JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.219.114

20.63.219.114 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.219.114

Whois 20.63.219.114

IP Abuse Reports for 20.63.219.114:

This IP address has been reported a total of 51 times from 49 distinct sources. 20.63.219.114 was first reported on August 21st 2026, and the most recent report was 27 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-08-21 21:28:47 (27 seconds ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.63.219.114 (JP/Japan/ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.63.219.114 (JP/Japan/Osaka/Osaka/-) show less	Port Scan
🇧🇷 Halux	2026-08-21 21:22:40 (6 minutes ago)	20.63.219.114 Probing protected path or service	Web App Attack
🇺🇸 masterguru	2026-08-21 21:19:03 (10 minutes ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-169)	Hacking Web App Attack
🇺🇸 Major Hostility	2026-08-21 21:05:37 (23 minutes ago)	"GET /wp-includes/images/wp-login.php HTTP/1.1" 404 "GET /wp-includes/index.php HTTP/1.1" 404 "GET / ... show more "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 "GET /wp-includes/index.php HTTP/1.1" 404 "GET /wp-includes/pomo/user-new.php HTTP/1.1" 404 "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 404 "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 "GET /wp-includes/style-engine/index.php HTTP/1.1" 404 "GET /wp-includes/wp-class.php HTTP/1.1" 404 "GET /wp-includes/wp-widgets.php HTTP/1.1" 404 "GET /wp-signup.php HTTP/1.1" 404 "GET /wp-trackback.php HTTP/1.1" 404 "GET /ws.php HTTP/1.1" 404 "GET /wso.php HTTP/1.1" 404 "GET /meta.php HTTP/1.1" 404 "GET /hehe.php HTTP/1.1" 404 "GET /yindu.php HTTP/1.1" 404 "GET /wp-admin/class-db.php HTTP/1.1" 404 "GET /baxa1.phP8 HTTP/1.1" 404 "GE show less	Web App Attack
🇺🇸 mnsf	2026-08-21 21:05:15 (23 minutes ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇩🇪 thesimonmanuel	2026-08-21 21:03:51 (25 minutes ago)	20.63.219.114 - - [22/Aug/2026:02:33:50 +0530] "GET /.info.php HTTP/1.1" 403 141 "-" "Mozilla/5.0 (W ... show more 20.63.219.114 - - [22/Aug/2026:02:33:50 +0530] "GET /.info.php HTTP/1.1" 403 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Web App Attack
🇧🇪 cmbplf	2026-08-21 20:59:09 (30 minutes ago)	9.212 requests in 1 hour (3mos1w6d)	Brute-Force Bad Web Bot
🇲🇾 Rizzy	2026-08-21 20:58:19 (30 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 Jarda_H	2026-08-21 20:57:28 (31 minutes ago)	php-url-scan Attack Detected	Hacking Web App Attack
🇷🇴 clauss	2026-08-21 20:54:06 (35 minutes ago)	20.63.219.114 - - [21/Aug/2026:23:54:00 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/2.0" ... show more 20.63.219.114 - - [21/Aug/2026:23:54:00 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/2.0" 404 11818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.219.114 - - [21/Aug/2026:23:54:06 +0300] "GET /1.php HTTP/2.0" 404 11818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇹🇷 ycoskun41	2026-08-21 20:49:37 (39 minutes ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇺🇸 robotstxt	2026-08-21 20:45:04 (44 minutes ago)	20.63.219.114 - - [21/Aug/2026:20:43:06 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 12 "-" "Mozilla ... show more 20.63.219.114 - - [21/Aug/2026:20:43:06 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="20.63.219.114" 20.63.219.114 - - [21/Aug/2026:20:43:11 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 404 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="20.63.219.114" 20.63.219.114 - - [21/Aug/2026:20:43:46 +0000] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 404 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="20.63.219.114" 20.63.219.114 - - [21/Aug/2026:20:43:54 +0000] "GET /mail.php HTTP/1.1" 404 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="20.63.219.114" 20.63.219.114 - - [21/Aug/2026:20:44:25 +0000] "GET /cgi-bin/php8.php HTTP/1.1" 4 ... show less	Bad Web Bot
🇬🇷 setupgr	2026-08-21 20:41:17 (47 minutes ago)	(mod_security) mod_security (id:1000001) triggered by 20.63.219.114 (JP/Japan/Osaka/Osaka/-/[AS8075 ... show more (mod_security) mod_security (id:1000001) triggered by 20.63.219.114 (JP/Japan/Osaka/Osaka/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:41:14.495748 2026] [security2:error] [pid 220021:tid 220139] [client 20.63.219.114:9152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.dj/index.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /.dj/index.php"] [severity "CRITICAL"] [tag "security"] [hostname "pankoskal.gr"] [uri "/.dj/index.php"] [unique_id "aoi36j5x6mQwi_dPmn5q5gAAA4w"] show less	Port Scan
🇫🇷 sthoyer.de	2026-08-21 20:36:38 (52 minutes ago)	20.63.219.114 - - [21/Aug/2026:22:36:29 +0200] "GET /.info.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (W ... show more 20.63.219.114 - - [21/Aug/2026:22:36:29 +0200] "GET /.info.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.219.114 - - [21/Aug/2026:22:36:37 +0200] "GET /002.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.219.114 - - [21/Aug/2026:22:36:37 +0200] "GET /0x.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 ruusvuu	2026-08-21 20:31:57 (57 minutes ago)	Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP. Targeted paths: /. ... show more Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP. Targeted paths: /.well-known/acme-challenge/admin.php, /.well-known/api.php, /.well-known/core.php, /.well-known/db-status.php, /.well-known/gecko-litespeed.php. Sample log lines: [helpdesk] 8/21/2026 13:31:56 20.63.219.114 GET /.well-known/wp-blog-header.php 404 169 0.8 ms [helpdesk] 8/21/2026 13:31:56 20.63.219.114 GET /.well-known/wp-links-opml.php 404 168 3.0 ms [helpdesk] 8/21/2026 13:31:57 20.63.219.114 GET /.well-known/wp-load.php 404 162 1.0 ms Detected by an automated web-server log monitor. show less	Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.182.138.29

🇫🇷 104.23.225.70

🇰🇷 220.119.37.141

🇩🇪 195.230.103.250

🇷🇺 193.160.204.183

🇫🇷 185.177.72.12

🇺🇸 172.172.170.199

🇫🇷 172.71.119.50

🇨🇳 112.7.114.52

🇺🇸 69.124.251.147

🇮🇶 65.20.165.151

🇱🇹 62.60.130.242

🇷🇺 37.77.150.241

🇺🇸 3.211.105.134

🇺🇸 2604:a880:2:d1:0:1:7065:5001

🇰🇷 218.149.228.147

🇺🇸 162.216.150.27

🇱🇹 141.98.10.174

🇷🇴 92.118.39.209

🇬🇧 193.163.125.31