JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.106.26

20.196.106.26 was found in our database!

This IP was reported 153 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.106.26

Whois 20.196.106.26

IP Abuse Reports for 20.196.106.26:

This IP address has been reported a total of 153 times from 134 distinct sources. 20.196.106.26 was first reported on December 12th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Holger	2025-12-18 08:15:54 (6 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
Anonymous	2025-12-15 08:05:36 (6 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇭🇺 DumaNet	2025-12-15 08:01:00 (6 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 12. 19:01:55 Source IP: 20.196 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 12. 19:01:55 Source IP: 20.196.106.26 Portion of the log(s): 20.196.106.26 - [12/Dec/2025:19:01:53 +0100] "GET /bless.php HTTP/1.1" 404 555 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.196.106.26 - [12/Dec/2025:19:01:52 +0100] "GET /av.php HTTP/1.1" 404 555 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.196.106.26 - [12/Dec/2025:19:01:52 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.196.106.26 - [12/Dec/2025:19:01:52 +0100] "GET /assets/images/ HTTP/1.1" 404 153 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-14 00:16:15 (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.196.106.26 2025-12- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.196.106.26 2025-12-13 02:20:15 /browse.php 2025-12-13 02:20:15 /wp-content/admin-header.php 2025-12-13 02:20:15 /wp-includes/SimplePie/autoload_classmap.php 2025-12-13 02:20:15 /www.php 2025-12-13 02:20:15 /wp-includes/sitemaps/autoload_classmap.php 2025-12-13 02:20:14 /autoload_classmap/function.php 2025-12-13 02:20:15 /num.php 2025-12-13 02:20:15 /wp-content/autoload_classmap.php 2025-12-13 02:20:15 /wp-content/admin.php 2025-12-13 02:20:15 /includes.php show less	Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-13 22:59:54 (6 months ago)	Auto-ban: 28 malicious requests on 2025-12-12 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 28 malicious requests on 2025-12-12 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-13 20:10:26 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇪 Ivo Vynckier	2025-12-13 14:55:00 (6 months ago)	20.196.106.26 - - [12/Dec/2025:19:53:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 27 ... show more 20.196.106.26 - - [12/Dec/2025:19:53:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 276 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.196.106.26 - - [12/Dec/2025:19:53:51 +0100] "GET /num.php HTTP/1.1" 301 252 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.196.106.26 - - [12/Dec/2025:19:53:51 +0100] "GET /www.php HTTP/1.1" 301 252 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-12-13 06:14:15 (6 months ago)	224 attacks on PHP URLs: GET /wp-conflg/function.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-12-13 05:06:55 (6 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 [email protected]	2025-12-13 00:47:29 (6 months ago)	...	Brute-Force SSH
🇮🇹 mauri64	2025-12-13 00:30:20 (6 months ago)	Troppi errori Apache (139)	Hacking
Anonymous	2025-12-13 00:27:06 (6 months ago)	Portscan: TCP/80 (10x), TCP/443 (2x)	Port Scan
Anonymous	2025-12-13 00:00:30 (6 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇫🇷 Murazaki	2025-12-12 23:02:57 (6 months ago)	imap.balamb.fr 20.196.106.26 - - [12/Dec/2025:18:53:12 +0100] "GET /cgi-bin/file.php HTTP/1.1" 404 5 ... show more imap.balamb.fr 20.196.106.26 - - [12/Dec/2025:18:53:12 +0100] "GET /cgi-bin/file.php HTTP/1.1" 404 555 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "172.22.0.35:80" imap.balamb.fr 20.196.106.26 - - [12/Dec/2025:18:53:13 +0100] "GET /cgi-bin/index.php HTTP/1.1" 404 555 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "172.22.0.35:80" git.mehdibenadel.com 20.196.106.26 - - [12/Dec/2025:19:55:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 503 592 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "-" git.mehdibenadel.com 20.196.106.26 - - [12/Dec/2025:19:55:34 +0100] "GET /cgi-bin/index.php HTTP/1.1" 503 592 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-12-12 22:59:38 (6 months ago)	Auto-ban: >3000 req/min op 2025-12-12	Hacking Web App Attack SSH

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.172.151.137

🇵🇱 176.53.159.197

🇸🇪 155.4.245.222

🇺🇸 135.237.126.231

🇺🇸 49.51.204.105

🇳🇱 45.148.10.152

🇺🇸 185.165.50.19

🇺🇸 172.234.218.210

🇧🇷 168.194.64.3

🇩🇪 69.5.169.50

🇺🇸 50.6.228.111

🇺🇸 47.251.13.59

🇳🇱 45.148.10.183

🇳🇱 45.148.10.157

🇧🇪 35.195.137.35

🇩🇪 2a00:c380:f002:4:9999::196

🇺🇸 2605:7980:0:20cf::1

🇭🇰 2602:80d:1003::35

🇦🇺 185.225.105.94

🇯🇵 172.71.208.75