JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.214.105.208

Recent Activity

Abuse Confidence Score

100% Critical

1,291 reports

420 reporters · latest 5 days ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,291 from 420 distinct reporters

First reported

September 22nd 2026

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 312 🇺🇸 United States of America 246 🇫🇷 France 125

Most common categories Web App Attack 1,023 Bad Web Bot 285 Brute-Force 274 Hacking 255 Port Scan 105

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 13:47:08 (5 days ago)	fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - ... show more fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /as.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /aa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /abc.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:29 -0700] "GET /av.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Wi show less	Web App Attack Port Scan
Anonymous	2026-10-21 13:20:41 (1 week ago)	fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - ... show more fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /as.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /aa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /abc.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:29 -0700] "GET /av.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Wi show less	Web App Attack Port Scan
Anonymous	2026-10-10 02:55:13 (2 weeks ago)	fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - ... show more fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /as.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /aa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /abc.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:29 -0700] "GET /av.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Wi show less	Web App Attack Port Scan
Anonymous	2026-10-04 19:47:51 (3 weeks ago)	$f2bV_matches	Brute-Force
🇬🇧 innovacommunications	2026-10-03 00:00:15 (3 weeks ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇪🇸 Gem	2026-10-02 22:08:18 (3 weeks ago)	Unauthorized web scan.	Web App Attack
🇩🇪 rh24	2026-10-02 03:00:05 (3 weeks ago)	Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests	DDoS Attack Web App Attack
Anonymous	2026-10-01 13:12:51 (4 weeks ago)	fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - ... show more fail2ban jail apache-scanner: 20.214.105.208 - - [23/Sep/2026:13:09:27 -0700] "GET /alfa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /as.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /aa.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:28 -0700] "GET /abc.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.105.208 - - [23/Sep/2026:13:09:29 -0700] "GET /av.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Wi show less	Web App Attack Port Scan
🇫🇷 cydit.eu	2026-10-01 06:54:06 (4 weeks ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇫🇷 Nrbrtkls	2026-10-01 04:51:01 (4 weeks ago)	SSH brute force attack detected by fail2ban on Discourse server (dutchdistillers.nl)	Brute-Force SSH
🇩🇪 MBombeck	2026-10-01 00:30:46 (4 weeks ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇬🇧 sc user	2026-09-30 23:48:38 (4 weeks ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.	Bad Web Bot Web App Attack Port Scan
🇫🇷 SpaceHost-Server	2026-09-30 22:21:37 (4 weeks ago)		Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-09-30 22:00:53 (4 weeks ago)	wp-login attack [30/Sep/2026:03:40:22	Brute-Force Web App Attack
🇪🇸 Gem	2026-09-30 21:04:30 (4 weeks ago)	Unauthorized web scan.	Web App Attack

Showing 1 to 15 of 1291 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇺 216.226.77.10

🇫🇮 147.185.133.87

🇲🇺 102.119.72.32

🇺🇸 51.81.164.147

🇳🇱 213.177.179.35

🇨🇳 180.101.184.47

🇨🇳 111.21.43.23

🇺🇸 104.21.17.123

🇨🇳 101.200.243.197

🇿🇼 98.97.133.13

🇩🇪 68.183.213.71

🇺🇸 66.132.195.102

🇺🇸 50.6.200.164

🇧🇪 2a00:1450:400c:c02::bc

🇰🇷 211.104.198.147

🇺🇸 172.191.94.172

🇺🇸 170.205.155.107

🇿🇦 165.16.161.43

🇿🇦 154.68.187.113

🇳🇱 138.226.239.34