JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.121.237

20.205.121.237 was found in our database!

This IP was reported 330 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.121.237

Whois 20.205.121.237

IP Abuse Reports for 20.205.121.237:

This IP address has been reported a total of 330 times from 185 distinct sources. 20.205.121.237 was first reported on August 15th 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 CryptoYakari	2026-08-18 13:18:30 (28 minutes ago)	20.205.121.237 - - [18/Aug/2026:16:18:25 +0300] "GET /nine2code.php HTTP/1.0" 404 531 "-" "Mozilla/5 ... show more 20.205.121.237 - - [18/Aug/2026:16:18:25 +0300] "GET /nine2code.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:16:18:25 +0300] "GET /num.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:16:18:25 +0300] "GET /odf7udtspqtpxzyxmw2rccdefault.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:16:18:25 +0300] "GET /option.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:16:18:26 +0300] "GET /p.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12 ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
Anonymous	2026-08-18 12:43:37 (1 hour ago)	FPROCO WEBEXPLOIT 20.205.121.237 (20.205.121.237)	Web App Attack
Anonymous	2026-08-18 12:34:28 (1 hour ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-08-18 11:56:34 (1 hour ago)	20.205.121.237 - - [18/Aug/2026:14:56:30 +0300] "GET /nine2code.php HTTP/1.0" 404 531 "-" "Mozilla/5 ... show more 20.205.121.237 - - [18/Aug/2026:14:56:30 +0300] "GET /nine2code.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:14:56:30 +0300] "GET /num.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:14:56:30 +0300] "GET /odf7udtspqtpxzyxmw2rccdefault.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:14:56:31 +0300] "GET /option.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:14:56:31 +0300] "GET /p.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12 ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇬🇧 blik2108	2026-08-18 11:55:47 (1 hour ago)	20.205.121.237 - - [18/Aug/2026:11:55:44 +0000] "GET /nine2code.php HTTP/1.1" 404 3431 "-" "Mozilla/ ... show more 20.205.121.237 - - [18/Aug/2026:11:55:44 +0000] "GET /nine2code.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.205.121.237 - - [18/Aug/2026:11:55:44 +0000] "GET /num.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.205.121.237 - - [18/Aug/2026:11:55:44 +0000] "GET /odf7udtspqtpxzyxmw2rccdefault.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.205.121.237 - - [18/Aug/2026:11:55:45 +0000] "GET /option.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.205.121.237 - - [18/Aug/2026:11:55:45 +0000] "GET /p.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Web App Attack
🇺🇸 deskpass.com	2026-08-18 11:42:21 (2 hours ago)	GET /tiny.php	Web App Attack
🇺🇸 chrisj	2026-08-18 11:40:24 (2 hours ago)	[Tue Aug 18 11:40:24.283813 2026] [proxy_fcgi:error] [pid 1162055:tid 1162131] [client 20.205.121.23 ... show more [Tue Aug 18 11:40:24.283813 2026] [proxy_fcgi:error] [pid 1162055:tid 1162131] [client 20.205.121.237:10017] AH01071: Got error 'Primary script unknown' [Tue Aug 18 11:40:24.478293 2026] [proxy_fcgi:error] [pid 1162055:tid 1162129] [client 20.205.121.237:10017] AH01071: Got error 'Primary script unknown' [Tue Aug 18 11:40:24.672082 2026] [proxy_fcgi:error] [pid 1162055:tid 1162126] [client 20.205.121.237:10017] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 rzk	2026-08-18 11:35:04 (2 hours ago)	CrowdSec scenario: crowdsecurity/http-backdoors-attempts. Banned by Koru Cloud platform after multi- ... show more CrowdSec scenario: crowdsecurity/http-backdoors-attempts. Banned by Koru Cloud platform after multi-event detection. ASN: MICROSOFT-CORP-MSN-AS-BLOCK. Country: HK. Timestamp: 2026-08-18T11:35:04+00:00. show less	Web App Attack
🇳🇱 e.fierstra	2026-08-18 11:25:31 (2 hours ago)	Plesk Apache jail block	Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-08-18 10:53:02 (2 hours ago)	Banned by Fail2Ban	Web App Attack
🇩🇪 macrob	2026-08-18 10:00:08 (3 hours ago)	2026/08/18 09:59:56 [error] 3653909#3653909: 492777118 access forbidden by rule, client: 20.205.121 ... show more 2026/08/18 09:59:56 [error] 3653909#3653909: 492777118 access forbidden by rule, client: 20.205.121.237, server: binixo.ph, request: "GET /install.php HTTP/1.1", host: "binixo.ph" 2026/08/18 10:00:03 [error] 3653909#3653909: 492777118 access forbidden by rule, client: 20.205.121.237, server: binixo.ph, request: "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1", host: "binixo.ph" 2026/08/18 10:00:03 [error] 3653909#3653909: 492777118 access forbidden by rule, client: 20.205.121.237, server: binixo.ph, request: "GET /modules/mod_simplefileuploadv1.3/elements/i8hqok6nr.php HTTP/1.1", host: "binixo.ph" ... show less	Web App Attack
🇺🇸 ruusvuu	2026-08-18 09:53:07 (3 hours ago)	Automated abuse report: 68 attack/probe requests from Microsoft Corporation / HK. Targeted paths: /. ... show more Automated abuse report: 68 attack/probe requests from Microsoft Corporation / HK. Targeted paths: /.dj/index.php, /.vscode/class-wp-http-client.php, /.well-known/about.php, /.well-known/bdkr28_61cohkhh.php, /.well-known/class-wp-http-client.php. Sample log lines: [helpdesk] 8/17/2026 18:37:40 20.205.121.237 GET /claude.php 404 149 1.0 ms [helpdesk] 8/17/2026 18:37:40 20.205.121.237 GET /config.php 404 149 1.2 ms [helpdesk] 8/18/2026 02:53:06 20.205.121.237 GET /inc.php 404 146 1.6 ms Detected by an automated web-server log monitor. show less	Web App Attack
🇷🇺 ago.su	2026-08-18 09:16:24 (4 hours ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
🇳🇱 CryptoYakari	2026-08-18 09:10:22 (4 hours ago)	[Tue Aug 18 12:10:16.706864 2026] [proxy_fcgi:error] [pid 783398:tid 783444] [client 20.205.121.237: ... show more [Tue Aug 18 12:10:16.706864 2026] [proxy_fcgi:error] [pid 783398:tid 783444] [client 20.205.121.237:0] AH01071: Got error 'Primary script unknown' [Tue Aug 18 12:10:16.979949 2026] [proxy_fcgi:error] [pid 783395:tid 783402] [client 20.205.121.237:0] AH01071: Got error 'Primary script unknown' [Tue Aug 18 12:10:17.673519 2026] [proxy_fcgi:error] [pid 783395:tid 783408] [client 20.205.121.237:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇧🇬 HighWay	2026-08-18 08:55:08 (4 hours ago)	20.205.121.237 - - [18/Aug/2026:08:55:00 +0000] "GET /img/class-wp-http-client.php HTTP/1.1" 404 475 ... show more 20.205.121.237 - - [18/Aug/2026:08:55:00 +0000] "GET /img/class-wp-http-client.php HTTP/1.1" 404 4756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:08:55:00 +0000] "GET /in.php HTTP/1.1" 404 770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:08:55:01 +0000] "GET /inc.php HTTP/1.1" 404 770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:08:55:01 +0000] "GET /index/function.php HTTP/1.1" 404 770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.237 - - [18/Aug/2026:08:55:02 +0000] "GET /index4.php HTTP/1.1" 404 770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 330 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 64.226.110.44

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇬🇧 185.247.137.34

🇻🇳 160.250.129.48

🇮🇳 103.67.152.201

🇫🇮 5.181.168.100

🇰🇿 212.19.134.141

🇺🇸 193.203.9.216

🇺🇸 192.169.226.90

🇺🇸 185.61.218.88

🇺🇸 183.81.168.186

🇺🇸 172.182.217.32

🇺🇸 168.62.48.100

🇦🇺 157.22.103.43

🇨🇳 120.234.195.41

🇺🇸 93.177.119.87

🇲🇽 187.190.151.59

🇩🇪 185.201.138.53

🇫🇮 185.65.133.39