JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.106.203

20.196.106.203 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.106.203

Whois 20.196.106.203

IP Abuse Reports for 20.196.106.203:

This IP address has been reported a total of 107 times from 82 distinct sources. 20.196.106.203 was first reported on October 22nd 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2025-10-24 10:03:00 (9 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Oct 23. 00:01:55 Source IP: 20.196 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Oct 23. 00:01:55 Source IP: 20.196.106.203 Portion of the log(s): 20.196.106.203 - - [23/Oct/2025:00:00:57 +0200] "GET /gelay.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:57 +0200] "GET /opop.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:56 +0200] "GET /file21.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:56 +0200] "GET /222.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:56 +0200] "GET /class20.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:56 +0200] "GET /info.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:55 +0200] "GET /akcc.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:55 +0200] "GET /hk.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:54 +0200] "GET /gm.php HTTP/1.1" 404 153 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:00:54 +0200] "GET /gmo.php HTTP/1.1" 404 show less	Web App Attack
🇫🇷 IRISIO	2025-10-23 06:46:30 (10 months ago)	scans/SQL injection/spam posts : 1723 queries	SQL Injection Web App Attack
🇬🇧 openstrike.co.uk	2025-10-23 05:13:17 (10 months ago)	86 attacks on PHP URLs: GET /unrcj.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-10-23 04:08:18 (10 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇬🇧 [email protected]	2025-10-23 00:54:40 (10 months ago)	...	Brute-Force SSH
🇮🇹 mauri64	2025-10-22 23:30:25 (10 months ago)	Troppi errori Apache (85)	Hacking
🇺🇸 xmission.com	2025-10-22 23:00:03 (10 months ago)	20.196.106.203 - - [22/Oct/2025:16:59:56 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.106.203 - - [22/Oct/2025:16:59:56 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:56 -0600] "GET /abcd.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:57 -0600] "GET /nc4.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:57 -0600] "GET /we.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:57 -0600] "GET /lock360.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:57 -0600] "GET /ar.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:58 -0600] "GET /acxx.php?p= HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:58 -0600] "GET /cache.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:58 -0600] "GET /buy.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:59 -0600] "GET /zfile.php HTTP/1.1" 404 27 "-" "-" 20.196.106.203 - - [22/Oct/2025:16:59:59 -0600] "GET /lv.php HTTP/1.1" 404 27 ... show less	Web App Attack
🇩🇪 ps-center	2025-10-22 22:53:26 (10 months ago)	HHV: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php	Web Spam Hacking Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2025-10-22 22:51:15 (10 months ago)	[Wed Oct 22 23:51:13.479286 2025] [proxy_fcgi:error] [pid 769696:tid 140346000385600] [client 20.196 ... show more [Wed Oct 22 23:51:13.479286 2025] [proxy_fcgi:error] [pid 769696:tid 140346000385600] [client 20.196.106.203:42519] AH01071: Got error 'Primary script unknown' [Wed Oct 22 23:51:13.767085 2025] [proxy_fcgi:error] [pid 769696:tid 140346159781440] [client 20.196.106.203:42519] AH01071: Got error 'Primary script unknown' [Wed Oct 22 23:51:14.014427 2025] [proxy_fcgi:error] [pid 769696:tid 140346126210624] [client 20.196.106.203:42519] AH01071: Got error 'Primary script unknown' [Wed Oct 22 23:51:14.376720 2025] [proxy_fcgi:error] [pid 769696:tid 140346017171008] [client 20.196.106.203:42519] AH01071: Got error 'Primary script unknown' [Wed Oct 22 23:51:14.637244 2025] [proxy_fcgi:error] [pid 769696:tid 140346134603328] [client 20.196.106.203:42519] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 SiliSoftware	2025-10-22 22:45:22 (10 months ago)	/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇹🇭 thaizone.com	2025-10-22 22:38:14 (10 months ago)	Brute Force Attack on a Web Resources (repeated 404) #2	DDoS Attack Web Spam Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2025-10-22 22:37:25 (10 months ago)	20.196.106.203 - - [22/Oct/2025:23:37:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.106.203 - - [22/Oct/2025:23:37:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.196.106.203 - - [22/Oct/2025:23:37:20 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 403 4959 "-" "-" 20.196.106.203 - - [22/Oct/2025:23:37:20 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇮🇳 dineshskt4all	2025-10-22 22:30:15 (10 months ago)	[Wed Oct 22 22:30:12.782002 2025] [proxy_fcgi:error] [pid 1700:tid 139002850043584] [client 20.196.1 ... show more [Wed Oct 22 22:30:12.782002 2025] [proxy_fcgi:error] [pid 1700:tid 139002850043584] [client 20.196.106.203:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇮 cycastic	2025-10-22 22:24:02 (10 months ago)	Probed /unrcj.php on 10/22/2025 22:22:12 +00:00 (UA: , Query: ) Probed /mpxct.php on 10/22/2025 22:2 ... show more Probed /unrcj.php on 10/22/2025 22:22:12 +00:00 (UA: , Query: ) Probed /mpxct.php on 10/22/2025 22:22:11 +00:00 (UA: , Query: ) Probed /rupvs.php on 10/22/2025 22:22:11 +00:00 (UA: , Query: ) Probed /nguoj.php on 10/22/2025 22:22:11 +00:00 (UA: , Query: ) Probed /hmcyt.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) Probed /nguoj.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) Probed /kzkwq.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) Probed /miuio.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) Probed /miso.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) Probed /jbdah.php on 10/22/2025 22:22:10 +00:00 (UA: , Query: ) show less	Web App Attack
🇫🇮 Mr-Money	2025-10-22 22:20:39 (10 months ago)	20.196.106.203 - - [23/Oct/2025:00:20:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.106.203 - - [23/Oct/2025:00:20:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 460 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:20:34 +0200] "GET /wp-activate.php HTTP/1.1" 404 177 "-" "-" 20.196.106.203 - - [23/Oct/2025:00:20:38 +0200] "GET /wp-22.php HTTP/1.1" 404 177 "-" "-" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::ea

🇮🇹 190.106.185.121

🇧🇷 187.74.32.231

🇵🇾 186.158.200.132

🇺🇸 172.58.55.18

🇧🇷 143.137.250.172

🇨🇳 117.50.70.169

🇨🇦 85.217.149.68

🇧🇪 34.78.252.207

🇨🇴 8.242.185.6

🇹🇼 198.235.24.109

🇺🇸 192.161.49.2

🇹🇹 190.59.207.190

🇲🇽 187.102.239.29

🇧🇷 177.124.76.13

🇺🇸 161.123.88.210

🇺🇸 103.196.9.231

🇺🇸 64.227.99.65

🇦🇿 46.23.102.10

🇬🇧 35.203.210.251