JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.65.105.233

20.65.105.233 was found in our database!

This IP was reported 1,538 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.65.105.233

Whois 20.65.105.233

IP Abuse Reports for 20.65.105.233:

This IP address has been reported a total of 1,538 times from 671 distinct sources. 20.65.105.233 was first reported on August 14th 2026, and the most recent report was 47 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 neckaralb-admin.de	2026-08-20 20:04:27 (47 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 Charlesiv	2026-08-20 20:02:13 (49 minutes ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /gmo.php Timestamp: 2026-08-20T19:45:25Z Ray ID: a2e3e5f6ed08a9d0 UA: Empty string show less	Bad Web Bot
🇩🇪 23p02732	2026-08-20 19:37:43 (1 hour ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 19:05:58 (1 hour ago)	20.65.105.233 - - [20/Aug/2026:21:05:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.65.105.233 - - [20/Aug/2026:21:05:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 35119 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:40 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 30015 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:41 +0200] "GET /doti.php HTTP/1.1" 404 30014 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:43 +0200] "GET /ton.php HTTP/1.1" 404 30016 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:45 +0200] "GET /nfile.php HTTP/1.1" 404 30015 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:47 +0200] "GET /wfile.php HTTP/1.1" 404 30015 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:49 +0200] "GET /acp.php HTTP/1.1" 404 30015 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:51 +0200] "GET /asas.php HTTP/1.1" 404 30014 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:53 +0200] "GET /222.php HTTP/1.1" 404 30015 "-" "-" 20.65.105.233 - - [20/Aug/2026:21:05:55 +0200] "GET /wp-configs.php HTTP/1.1" 404 30016 "-" "-" ... show less	Web Spam Web App Attack
🇦🇺 Klaverstyn	2026-08-20 19:01:21 (1 hour ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 strefapi_com	2026-08-20 18:19:37 (2 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-20 17:57:24 (2 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 chrisj	2026-08-20 17:44:10 (3 hours ago)	[Thu Aug 20 17:44:10.172925 2026] [proxy_fcgi:error] [pid 1229827:tid 1229915] [client 20.65.105.233 ... show more [Thu Aug 20 17:44:10.172925 2026] [proxy_fcgi:error] [pid 1229827:tid 1229915] [client 20.65.105.233:9513] AH01071: Got error 'Primary script unknown' [Thu Aug 20 17:44:10.203095 2026] [proxy_fcgi:error] [pid 1229827:tid 1229888] [client 20.65.105.233:9513] AH01071: Got error 'Primary script unknown' [Thu Aug 20 17:44:10.232167 2026] [proxy_fcgi:error] [pid 1229827:tid 1229908] [client 20.65.105.233:9513] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇬🇷 setupgr	2026-08-20 17:42:54 (3 hours ago)	(mod_security) mod_security (id:1000001) triggered by 20.65.105.233 (US/United States/Virginia/Boydt ... show more (mod_security) mod_security (id:1000001) triggered by 20.65.105.233 (US/United States/Virginia/Boydton/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 20 20:42:49.599484 2026] [security2:error] [pid 3270:tid 3352] [remote 20.65.105.233:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/p.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /p.php"] [severity "CRITICAL"] [tag "security"] [hostname "endoscope.center"] [uri "/p.php"] [unique_id "aoc8mZsl4erg_rzjDO8mhwAEGBU"] show less	Port Scan
🇺🇸 Epimetheus	2026-08-20 17:32:20 (3 hours ago)	Unauthorized access attempts: [GET] /haa.php [GET] /file2.php [GET] /ws45.php [GET] /file.php [GET] ... show more Unauthorized access attempts: [GET] /haa.php [GET] /file2.php [GET] /ws45.php [GET] /file.php [GET] /racs3.php [GET] /wp-is.php [GET] /yellow.php UA: Unknown show less	Web App Attack
🇫🇷 AGEPCom	2026-08-20 17:31:05 (3 hours ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
Anonymous	2026-08-20 17:28:53 (3 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 chrisj	2026-08-20 17:23:58 (3 hours ago)	[Thu Aug 20 17:23:58.325045 2026] [proxy_fcgi:error] [pid 1229827:tid 1229912] [client 20.65.105.233 ... show more [Thu Aug 20 17:23:58.325045 2026] [proxy_fcgi:error] [pid 1229827:tid 1229912] [client 20.65.105.233:9509] AH01071: Got error 'Primary script unknown' [Thu Aug 20 17:23:58.353375 2026] [proxy_fcgi:error] [pid 1229827:tid 1229915] [client 20.65.105.233:9509] AH01071: Got error 'Primary script unknown' [Thu Aug 20 17:23:58.381707 2026] [proxy_fcgi:error] [pid 1229827:tid 1229888] [client 20.65.105.233:9509] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇬🇧 consul.to	2026-08-20 17:11:36 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-08-20 17:02:23 (3 hours ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 1538 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:c300:400::6f

🇰🇷 112.158.102.108

🇮🇹 82.54.131.61

🇺🇸 72.234.16.75

🇺🇸 66.154.115.247

🇳🇱 45.148.10.151

🇳🇱 45.58.147.154

🇳🇵 27.34.73.218

🇸🇬 15.235.206.133

🇮🇹 4.232.89.182

🇪🇨 186.68.83.105

🇨🇳 183.199.98.217

🇺🇸 172.191.149.99

🇨🇳 120.239.118.69

🇨🇳 106.89.59.10

🇺🇸 34.106.236.152

🇩🇪 213.209.159.223

🇳🇱 213.176.24.72

🇺🇸 147.185.132.86

🇺🇸 66.132.224.30