JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.101.216

20.196.101.216 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.101.216

Whois 20.196.101.216

IP Abuse Reports for 20.196.101.216:

This IP address has been reported a total of 46 times from 43 distinct sources. 20.196.101.216 was first reported on September 6th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 IRISIO	2025-09-08 07:54:24 (10 months ago)	scans/SQL injection/spam posts : 3895 queries	SQL Injection Web App Attack
🇺🇸 octageeks.com	2025-09-07 04:06:24 (10 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇨🇳 ThreatBook.io	2025-09-07 00:18:27 (10 months ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.196.101.216 2025-09-06 12:0 ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/20.196.101.216 2025-09-06 12:01:06 /cool.php 2025-09-06 12:01:06 /z.php 2025-09-06 12:01:06 /wsr2.php 2025-09-06 12:01:06 /aaaa.php 2025-09-06 12:01:06 /wp-content/plugins/hellopress/wp_filemanager.php 2025-09-06 12:01:06 /wp-update.php 2025-09-06 12:01:06 /dex.php 2025-09-06 12:01:06 /ffile.php 2025-09-06 12:01:06 /cfile.php 2025-09-06 12:01:06 /ss.php show less	Web App Attack
🇩🇪 Vegascosmetics	2025-09-06 21:50:39 (10 months ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2025-09-06 19:09:46 (10 months ago)	vulnerability scan	Web App Attack
🇮🇩 securejdprop	2025-09-06 18:48:07 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. Ip 20.196.101.216 performed ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-probing. Ip 20.196.101.216 performed 'crowdsecurity/http-probing' (11 events over 2.647736048s) at 2025-09-06 18:48:05.802911426 +0000 UTC show less	Hacking Web App Attack
🇺🇸 Penny Packer	2025-09-06 18:12:12 (10 months ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2025-09-06 17:50:10 (10 months ago)	$f2bV_matches	Brute-Force Bad Web Bot Web App Attack
🇩🇪 thesimonmanuel	2025-09-06 17:29:07 (10 months ago)	20.196.101.216 - - [06/Sep/2025:22:59:04 +0530] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.101.216 - - [06/Sep/2025:22:59:04 +0530] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" "-" 20.196.101.216 - - [06/Sep/2025:22:59:05 +0530] "GET /ss.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" "-" 20.196.101.216 - - [06/Sep/2025:22:59:05 +0530] "GET /z.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" "-" 20.196.101.216 - - [06/Sep/2025:22:59:06 +0530] "GET /wsr2.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" "-" 20.196.101.216 - - [06/Sep/2025:22:59:06 +0530] "GET /cfile.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" "-" show less	Hacking Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-09-06 17:14:36 (10 months ago)	Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Met ... show more Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-09-06T17:14:36Z) show less	Web Spam Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2025-09-06 16:01:37 (10 months ago)	valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:31 +1000] "GET /ss.php HTTP/1. ... show more valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:31 +1000] "GET /ss.php HTTP/1.1" 404 150404 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36" valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:33 +1000] "GET /z.php HTTP/1.1" 404 150403 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36" valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:35 +1000] "GET /wsr2.php HTTP/1.1" 404 150384 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36" valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:38 +1000] "GET /cfile.php HTTP/1.1" 404 150407 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36" valueaddedpromotions.com.au:443 20.196.101.216 - - [07/Sep/2025:02:00:40 +1000] "GET /ffile.php HTTP/1.1 ... show less	Web App Attack
🇩🇪 london2038.com	2025-09-06 15:56:34 (10 months ago)	Probing for exploits 20.196.101.216 - - [06/Sep/2025:17:56:09 +0200] "GET /wp-content/plugins/hellop ... show more Probing for exploits 20.196.101.216 - - [06/Sep/2025:17:56:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0" 20.196.101.216 - - [06/Sep/2025:17:56:31 +0200] "GET /z.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0" show less	Hacking Web App Attack
🇺🇸 0xk3on	2025-09-06 14:42:00 (10 months ago)	more than 20 404 requests for the file /gmo.php	Hacking Exploited Host Web App Attack
🇩🇪 ps-center	2025-09-06 14:17:37 (10 months ago)	C1: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php	Web Spam Hacking Bad Web Bot Web App Attack
🇨🇭 blinx	2025-09-06 13:15:20 (10 months ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:6d1c:323c::501:2a

🇺🇸 2a09:bac1:76e0:acc8::5e:5f

🇩🇪 207.154.208.89

🇺🇸 172.70.179.129

🇺🇸 81.30.98.193

🇺🇸 34.121.232.97

🇺🇸 8.235.116.12

🇩🇪 3.120.152.184

🇦🇺 3.25.108.197

🇺🇸 2a09:bac5:963c:3af::5e:7d

🇪🇸 194.164.167.239

🇬🇧 185.192.70.201

🇺🇸 172.71.254.94

🇩🇪 164.90.224.217

🇺🇸 162.216.18.113

🇨🇭 144.2.91.96

🇺🇸 136.107.52.46

🇺🇸 134.209.115.97

🇨🇳 113.140.250.20

🇺🇸 108.162.216.145