JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.200.213.229

20.200.213.229 was found in our database!

This IP was reported 270 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.200.213.229

Whois 20.200.213.229

IP Abuse Reports for 20.200.213.229:

This IP address has been reported a total of 270 times from 236 distinct sources. 20.200.213.229 was first reported on July 8th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Lazarus	2026-07-08 22:20:15 (1 minute ago)	HTTP probe.	Web App Attack
Anonymous	2026-07-08 22:12:53 (8 minutes ago)	20.200.213.229 - - [09/Jul/2026:00:12:47 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.200.213.229 - - [09/Jul/2026:00:12:47 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:47 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:48 +0200] "GET /bpsoe.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:48 +0200] "GET /bxodh.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:48 +0200] "GET /ojgup.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:48 +0200] "GET /oocnp.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:49 +0200] "GET /sletj.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:49 +0200] "GET /sump1.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:49 +0200] "GET /yjdit.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12:49 +0200] "GET /wp-blink.php HTTP/1.1" 404 196 "-" "-" 20.200.213.229 - - [09/Jul/2026:00:12: ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-08 22:00:42 (20 minutes ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking
🇫🇷 Campus France	2026-07-08 21:50:52 (30 minutes ago)	[Wed Jul 08 20:56:22.284544 2026] [php:error] [pid 2654106] [client 20.200.213.229:30456] script '/v ... show more [Wed Jul 08 20:56:22.284544 2026] [php:error] [pid 2654106] [client 20.200.213.229:30456] script '/var/www/html/bxodh.php' not found or unable to stat [Wed Jul 08 20:56:22.594993 2026] [php:error] [pid 2654106] [client 20.200.213.229:30456] script '/var/www/html/ojgup.php' not found or unable to stat [Wed Jul 08 20:56:22.594993 2026] [php:error] [pid 2654106] [client 20.200.213.229:30456] script '/var/www/html/ojgup.php' not found or unable to stat [Wed Jul 08 23:50:51.567780 2026] [php:error] [pid 2734562] [client 20.200.213.229:51007] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇭🇳 unph	2026-07-08 21:40:10 (41 minutes ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇮🇪 AutosOnShow	2026-07-08 21:39:05 (42 minutes ago)	blocked for webapp attack \| path requested: /faze.php \| seen at 2026-07-08 21:38:54.105 \|	Web App Attack
🇦🇺 Block Rockin' Beats	2026-07-08 21:37:03 (44 minutes ago)	Scanning for exploitable scripts	Hacking Web App Attack
Anonymous	2026-07-08 21:36:45 (44 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-07-08 21:29:02 (52 minutes ago)	WEB attack	Brute-Force
Anonymous	2026-07-08 21:22:44 (58 minutes ago)	20.200.213.229 - - [08/Jul/2026:23:22:43 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.200.213.229 - - [08/Jul/2026:23:22:43 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 384 "-" "-" 20.200.213.229 - - [08/Jul/2026:23:22:43 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 384 "-" "-" ... show less	Web App Attack
🇫🇷 largo-it.net	2026-07-08 21:14:52 (1 hour ago)	Jul 8 23:14:48 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:48.122] www_f ... show more Jul 8 23:14:48 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:48.122] www_frontend~ finance_cluster/finance1_test1_https 0/0/10/48/58 404 3151 - - ---- 57/7/0/0/0 0/0 "GET /ws69.php HTTP/1.1" Jul 8 23:14:48 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:48.728] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/60/71 404 3151 - - ---- 57/7/0/0/0 0/0 "GET /amp.php HTTP/1.1" Jul 8 23:14:49 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:49.445] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/53/64 404 3151 - - ---- 57/7/0/0/0 0/0 "GET /gettest.php HTTP/1.1" Jul 8 23:14:50 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:50.009] www_frontend~ finance_cluster/finance1_test1_https 0/0/10/49/59 404 3151 - - ---- 56/7/0/0/0 0/0 "GET /Jcrop.php HTTP/1.1" Jul 8 23:14:50 vps-9f3cdc33 haproxy[1323471]: 20.200.213.229:30422 [08/Jul/2026:23:14:50.639] www_frontend~ finance_cluster/fina ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 bluematrix	2026-07-08 21:14:43 (1 hour ago)	crowdsecurity/http-probing - Ip 20.200.213.229 performed 'crowdsecurity/http-probing' (11 events ove ... show more crowdsecurity/http-probing - Ip 20.200.213.229 performed 'crowdsecurity/http-probing' (11 events over 3.482070424s) at 2026-07-08 21:14:47.241993354 +0000 UTC show less	Port Scan Hacking Brute-Force Web App Attack
🇵🇱 alianet	2026-07-08 21:13:31 (1 hour ago)	[Wed Jul 08 11:46:14.162919 2026] [proxy_fcgi:error] [pid 1784026:tid 1784105] [client 20.200.213.22 ... show more [Wed Jul 08 11:46:14.162919 2026] [proxy_fcgi:error] [pid 1784026:tid 1784105] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:14.774664 2026] [proxy_fcgi:error] [pid 1784026:tid 1784099] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:15.310521 2026] [proxy_fcgi:error] [pid 1784026:tid 1784117] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:16.009352 2026] [proxy_fcgi:error] [pid 1784026:tid 1784122] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:16.743590 2026] [proxy_fcgi:error] [pid 1784026:tid 1784111] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:17.340384 2026] [proxy_fcgi:error] [pid 1784026:tid 1784103] [client 20.200.213.229:3549] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:46:17.941148 2026] [proxy_fcgi:error] [pid 1784026:tid 1784123] [client 2 ... show less	Port Scan Web App Attack
🇩🇪 Holger	2026-07-08 21:13:30 (1 hour ago)	WordPress WebAttack	Brute-Force Web App Attack
🇫🇷 sthoyer.de	2026-07-08 21:07:54 (1 hour ago)	20.200.213.229 - - [08/Jul/2026:23:07:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.200.213.229 - - [08/Jul/2026:23:07:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 794 "-" "-" 20.200.213.229 - - [08/Jul/2026:23:07:53 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 794 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.253

🇭🇰 154.83.15.221

🇷🇴 92.118.39.50

🇫🇷 45.81.243.62

🇧🇷 201.71.192.108

🇺🇸 173.211.68.162

🇲🇽 148.216.28.11

🇨🇳 121.36.45.116

🇸🇬 118.26.111.107

🇧🇬 79.124.58.218

🇩🇪 78.46.173.96

🇨🇳 222.71.205.34

🇮🇩 210.210.155.71

🇵🇱 176.53.159.54

🇸🇪 170.168.242.152

🇸🇦 154.205.134.214

🇳🇱 81.171.72.135

🇹🇭 58.10.55.65

🇳🇱 45.148.10.157

🇩🇪 213.209.159.225