JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.200.210.155

20.200.210.155 was found in our database!

This IP was reported 640 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.200.210.155

Whois 20.200.210.155

IP Abuse Reports for 20.200.210.155:

This IP address has been reported a total of 640 times from 231 distinct sources. 20.200.210.155 was first reported on January 27th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 soundboxxx.com	2026-03-08 14:33:00 (3 months ago)	ping 20.200.210.155 -t -l 10000	DDoS Attack Open Proxy Port Scan Brute-Force Web App Attack SSH FTP Brute-Force Ping of Death Hacking SQL Injection
🇪🇸 Gem	2026-02-11 13:09:32 (4 months ago)	Unauthorized web scan.	Web App Attack
🇫🇷 cydit.eu	2026-02-08 01:06:28 (4 months ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇮🇩 Paulus Leunufna	2026-02-07 06:24:25 (4 months ago)	Fail2Ban auto-ban: Security Violation detected. Jail: ghost-protocol, Attempts: 1. Server: LumaChat ... show more Fail2Ban auto-ban: Security Violation detected. Jail: ghost-protocol, Attempts: 1. Server: LumaChat (lumachat.xyz) show less	Brute-Force
🇫🇷 cydit.eu	2026-02-06 02:00:26 (4 months ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇹🇷 rtbh.com.tr	2026-02-05 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 Charlesiv	2026-02-05 03:04:52 (4 months ago)	Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CO ... show more Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/rest-api/ Timestamp: 2026-02-04T21:01:06Z Ray ID: 9c8d19f4ce7dea11 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Murazaki	2026-02-04 23:16:45 (4 months ago)	imap.benadel.fr 20.200.210.155 - - [04/Feb/2026:04:05:37 +0100] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" ... show more imap.benadel.fr 20.200.210.155 - - [04/Feb/2026:04:05:37 +0100] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.25:80" cloud.benadel.fr 20.200.210.155 - - [04/Feb/2026:04:40:02 +0100] "GET /cgi-bin/ HTTP/1.1" 404 1848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.71:80" dyn.mehdibenadel.com 20.200.210.155 - - [04/Feb/2026:05:48:37 +0100] "GET /cgi-bin/ HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" git.benadel.fr 20.200.210.155 - - [04/Feb/2026:12:16:06 +0100] "GET /cgi-bin/ HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" charif.fr 20.200.210.155 - - [04/Feb/2026:13:46:13 +0100] "GET /cgi-bin/ HTTP/1.1" 503 592 " ... show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-02-04 21:06:28 (4 months ago)	iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:29 +1100] "GET /aa.php HTTP/1.1" 404 61047 "-" ... show more iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:29 +1100] "GET /aa.php HTTP/1.1" 404 61047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:31 +1100] "GET /abcd.php HTTP/1.1" 404 58165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:33 +1100] "GET /admin.php HTTP/1.1" 404 58166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:35 +1100] "GET /buy.php HTTP/1.1" 404 58159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" iaki.com.au:443 20.200.210.155 - - [05/Feb/2026:08:05:37 +1100] "GET /cgi-bin/ HTTP/1.1" 404 58159 "-" "Mozilla/5.0 (Windows NT 10.0; ... show less	Web App Attack
🇺🇸 Charlesiv	2026-02-04 21:01:35 (4 months ago)	Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CO ... show more Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/js/crop/ Timestamp: 2026-02-04T21:01:05Z Ray ID: 9c8d19f039e1eaab UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 factor1	2026-02-04 20:13:34 (4 months ago)	Fail2ban at apollo Reports Abuse.	Bad Web Bot
Anonymous	2026-02-04 20:05:26 (4 months ago)		Web App Attack
🇦🇷 RocketEmi	2026-02-04 20:03:09 (4 months ago)	Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or ... show more Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or persistent unauthorized probing. show less	Hacking
Anonymous	2026-02-04 20:02:06 (4 months ago)	[Wed Feb 04 14:02:02.510773 2026] [proxy_fcgi:error] [pid 735980:tid 736123] [client 20.200.210.155: ... show more [Wed Feb 04 14:02:02.510773 2026] [proxy_fcgi:error] [pid 735980:tid 736123] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' [Wed Feb 04 14:02:03.987637 2026] [proxy_fcgi:error] [pid 735980:tid 736129] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' [Wed Feb 04 14:02:04.181656 2026] [proxy_fcgi:error] [pid 735980:tid 736126] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' [Wed Feb 04 14:02:05.856938 2026] [proxy_fcgi:error] [pid 735980:tid 736124] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' [Wed Feb 04 14:02:06.221844 2026] [proxy_fcgi:error] [pid 735980:tid 736120] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' [Wed Feb 04 14:02:06.420345 2026] [proxy_fcgi:error] [pid 735980:tid 736135] [client 20.200.210.155:20023] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 Mangelot Hosting	2026-02-04 19:51:42 (4 months ago)	(upload_shell) srv201 Shell upload 20.200.210.155 (KR/South Korea/-): 1 in the last 3600 secs; Ports ... show more (upload_shell) srv201 Shell upload 20.200.210.155 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 640 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.50.194.182

🇺🇸 162.216.150.188

🇨🇳 111.198.53.188

🇺🇸 93.177.94.247

🇫🇷 91.196.152.217

🇵🇰 103.232.143.26

🇫🇷 91.196.152.191

🇫🇷 91.196.152.177

🇳🇱 91.92.40.46

🇷🇺 91.79.168.21

🇦🇪 83.110.139.168

🇺🇸 47.189.182.17

🇩🇪 43.228.157.10

🇧🇪 34.62.156.69

🇬🇧 165.227.226.15

🇫🇷 158.220.126.52

🇹🇭 124.156.245.127

🇮🇩 182.253.133.172

🇺🇸 136.109.92.123

🇱🇾 102.203.197.6