JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.214.145.235

Recent Activity

Abuse confidence score ?

100% Critical

243 reports

217 reporters · latest 45 minutes ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.214.145.235

Export CSV

This IP address has been reported a total of 243 times from 217 distinct sources. 20.214.145.235 was first reported on October 9th 2026, and the most recent report was 45 minutes ago. In the last 60 days, the top reporter locations were: Germany with 71 reports; United States of America with 36 reports; France with 30 reports. The most common categories in these recent reports were: Web App Attack 190 times; Bad Web Bot 64 times; Brute-Force 58 times; Hacking 45 times; Port Scan 16 times; Other 22 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jotoma.de	2026-10-10 10:17:36 (45 minutes ago)	[Sat Oct 10 12:17:34.724490 2026] [proxy_fcgi:error] [pid 3781846:tid 3781943] [client 20.214.145.23 ... show more [Sat Oct 10 12:17:34.724490 2026] [proxy_fcgi:error] [pid 3781846:tid 3781943] [client 20.214.145.235:32198] AH01071: Got error 'Primary script unknown' [Sat Oct 10 12:17:35.234322 2026] [proxy_fcgi:error] [pid 3781846:tid 3781930] [client 20.214.145.235:32198] AH01071: Got error 'Primary script unknown' [Sat Oct 10 12:17:35.711985 2026] [proxy_fcgi:error] [pid 3781846:tid 3781946] [client 20.214.145.235:32198] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇪🇸 Adolfo Montaño	2026-10-10 10:01:43 (1 hour ago)	CrowdSec blocked IP for crowdsecurity/http-probing on localhost	Web App Attack
🇫🇷 Zundapper	2026-10-10 09:24:33 (1 hour ago)	2026/10/10 11:24:31 [error] 195824#195824: 674746 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/10/10 11:24:31 [error] 195824#195824: 674746 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.214.145.235, server: mail.idealmuseums.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/run/php/php-fpm-roundcube.sock:", host: "mail.idealmuseums.com" 2026/10/10 11:24:31 [error] 195824#195824: 674746 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.214.145.235, server: mail.idealmuseums.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/run/php/php-fpm-roundcube.sock:", host: "mail.idealmuseums.com" 2026/10/10 11:24:31 [error] 195824#195824: 674746 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.214.145.235, server: mail.idealmuseums.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/run/ ... show less	Web App Attack Port Scan
🇫🇮 pixiekat	2026-10-10 09:09:45 (1 hour ago)	Banned by fail2ban (apache-auth, 5 hits)	Brute-Force
Anonymous	2026-10-10 08:51:51 (2 hours ago)	Web scanner: GET /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-10-10 08:37:32 (2 hours ago)	Excessive HTTP request rate	Web App Attack
🇩🇪 hchristo	2026-10-10 08:19:52 (2 hours ago)	[Sat Oct 10 10:19:50.348246 2026] [proxy_fcgi:error] [pid 28117:tid 28213] [client 20.214.145.235:40 ... show more [Sat Oct 10 10:19:50.348246 2026] [proxy_fcgi:error] [pid 28117:tid 28213] [client 20.214.145.235:40946] AH01071: Got error 'Primary script unknown' [Sat Oct 10 10:19:50.858909 2026] [proxy_fcgi:error] [pid 28117:tid 28194] [client 20.214.145.235:40946] AH01071: Got error 'Primary script unknown' [Sat Oct 10 10:19:51.365139 2026] [proxy_fcgi:error] [pid 28117:tid 28205] [client 20.214.145.235:40946] AH01071: Got error 'Primary script unknown' [Sat Oct 10 10:19:51.879185 2026] [proxy_fcgi:error] [pid 28117:tid 28204] [client 20.214.145.235:40946] AH01071: Got error 'Primary script unknown' [Sat Oct 10 10:19:52.402598 2026] [proxy_fcgi:error] [pid 28117:tid 28195] [client 20.214.145.235:40946] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 AetherFox	2026-10-10 08:18:55 (2 hours ago)	AetherFox VoidGuard detected: [Sat Oct 10 10:18:49.141815 2026] [security2:error] [pid 194234:tid 19 ... show more AetherFox VoidGuard detected: [Sat Oct 10 10:18:49.141815 2026] [security2:error] [pid 194234:tid 194273] [client 20.214.145.235:40433] [client 20.214.145.235] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "28"] [id "100051"] [msg "wp-content access blocked by AetherFox VoidGuard"] [hostname "wiki.draconigen.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "asn06dYFg9hrtIq_4kX4rwAAAAo"] [Sat Oct 10 10:18:50.807938 2026] [security2:error] [pid 194234:tid 194278] [client 20.214.145.235:50443] [client 20.214.145.235] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "wiki.draconigen.net"] [uri "/this_is_a_new ... show less	Hacking Bad Web Bot
🇩🇪 rhofas	2026-10-10 08:17:05 (2 hours ago)	Automated PHP shell scanner - 404 flood on hofas.net	Web App Attack Hacking
🇧🇪 boxed-it	2026-10-10 08:16:34 (2 hours ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇩🇪 Séfora Srl	2026-10-10 08:07:13 (2 hours ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack
Anonymous	2026-10-10 08:00:29 (3 hours ago)	$f2bV_matches	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-10-10 07:52:06 (3 hours ago)	shotbysuzanne.com.au:443 20.214.145.235 - - [10/Oct/2026:18:52:05 +1100] "GET /about.php HTTP/1.1" 4 ... show more shotbysuzanne.com.au:443 20.214.145.235 - - [10/Oct/2026:18:52:05 +1100] "GET /about.php HTTP/1.1" 404 55074 "-" "-" ... show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-10-10 07:50:54 (3 hours ago)	(web_webshell) srv201 Webshell probe 20.214.145.235 (KR/South Korea/-): 2 in the last 3600 secs; Por ... show more (web_webshell) srv201 Webshell probe 20.214.145.235 (KR/South Korea/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-10-10 07:47:09 (3 hours ago)	[Sat Oct 10 09:47:08.487214 2026] [authz_core:error] [pid 27208] [client 20.214.145.235:25565] AH016 ... show more [Sat Oct 10 09:47:08.487214 2026] [authz_core:error] [pid 27208] [client 20.214.145.235:25565] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Oct 10 09:47:08.707717 2026] [authz_core:error] [pid 27208] [client 20.214.145.235:25565] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Oct 10 09:47:08.928240 2026] [authz_core:error] [pid 27208] [client 20.214.145.235:25565] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack

Showing 1 to 15 of 243 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.217.116.4

🇫🇷 51.254.136.153

🇹🇼 210.61.216.167

🇹🇼 198.235.24.89

🇹🇼 198.235.24.83

🇺🇸 195.184.76.121

🇸🇬 194.164.107.6

🇮🇳 183.82.111.224

🇻🇳 125.212.235.194

🇫🇷 85.204.70.118

🇳🇱 31.14.32.6

🇺🇸 20.80.78.100

🇺🇸 4.246.204.51

🇮🇹 2.229.200.226

🇺🇸 205.188.172.2

🇹🇼 198.235.24.75

🇹🇼 198.235.24.69

🇧🇷 177.10.203.106

🇺🇸 146.190.41.214

🇺🇸 137.184.64.22