JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.214.147.109

Recent Activity

Abuse confidence score ?

100% Critical

559 reports

441 reporters · latest 11 minutes ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.214.147.109

Export CSV

This IP address has been reported a total of 559 times from 441 distinct sources. 20.214.147.109 was first reported on October 15th 2026, and the most recent report was 11 minutes ago. In the last 60 days, the top reporter locations were: Germany with 139 reports; United States of America with 100 reports; France with 60 reports. The most common categories in these recent reports were: Web App Attack 450 times; Bad Web Bot 156 times; Brute-Force 123 times; Hacking 112 times; Port Scan 46 times; Other 92 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇨 ACE-INFORMATIQUE.NC	2026-10-16 06:00:12 (11 minutes ago)	Malicious CGI/web attack blocked by Fail2ban	Web App Attack
🇺🇸 EmilGH	2026-10-16 05:50:01 (21 minutes ago)	20.214.147.109 - - [16/Oct/2026:05:49:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.147.109 - - [16/Oct/2026:05:49:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 103860 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:02 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:03 +0000] "GET /ws.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:05 +0000] "GET /bnmtp.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:06 +0000] "GET /date1.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:08 +0000] "GET /opsh.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:09 +0000] "GET /ebkid.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:11 +0000] "GET /MacKenzie.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:13 +0000] "GET /np.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/Oct/2026:05:49:15 +0000] "GET /samll.php HTTP/1.1" 404 99928 "-" "-" 20.214.147.109 - - [16/ ... show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-10-16 05:48:08 (23 minutes ago)	20.214.147.109 - - [15/Oct/2026:23:48:02 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.147.109 - - [15/Oct/2026:23:48:02 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:02 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:03 -0600] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:03 -0600] "GET /z70.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:03 -0600] "GET /1.php?p= HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:03 -0600] "GET /radio.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:04 -0600] "GET /BDKR28WP.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:04 -0600] "GET /z60.php?p= HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:04 -0600] "GET /ebkid.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:05 -0600] "GET /133.php HTTP/1.1" 404 27 "-" "-" 20.214.147.109 - - [15/Oct/2026:23:48:05 -0600 ... show less	Web App Attack
🇨🇭 Cybercat	2026-10-16 05:45:13 (26 minutes ago)	CrowdSec detection: phnag/http-empty-ua	Hacking
🇹🇭 Sawasdee	2026-10-16 05:42:15 (29 minutes ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇩🇪 AetherFox	2026-10-16 05:26:14 (45 minutes ago)	AetherFox VoidGuard detected: [Fri Oct 16 05:26:12.090923 2026] [security2:error] [pid 3158664:tid 3 ... show more AetherFox VoidGuard detected: [Fri Oct 16 05:26:12.090923 2026] [security2:error] [pid 3158664:tid 3158683] [client 20.214.147.109:13203] [client 20.214.147.109] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "28"] [id "100051"] [msg "wp-content access blocked by AetherFox VoidGuard"] [hostname "draconigen.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "atG1dPk-zj7oGt2m4ZGpxQAAABA"] [Fri Oct 16 05:26:12.599598 2026] [security2:error] [pid 3158664:tid 3158676] [client 20.214.147.109:13261] [client 20.214.147.109] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "draconigen.net"] [uri "/this_is_a_new_hello ... show less	Hacking Bad Web Bot
Anonymous	2026-10-16 05:23:12 (48 minutes ago)	attempts to hack passwords	Brute-Force Web App Attack
Anonymous	2026-10-16 05:19:44 (51 minutes ago)	20.214.147.109 - - [16/Oct/2026:07:19:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.147.109 - - [16/Oct/2026:07:19:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5655 20.214.147.109 - - [16/Oct/2026:07:19:40 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:40 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:40 +0200] "GET /z70.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:41 +0200] "GET /1.php?p= HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:41 +0200] "GET /radio.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:41 +0200] "GET /BDKR28WP.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:42 +0200] "GET /z60.php?p= HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:42 +0200] "GET /ebkid.php HTTP/1.1" 404 618 20.214.147.109 - - [16/Oct/2026:07:19:42 +0200] "GET /133.php HTTP/1.1" 404 618 ... show less	Web Spam Web App Attack
🇫🇮 6kilowatti	2026-10-16 05:18:02 (53 minutes ago)	20.214.147.109 - - [16/Oct/2026:08:18:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.147.109 - - [16/Oct/2026:08:18:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-10-16 05:15:07 (56 minutes ago)	957 attacks on PHP URLs: GET /uiuvs58l.update.php HTTP/1.1	Web App Attack
Anonymous	2026-10-16 05:05:48 (1 hour ago)	Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-probing	Brute-Force
🇺🇸 ambor	2026-10-16 04:58:22 (1 hour ago)	Honeypot triggered on tcpdata.com - Attempted to access /wp-content/plugins/hellopress/wp_filemanage ... show more Honeypot triggered on tcpdata.com - Attempted to access /wp-content/plugins/hellopress/wp_filemanager.php (wordpress_probe). User-Agent: Unknown show less	Web App Attack
🇩🇪 23p02732	2026-10-16 04:49:00 (1 hour ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
🇩🇪 patrisei	2026-10-16 04:44:27 (1 hour ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing show less	Port Scan Web App Attack
🇫🇷 Thibault Millant	2026-10-16 04:41:34 (1 hour ago)	20.214.147.109 - - [16/Oct/2026:04:41:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.214.147.109 - - [16/Oct/2026:04:41:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Brute-Force Exploited Host SSH

Showing 1 to 15 of 559 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 154.16.44.152

🇺🇸 144.225.187.68

🇧🇪 34.38.24.125

🇳🇱 195.178.110.227

🇨🇴 186.154.66.17

🇺🇸 178.93.18.82

🇺🇸 167.99.149.145

🇬🇧 167.71.133.68

🇵🇰 154.192.161.173

🇬🇧 154.16.44.3

🇺🇸 97.212.165.121

🇬🇧 81.19.219.231

🇬🇧 77.67.26.195

🇩🇪 69.5.169.114

🇺🇸 65.49.1.226

🇹🇼 61.222.211.114

🇺🇸 54.221.203.24

🇸🇬 47.84.102.180

🇺🇸 45.79.181.223

🇬🇧 35.203.210.231