JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.194.96.223

Recent Activity

Abuse Confidence Score

100% Critical

1,675 reports

720 reporters · latest 15 hours ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,675 from 720 distinct reporters

First reported

October 12th 2026

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 430 🇺🇸 United States of America 325 🇫🇷 France 187

Most common categories Web App Attack 1,272 Bad Web Bot 473 Brute-Force 420 Hacking 347 Port Scan 141

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇦 BenTahily	2026-10-30 07:01:10 (15 hours ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇸🇦 BenTahily	2026-10-28 07:00:56 (2 days ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-27 21:52:19 (3 days ago)	[Wed Oct 14 01:06:26.618445 2026] [authz_core:error] [pid 516899:tid 124422602069696] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 1 ... show more [Wed Oct 14 01:06:26.618445 2026] [authz_core:error] [pid 516899:tid 124422602069696] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 14 01:06:26.819212 2026] [authz_core:error] [pid 516899:tid 124422644033216] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Wed Oct 14 01:06:27.014351 2026] [authz_core:error] [pid 516899:tid 124424780924608] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Wed Oct 14 01:06:27.226072 2026] [authz_core:error] [pid 516899:tid 124419968071360] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/api.php [Wed Oct 14 01:06:27.430746 2026] [authz_core:error] [pid 516899:tid 124424772531904] [client 20.194.96.223:35596] AH01630: client de ... show less	Brute-Force SSH
🇪🇸 Gem	2026-10-27 13:07:52 (3 days ago)	Unauthorized web scan.	Web App Attack
🇩🇪 ghostwarriors	2026-10-27 00:21:58 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-26 21:22:31 (4 days ago)	[Wed Oct 14 01:06:26.618445 2026] [authz_core:error] [pid 516899:tid 124422602069696] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 1 ... show more [Wed Oct 14 01:06:26.618445 2026] [authz_core:error] [pid 516899:tid 124422602069696] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Wed Oct 14 01:06:26.819212 2026] [authz_core:error] [pid 516899:tid 124422644033216] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Wed Oct 14 01:06:27.014351 2026] [authz_core:error] [pid 516899:tid 124424780924608] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Wed Oct 14 01:06:27.226072 2026] [authz_core:error] [pid 516899:tid 124419968071360] [client 20.194.96.223:35596] AH01630: client denied by server configuration: proxy:http://localhost:4000/api.php [Wed Oct 14 01:06:27.430746 2026] [authz_core:error] [pid 516899:tid 124424772531904] [client 20.194.96.223:35596] AH01630: client de ... show less	Brute-Force SSH
🇭🇰 H K	2026-10-26 07:21:13 (4 days ago)	...	Brute-Force SSH
🇸🇦 BenTahily	2026-10-26 07:00:48 (4 days ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇦🇺 CalmBrain	2026-10-24 16:01:01 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-10-24 13:45:57 (6 days ago)	fail2ban jail apache-scanner: 20.194.96.223 - - [13/Oct/2026:22:06:44 -0700] "GET /np.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:45 -0700] "GET /samll.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:46 - ... show more fail2ban jail apache-scanner: 20.194.96.223 - - [13/Oct/2026:22:06:44 -0700] "GET /np.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:45 -0700] "GET /samll.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:46 -0700] "GET /config.php? HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:46 -0700] "GET /lock.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:47 -0700] "GET /b.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:47 -0700] "GET /wp-content/themes/index.php HTTP/1.1" 403 2742 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:48 -0700] "GET /adminfuns.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:48 -0700] "GET /alfa.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:48 -0700] "GET /222.php HTTP/1.1" 404 65489 "-" "-" 20.194.96.223 - - [13/Oct/2026:22:06:49 -0700] "GET /3PJcpMFsD8B.php show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:51:46 (6 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇸🇦 BenTahily	2026-10-24 07:01:00 (6 days ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇩🇪 Kreapptivo	2026-10-23 08:49:41 (1 week ago)	[18/Oct/2026:12:44:39 +0200] Web-Request: "GET /wp-content/plugins/hellopress/wp_filemanager.php", User-Agent: "-" [18/Oct/2026:12:44:40 +0200] Web-Request: "GET /wp-content/plugins/hellopress/wp_filemanager.php", User-Agent: "-"	Bad Web Bot Web App Attack
🇩🇪 Klompenzijncool	2026-10-23 06:48:54 (1 week ago)	Web scanning/probing blocked by Fail2Ban.	Port Scan Bad Web Bot
🇨🇱 Fernando Soto	2026-10-23 03:05:06 (1 week ago)	WAF propio vps1 (CL): actividad score 10 en 1h. actividad hostil.	Bad Web Bot

Showing 1 to 15 of 1675 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.136.15.80

🇫🇮 147.185.133.163

🇷🇴 80.94.92.126

🇺🇸 23.129.212.6

🇬🇧 193.163.125.165

🇺🇸 147.90.234.34

🇳🇱 64.205.72.45

🇷🇺 46.191.141.152

🇺🇸 45.147.235.154

🇸🇬 43.134.28.108

🇰🇿 5.251.81.146

🇹🇼 198.235.24.76

🇨🇳 171.104.143.176

🇨🇳 121.227.31.13

🇰🇷 116.125.120.27

🇺🇸 104.23.245.148

🇳🇱 86.38.187.214

🇺🇸 71.255.70.23

🇨🇦 51.222.168.236

🇨🇦 45.198.224.177