JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.214.106.237

20.214.106.237 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.214.106.237

Whois 20.214.106.237

IP Abuse Reports for 20.214.106.237:

This IP address has been reported a total of 184 times from 152 distinct sources. 20.214.106.237 was first reported on July 21st 2026, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-22 09:56:15 (24 minutes ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=20.214.106.237 richieste=96 rischio=ALT ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=20.214.106.237 richieste=96 rischio=ALTO score=10 motivi=richieste_elevate,diverse_uri_uniche,molti_404,path_sospetti,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
Anonymous	2026-07-22 09:52:46 (27 minutes ago)	20.214.106.237 - - [22/Jul/2026:17:52:44 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.106.237 - - [22/Jul/2026:17:52:44 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /x.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /x.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /mgrr.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:45 +0800] "GET /mgrr.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:46 +0800] "GET /stdin.php HTTP/1.1" 404 299862 "-" "-" 20.214.106.237 - - [22/Jul/2026:17:52:46 +0800] "GET /stdin.php HTTP/1.1" 404 299862 "-" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 chronos	2026-07-22 09:43:35 (36 minutes ago)	[AUTORAVALT][[22/07/2026 - 06:43:34 -03:00 UTC] Attack from [Microsoft Corporation] [20.214.106.237] ... show more [AUTORAVALT][[22/07/2026 - 06:43:34 -03:00 UTC] Attack from [Microsoft Corporation] [20.214.106.237] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software] ... show less	Hacking Web App Attack
Anonymous	2026-07-22 09:34:43 (45 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-07-22 09:21:29 (58 minutes ago)	Excessive HTTP request rate	Web App Attack
🇬🇧 Andrew	2026-07-22 08:48:03 (1 hour ago)	20.214.106.237 - - [22/Jul/2026:09:47:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.106.237 - - [22/Jul/2026:09:47:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 20314 "-" "-" 20.214.106.237 - - [22/Jul/2026:09:48:00 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 18379 "-" "-" 20.214.106.237 - - [22/Jul/2026:09:48:01 +0100] "GET /x.php HTTP/1.1" 404 20271 "-" "-" 20.214.106.237 - - [22/Jul/2026:09:48:01 +0100] "GET /mgrr.php HTTP/1.1" 404 18358 "-" "-" 20.214.106.237 - - [22/Jul/2026:09:48:02 +0100] "GET /stdin.php HTTP/1.1" 404 18359 "-" "-" 20.214.106.237 - - [22/Jul/2026:09:48:02 +0100] "GET /BDKR28.php HTTP/1.1" 404 18360 "-" "-" ... show less	Hacking Web App Attack
🇨🇿 ptlab	2026-07-22 08:45:09 (1 hour ago)	Detected wp_admin attack from WP-host.	Hacking Web App Attack
🇺🇸 interbiznw.com	2026-07-22 08:02:22 (2 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 vmd56152.contaboserver.net	2026-07-22 07:42:22 (2 hours ago)	[Wed Jul 22 09:42:16.350899 2026] [proxy_fcgi:error] [pid 1132537:tid 140211010922240] [client 20.21 ... show more [Wed Jul 22 09:42:16.350899 2026] [proxy_fcgi:error] [pid 1132537:tid 140211010922240] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:16.817494 2026] [proxy_fcgi:error] [pid 1132537:tid 140210994136832] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:17.523370 2026] [proxy_fcgi:error] [pid 1132537:tid 140210398549760] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:18.016812 2026] [proxy_fcgi:error] [pid 1132537:tid 140210968958720] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:18.483677 2026] [proxy_fcgi:error] [pid 1132537:tid 140210197223168] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:18.967056 2026] [proxy_fcgi:error] [pid 1132537:tid 140211385218816] [client 20.214.106.237:64492] AH01071: Got error 'Primary script unknown' [Wed Jul 22 09:42:19.612578 2026] ... show less	Brute-Force
🇩🇪 rh24	2026-07-22 07:18:24 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 20.214.106.237 (KR/South Korea/-)	SQL Injection
🇩🇪 hchristo	2026-07-22 06:43:04 (3 hours ago)	[Wed Jul 22 08:43:02.516939 2026] [proxy_fcgi:error] [pid 63171:tid 63253] [client 20.214.106.237:36 ... show more [Wed Jul 22 08:43:02.516939 2026] [proxy_fcgi:error] [pid 63171:tid 63253] [client 20.214.106.237:36830] AH01071: Got error 'Primary script unknown' [Wed Jul 22 08:43:02.986702 2026] [proxy_fcgi:error] [pid 63171:tid 63240] [client 20.214.106.237:36830] AH01071: Got error 'Primary script unknown' [Wed Jul 22 08:43:03.545224 2026] [proxy_fcgi:error] [pid 63171:tid 63230] [client 20.214.106.237:36830] AH01071: Got error 'Primary script unknown' [Wed Jul 22 08:43:04.175891 2026] [proxy_fcgi:error] [pid 63171:tid 63259] [client 20.214.106.237:36830] AH01071: Got error 'Primary script unknown' [Wed Jul 22 08:43:04.668316 2026] [proxy_fcgi:error] [pid 63171:tid 63269] [client 20.214.106.237:36830] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 oralunal	2026-07-22 06:33:43 (3 hours ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇵🇱 nakordoni.eu	2026-07-22 06:30:03 (3 hours ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Microsoft Corporation (KR), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-07-22 06:27:21 (3 hours ago)	GET /2larp.php	Web App Attack
🇩🇪 Hans Wurst	2026-07-22 06:18:52 (4 hours ago)	Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.	Web App Attack

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 23.234.80.46

🇺🇸 216.218.206.92

🇺🇸 198.57.219.18

🇬🇧 163.5.94.58

🇺🇸 135.119.97.34

🇧🇩 103.111.225.153

🇩🇪 69.5.169.14

🇷🇺 46.39.51.192

🇺🇸 20.169.106.193

🇺🇸 20.168.6.120

🇺🇸 20.102.98.53

🇧🇷 190.8.175.6

🇺🇸 172.185.24.228

🇺🇸 162.144.121.110

🇺🇸 158.94.211.32

🇹🇷 94.154.43.243

🇩🇪 89.163.146.197

🇺🇸 66.94.113.255

🇺🇸 16.58.56.214

🇸🇬 8.219.159.94