JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.194.96.114

Recent Activity

Abuse confidence score ?

100% Critical

2,858 reports

884 reporters · latest 9 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.194.96.114

Export CSV

This IP address has been reported a total of 2,858 times from 884 distinct sources. 20.194.96.114 was first reported on September 2nd 2026, and the most recent report was 9 hours ago. In the last 60 days, the top reporter locations were: Germany with 678 reports; United States of America with 587 reports; France with 342 reports. The most common categories in these recent reports were: Web App Attack 2207 times; Bad Web Bot 766 times; Brute-Force 632 times; Hacking 595 times; Port Scan 282 times; Other 461 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-25 03:13:50 (9 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.194.96.114 104.22.158.9 - - [07/Oct/2026:22:57:5 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.194.96.114 104.22.158.9 - - [07/Oct/2026:22:57:52 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-10-24 13:45:54 (22 hours ago)	fail2ban jail apache-scanner: 20.194.96.114 - - [03/Oct/2026:03:06:33 -0700] "GET /esp.php HTTP/1.1" ... show more fail2ban jail apache-scanner: 20.194.96.114 - - [03/Oct/2026:03:06:33 -0700] "GET /esp.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /UT6UJndefault.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /ccou.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /kbqhb.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /goeu.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /tinysd.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /ded.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /qDAFu1Swzxyd4JIdefault.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /e219b53abbindex.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /jj.php HTTP/1.1" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:51:46 (23 hours ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇸🇦 BenTahily	2026-10-24 07:00:58 (1 day ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
Anonymous	2026-10-23 18:16:06 (1 day ago)	Automated report by fail2ban (apache-auth jail): 3 matching events	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-10-23 03:13:43 (2 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.194.96.114 104.22.158.9 - - [07/Oct/2026:22:57:5 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.194.96.114 104.22.158.9 - - [07/Oct/2026:22:57:52 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇨🇱 Fernando Soto	2026-10-23 01:35:09 (2 days ago)	WAF propio vps1 (CL): abuseipdb_ext100 score 8 en 1h. actividad hostil.	Bad Web Bot
🇺🇸 printedwicked	2026-10-22 22:27:00 (2 days ago)	PW Sentinel on printedwicked.com: blocked (analyst). Automated report.	Hacking Web App Attack
Anonymous	2026-10-22 20:06:36 (2 days ago)	fail2ban: recidive jail (2 hits in 15724800s) on skipper	Hacking
Anonymous	2026-10-22 19:50:58 (2 days ago)	fail2ban: apache-auth jail (3 hits in 2419200s) on skipper	Brute-Force Web App Attack
🇺🇸 Rayulcifer	2026-10-22 07:01:12 (3 days ago)	[Mon Oct 05 20:00:14.028648 2026] [authz_core:error] [pid 1066811:tid 140446302992064] [client 20.19 ... show more [Mon Oct 05 20:00:14.028648 2026] [authz_core:error] [pid 1066811:tid 140446302992064] [client 20.194.96.114:46337] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Mon Oct 05 20:00:14.295081 2026] [authz_core:error] [pid 1066811:tid 140447193642688] [client 20.194.96.114:46337] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Mon Oct 05 20:00:14.474991 2026] [authz_core:error] [pid 1066811:tid 140446277813952] [client 20.194.96.114:46337] AH01630: client denied by server configuration: proxy:http://localhost:4000/admin.php [Mon Oct 05 20:00:14.654480 2026] [authz_core:error] [pid 1066811:tid 140446026163904] [client 20.194.96.114:46337] AH01630: client denied by server configuration: proxy:http://localhost:4000/goods.php [Mon Oct 05 20:00:14.988670 2026] [authz_core:error] [pid 1066811:tid 140445053068992] [client 20.194.96.114:46337] AH01630: client d ... show less	Brute-Force SSH
🇸🇦 BenTahily	2026-10-22 07:00:59 (3 days ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇨🇦 SoteriaCovenant	2026-10-22 06:45:13 (3 days ago)	Automated probe: /admin.php on Soteria Global infrastructure. No vulnerable software present.	Hacking
Anonymous	2026-10-21 13:19:29 (3 days ago)	fail2ban jail apache-scanner: 20.194.96.114 - - [03/Oct/2026:03:06:33 -0700] "GET /esp.php HTTP/1.1" ... show more fail2ban jail apache-scanner: 20.194.96.114 - - [03/Oct/2026:03:06:33 -0700] "GET /esp.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /UT6UJndefault.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /ccou.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:34 -0700] "GET /kbqhb.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /goeu.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /tinysd.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:38 -0700] "GET /ded.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /qDAFu1Swzxyd4JIdefault.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /e219b53abbindex.php HTTP/1.1" 403 471 "-" "-" 20.194.96.114 - - [03/Oct/2026:03:06:39 -0700] "GET /jj.php HTTP/1.1" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:28:04 (4 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack

Showing 1 to 15 of 2858 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.135

🇹🇼 198.235.24.11

🇵🇱 162.158.172.26

🇨🇳 122.14.226.65

🇮🇳 68.183.87.29

🇧🇷 35.247.241.239

🇻🇳 27.79.42.228

🇺🇸 20.168.117.95

🇦🇺 20.5.85.204

🇫🇷 193.151.190.249

🇮🇩 140.213.15.209

🇬🇧 92.30.245.181

🇧🇷 16.5.0.226

🇺🇸 13.220.217.50

🇺🇸 3.90.68.57

🇰🇷 221.162.218.85

🇧🇷 201.77.124.248

🇹🇼 198.235.24.79

🇧🇷 177.66.91.31

🇺🇸 172.203.209.246