more 20.210.205.212 - - [05/Jul/2026:13:25:09 -0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.210.205.212 - - [05/Jul/2026:13:25:09 -0300] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.210.205.212 - - [05/Jul/2026:13:25:10 -0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan

Showing 1 to 15 of 182 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇾 178.120.2.129

🇰🇪 154.159.253.252

🇨🇮 102.206.123.223

🇮🇳 202.14.122.25

🇲🇽 201.173.66.172

🇮🇩 180.254.109.3

🇧🇷 177.12.92.128

🇺🇸 167.99.148.102

🇪🇬 156.202.9.90

🇭🇰 103.231.13.182

🇺🇦 79.143.45.75

🇧🇬 79.124.62.230

🇺🇸 71.84.153.232

🇺🇸 66.249.66.200

🇮🇳 45.250.227.54

🇨🇳 1.94.199.17

🇮🇳 223.228.176.150

🇻🇪 201.221.115.4

🇧🇷 189.56.195.78

🇦🇷 181.224.183.63