JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.212.34.118

20.212.34.118 was found in our database!

This IP was reported 375 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.212.34.118

Whois 20.212.34.118

IP Abuse Reports for 20.212.34.118:

This IP address has been reported a total of 375 times from 307 distinct sources. 20.212.34.118 was first reported on July 5th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 08:49:12 (22 minutes ago)	Malicious activities were performed using this IP.	Hacking
🇮🇳 walkintoadmin	2026-07-06 08:40:31 (31 minutes ago)	datacenter scanner, 0 real-user 200s, scanner-path probing	Bad Web Bot Web App Attack
🇳🇱 JCB	2026-07-06 08:31:00 (40 minutes ago)	[Mon Jul 06 08:03:34 2026] [info] [client 20.212.34.118:17479] AH01382: Request header read timeout ... show more [Mon Jul 06 08:03:34 2026] [info] [client 20.212.34.118:17479] AH01382: Request header read timeout show less	Web App Attack Hacking
🇺🇸 infra-monitor	2026-07-06 08:00:09 (1 hour ago)	Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, wp-sensitive-paths	Port Scan Hacking Web App Attack
🇫🇷 largo-it.net	2026-07-06 07:43:28 (1 hour ago)	Jul 6 09:43:24 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23372 [06/Jul/2026:09:43:23.956] www_fr ... show more Jul 6 09:43:24 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23372 [06/Jul/2026:09:43:23.956] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/97/108 404 3252 - - ---- 61/13/0/0/0 0/0 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" Jul 6 09:43:24 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23372 [06/Jul/2026:09:43:24.489] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/47/58 404 3151 - - ---- 62/14/0/0/0 0/0 "GET /this_is_a_new_hello_world.php HTTP/1.1" Jul 6 09:43:25 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23372 [06/Jul/2026:09:43:25.247] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/57/68 404 3151 - - ---- 62/14/0/0/0 0/0 "GET /ccs.php?p= HTTP/1.1" Jul 6 09:43:25 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23372 [06/Jul/2026:09:43:25.865] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/49/60 404 3151 - - ---- 62/14/0/0/0 0/0 "GET /green3.php?p= HTTP/1.1" Jul 6 09:43:26 vps-9f3cdc33 haproxy[1242135]: 20.212.34.118:23 ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-06 07:43:24 (1 hour ago)	20.212.34.118 - - [06/Jul/2026:09:43:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.212.34.118 - - [06/Jul/2026:09:43:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 34158 20.212.34.118 - - [06/Jul/2026:09:43:06 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 29056 20.212.34.118 - - [06/Jul/2026:09:43:08 +0200] "GET /zoko.php HTTP/1.1" 404 29055 20.212.34.118 - - [06/Jul/2026:09:43:10 +0200] "GET /w.php HTTP/1.1" 404 29055 20.212.34.118 - - [06/Jul/2026:09:43:11 +0200] "GET /133.php HTTP/1.1" 404 29055 20.212.34.118 - - [06/Jul/2026:09:43:13 +0200] "GET /7.php HTTP/1.1" 404 29055 20.212.34.118 - - [06/Jul/2026:09:43:15 +0200] "GET /wp3.php HTTP/1.1" 404 29055 20.212.34.118 - - [06/Jul/2026:09:43:17 +0200] "GET /7.php? HTTP/1.1" 404 29054 20.212.34.118 - - [06/Jul/2026:09:43:19 +0200] "GET /faze.php HTTP/1.1" 404 29053 20.212.34.118 - - [06/Jul/2026:09:43:21 +0200] "GET /axds.php HTTP/1.1" 404 29055 ... show less	Web Spam Web App Attack
🇵🇱 MatStef132	2026-07-06 07:39:52 (1 hour ago)	MatShield L7: blocked on dzielnicarp.eu (suspicious behaviour)	DDoS Attack
🇺🇸 Epimetheus	2026-07-06 07:20:08 (1 hour ago)	Unauthorized access attempts: [GET] //wp-includes/css/dist/ [GET] //wp-includes/js/dist/ [GET] //in ... show more Unauthorized access attempts: [GET] //wp-includes/css/dist/ [GET] //wp-includes/js/dist/ [GET] //inc.php [GET] //wp-includes/l10n/ [GET] //wp-includes/assets/ [GET] //wp-content/plugins/erinyani/ [GET] //wp-includes/sitemaps/ [GET] //wp-includes/css/dist/ [GET] /class-t.api.php [GET] /BDKR28.php [GET] /Sfn2kmdefault.php [GET] /rrdbtjru.php [GET] /2P.update.php [GET] /lufix.php [GET] /xll.php [GET] /db.php [GET] /2P.php [GET] //wp-includes/css/dist/ [GET] /bawal.php [GET] //wp-admin/user/index.php [GET] /odf7udtspqtpxzyxmw2rcCdefault.php [GET] /iKScdefault.php [GET] /iQps3ldefault.php [GET] /a11.php [GET] /xxa.php [GET] /dxipc.php [GET] /wp-ws68.php [GET] //edit.php [GET] /znar.php [GET] /auu.php [GET] /wp-head.php [GET] /j1b827g.php [GET] /wgvsn.php [GET] /wax.php [GET] /xa.php [GET] /cream1.php [GET] /ovaaotqdq.php [GET] /002.php [GET] /miru1.php [GET] /root.php [GET] /class14.php [GET] //cr7.php [GET] /spurwing.php [GET] /wp-monkonas.php [GET] /link.php [GET] /shadow. ...(Truncated) show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-06 07:17:14 (1 hour ago)	wp-includes scan	Web App Attack
🇺🇸 antlac1	2026-07-06 07:11:37 (2 hours ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇺🇸 mccsoft.io	2026-07-06 07:08:40 (2 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇺🇸 chrisj	2026-07-06 07:06:44 (2 hours ago)	[Mon Jul 06 07:06:42.047521 2026] [proxy_fcgi:error] [pid 534274:tid 534326] [client 20.212.34.118:5 ... show more [Mon Jul 06 07:06:42.047521 2026] [proxy_fcgi:error] [pid 534274:tid 534326] [client 20.212.34.118:53909] AH01071: Got error 'Primary script unknown' [Mon Jul 06 07:06:42.525694 2026] [proxy_fcgi:error] [pid 534274:tid 534327] [client 20.212.34.118:53909] AH01071: Got error 'Primary script unknown' [Mon Jul 06 07:06:43.771508 2026] [proxy_fcgi:error] [pid 534274:tid 534330] [client 20.212.34.118:53909] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 london2038.com	2026-07-06 07:03:27 (2 hours ago)	Probing for exploits 20.212.34.118 - - [06/Jul/2026:09:03:20 +0200] "GET /wp-content/plugins/hellopr ... show more Probing for exploits 20.212.34.118 - - [06/Jul/2026:09:03:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 20.212.34.118 - - [06/Jul/2026:09:03:23 +0200] "GET /wp-ws68.php?p= HTTP/1.1" 301 169 "-" "-" show less	Hacking Web App Attack
🇩🇪 rh24	2026-07-06 07:00:08 (2 hours ago)	Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests	DDoS Attack Web App Attack
🇳🇱 i-turnradio.nl	2026-07-06 06:59:18 (2 hours ago)	2026-07-06 @ 08:59:17 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-06 @ 08:59:17 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack

Showing 1 to 15 of 375 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c09::12d

🇬🇧 213.166.84.35

🇵🇱 195.3.220.7

🇬🇧 193.163.125.143

🇬🇧 193.163.125.130

🇨🇴 190.26.162.151

🇫🇷 178.238.224.42

🇺🇸 170.124.32.136

🇹🇭 147.50.103.212

🇺🇸 135.237.126.122

🇨🇳 120.194.50.39

🇮🇳 103.120.153.192

🇸🇮 102.220.160.42

🇺🇸 50.6.250.47

🇩🇪 193.124.20.246

🇲🇽 187.191.48.4

🇩🇰 152.115.79.150

🇺🇸 150.107.38.251

🇱🇹 91.224.92.95

🇳🇱 81.19.216.98