JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.187.114.37

20.187.114.37 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.187.114.37

Whois 20.187.114.37

IP Abuse Reports for 20.187.114.37:

This IP address has been reported a total of 40 times from 38 distinct sources. 20.187.114.37 was first reported on July 30th 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 lumbermatt_de	2026-07-31 06:52:23 (6 minutes ago)	Vulnerability exploit attack detected	Web App Attack
🇫🇮 tjs	2026-07-31 06:40:00 (19 minutes ago)	web attack, shell attempt	Hacking Web App Attack
🇫🇮 tcivie	2026-07-31 06:15:51 (43 minutes ago)	2026-07-31T06:15:13.594695+00:00 server sshd-session[20685]: pam_unix(sshd:auth): authentication fai ... show more 2026-07-31T06:15:13.594695+00:00 server sshd-session[20685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.187.114.37 2026-07-31T06:15:15.801927+00:00 server sshd-session[20685]: Failed password for invalid user admin from 20.187.114.37 port 45142 ssh2 2026-07-31T06:15:49.782492+00:00 server sshd-session[20726]: Invalid user orangepi from 20.187.114.37 port 47914 show less	Brute-Force SSH
Anonymous	2026-07-31 06:10:18 (48 minutes ago)	Apache HTTP Server Directory Traversal.	Web App Attack
🇩🇪 giata	2026-07-31 05:53:42 (1 hour ago)	2026-07-31T05:53:08.804555 upload sshd-session[1221011]: pam_unix(sshd:auth): authentication failure ... show more 2026-07-31T05:53:08.804555 upload sshd-session[1221011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.187.114.37 2026-07-31T05:53:09.978877 upload sshd-session[1221011]: Failed password for invalid user admin from 20.187.114.37 port 58802 ssh2 2026-07-31T05:53:41.539309 upload sshd-session[1221013]: Invalid user orangepi from 20.187.114.37 port 40626 ... show less	Brute-Force SSH
🇺🇸 jennij	2026-07-31 05:31:13 (1 hour ago)	Fail2Ban sshd ban on nyc-us20.cloudexa-hosting.com ...	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-31 05:30:05 (1 hour ago)	Jul 30 23:29:30 koppa sshd[66364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 30 23:29:30 koppa sshd[66364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.187.114.37 user=admin Jul 30 23:29:32 koppa sshd[66364]: Failed password for invalid user admin from 20.187.114.37 port 42674 ssh2 Jul 30 23:30:04 koppa sshd[66403]: Invalid user orangepi from 20.187.114.37 port 57554 ... show less	Brute-Force SSH
🇩🇪 MusicLibrary	2026-07-31 05:25:26 (1 hour ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇺🇸 www.narsol.org	2026-07-31 05:21:36 (1 hour ago)	Jul 31 01:20:29 do1 sshd[2846897]: Invalid user admin from 20.187.114.37 port 60918 Jul 31 01:20:29 ... show more Jul 31 01:20:29 do1 sshd[2846897]: Invalid user admin from 20.187.114.37 port 60918 Jul 31 01:20:29 do1 sshd[2846897]: Connection closed by invalid user admin 20.187.114.37 port 60918 [preauth] Jul 31 01:21:01 do1 sshd[2847063]: Invalid user orangepi from 20.187.114.37 port 40100 Jul 31 01:21:01 do1 sshd[2847063]: Connection closed by invalid user orangepi 20.187.114.37 port 40100 [preauth] Jul 31 01:21:35 do1 sshd[2847245]: Connection closed by authenticating user root 20.187.114.37 port 47216 [preauth] ... show less	Brute-Force SSH
🇸🇬 sh97	2026-07-31 05:06:53 (1 hour ago)	SG03-ONI: SSH Brute Force from 20.187.114.37 at 2026-07-31 09:06:53 +04	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-31 05:03:31 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 20.187.114.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 20.187.114.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 01:03:26.968057 2026] [security2:error] [pid 22005:tid 22005] [client 20.187.114.37:52766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.75:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.75"] [uri "/hello.world"] [unique_id "amwsnkU0c1c3LY9ShN9PHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Loren Cress	2026-07-31 04:40:12 (2 hours ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 johuang92	2026-07-31 04:39:01 (2 hours ago)	Cowrie SSH honeypot: session 36a72c683399 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 MPL	2026-07-31 04:38:11 (2 hours ago)	tcp/23 (4 or more attempts)	Port Scan
🇩🇪 Ilop	2026-07-31 04:30:06 (2 hours ago)	[hp-100] 4 unsolicited packets to honeypot ports 2222 (OCI DShield sensor)	Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.140.214.29

🇺🇸 183.81.168.186

🇺🇸 172.202.95.21

🇺🇸 100.58.120.126

🇳🇱 91.92.47.96

🇳🇱 88.218.121.220

🇰🇷 218.52.254.90

🇨🇭 209.99.190.200

🇺🇸 195.184.76.5

🇷🇴 193.46.255.86

🇺🇸 162.216.149.162

🇫🇮 147.185.133.240

🇨🇳 112.86.146.178

🇪🇸 104.250.212.128

🇩🇪 69.5.169.96

🇩🇪 69.5.169.45

🇩🇪 69.5.169.8

🇧🇾 37.215.14.144

🇺🇸 29.255.168.66

🇷🇴 2.57.121.25