JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.214.109.68

Recent Activity

Abuse confidence score ?

100% Critical

2,082 reports

770 reporters · latest 17 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.214.109.68

Export CSV

This IP address has been reported a total of 2,082 times from 770 distinct sources. 20.214.109.68 was first reported on September 28th 2026, and the most recent report was 17 hours ago. In the last 60 days, the top reporter locations were: Germany with 564 reports; United States of America with 359 reports; France with 211 reports. The most common categories in these recent reports were: Web App Attack 1541 times; Bad Web Bot 531 times; Brute-Force 530 times; Hacking 425 times; Port Scan 202 times; Other 376 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2026-10-18 18:51:50 (17 hours ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-10-17 04:56:38 (2 days ago)	Persistent attacker, repeat offender	Hacking
🇨🇦 zXero	2026-10-17 00:29:58 (2 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-10-15 12:15:07 (4 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 ghostwarriors	2026-10-14 18:21:06 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-14 14:48:52 (4 days ago)	[Tue Sep 29 06:28:39.058643 2026] [authz_core:error] [pid 2981145:tid 137894438082240] [client 20.21 ... show more [Tue Sep 29 06:28:39.058643 2026] [authz_core:error] [pid 2981145:tid 137894438082240] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Tue Sep 29 06:28:39.239149 2026] [authz_core:error] [pid 2981145:tid 137892542281408] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Tue Sep 29 06:28:39.420463 2026] [authz_core:error] [pid 2981145:tid 137896535242432] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/ebkid.php [Tue Sep 29 06:28:39.601169 2026] [authz_core:error] [pid 2981145:tid 137895511824064] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/myglu.php [Tue Sep 29 06:28:39.793591 2026] [authz_core:error] [pid 2981145:tid 137894270326464] [client 20.214.109.68:26603] AH01630: client d ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-10-13 14:21:59 (5 days ago)	[Tue Sep 29 06:28:39.058643 2026] [authz_core:error] [pid 2981145:tid 137894438082240] [client 20.21 ... show more [Tue Sep 29 06:28:39.058643 2026] [authz_core:error] [pid 2981145:tid 137894438082240] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Tue Sep 29 06:28:39.239149 2026] [authz_core:error] [pid 2981145:tid 137892542281408] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Tue Sep 29 06:28:39.420463 2026] [authz_core:error] [pid 2981145:tid 137896535242432] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/ebkid.php [Tue Sep 29 06:28:39.601169 2026] [authz_core:error] [pid 2981145:tid 137895511824064] [client 20.214.109.68:26603] AH01630: client denied by server configuration: proxy:http://localhost:4000/myglu.php [Tue Sep 29 06:28:39.793591 2026] [authz_core:error] [pid 2981145:tid 137894270326464] [client 20.214.109.68:26603] AH01630: client d ... show less	Brute-Force SSH
🇩🇪 bogdanv	2026-10-12 13:04:31 (6 days ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇬🇧 sc user	2026-10-12 05:52:00 (1 week ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 rh24	2026-10-12 01:30:04 (1 week ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
🇩🇪 bogdanv	2026-10-11 08:38:14 (1 week ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇬🇧 sc user	2026-10-10 11:38:20 (1 week ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 Holger	2026-10-10 03:57:16 (1 week ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-10-10 02:55:16 (1 week ago)	fail2ban jail apache-scanner: 20.214.109.68 - - [30/Sep/2026:05:16:18 -0700] "GET /radio.php HTTP/1. ... show more fail2ban jail apache-scanner: 20.214.109.68 - - [30/Sep/2026:05:16:18 -0700] "GET /radio.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:18 -0700] "GET /blacks.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:19 -0700] "GET /run.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:19 -0700] "GET /vpn.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:20 -0700] "GET /alfa.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:20 -0700] "GET /wp-content/uploads/ HTTP/1.1" 403 459 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:21 -0700] "GET /w.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:21 -0700] "GET /wp_blog_footer.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:22 -0700] "GET /robot.php HTTP/1.1" 404 123656 "-" "-" 20.214.109.68 - - [30/Sep/2026:05:16:22 -0700] "GET /sss.php HTT show less	Web App Attack Port Scan
🇩🇪 rh24	2026-10-10 01:30:05 (1 week ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack

Showing 1 to 15 of 2082 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 193.187.110.159

🇺🇸 170.106.101.180

🇺🇸 64.35.146.118

🇸🇬 188.166.187.102

🇺🇦 188.163.116.160

🇺🇸 185.180.141.107

🇮🇩 182.253.221.210

🇮🇳 106.222.249.82

🇺🇸 98.186.146.236

🇱🇹 62.60.130.253

🇬🇧 200.138.46.106

🇹🇳 196.179.109.58

🇧🇷 191.32.157.30

🇺🇸 170.106.146.54

🇩🇪 167.94.145.29

🇺🇸 162.216.149.167

🇭🇰 152.32.225.117

🇲🇲 130.94.99.47

🇨🇳 106.37.191.2

🇩🇪 93.152.221.50