JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.193.222

20.196.193.222 was found in our database!

This IP was reported 1,115 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.193.222

Whois 20.196.193.222

IP Abuse Reports for 20.196.193.222:

This IP address has been reported a total of 1,115 times from 665 distinct sources. 20.196.193.222 was first reported on October 15th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 agenciahypelab.com.br	2026-10-17 04:13:01 (8 minutes ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇳🇱 Joop	2026-10-17 04:09:42 (11 minutes ago)	2026-10-17 06:09:41 +0200 s2 /this_is_a_new_hello_world.php	Web App Attack
🇺🇸 LotPhantom	2026-10-17 04:01:21 (19 minutes ago)	20.196.193.222 - - [17/Oct/2026:04:00:20 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.193.222 - - [17/Oct/2026:04:00:20 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "0" ... show less	Web App Attack
🇺🇸 lime	2026-10-17 04:00:50 (20 minutes ago)	[Sat Oct 17 04:00:49.472096 2026] [php7:error] [pid 2464149] [client 20.196.193.222:24008] script '/ ... show more [Sat Oct 17 04:00:49.472096 2026] [php7:error] [pid 2464149] [client 20.196.193.222:24008] script '/var/www/html/file.php' not found or unable to stat [Sat Oct 17 04:00:49.730080 2026] [php7:error] [pid 2464149] [client 20.196.193.222:24008] script '/var/www/html/gulu.php' not found or unable to stat show less	Hacking Web App Attack
🇩🇪 Phenix Info	2026-10-17 03:52:49 (28 minutes ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇩🇪 bluematrix	2026-10-17 03:51:41 (29 minutes ago)	crowdsecurity/http-probing - Ip 20.196.193.222 performed 'crowdsecurity/http-probing' (11 events ove ... show more crowdsecurity/http-probing - Ip 20.196.193.222 performed 'crowdsecurity/http-probing' (11 events over 3.521420277s) at 2026-10-17 03:51:45.0348114 +0000 UTC show less	Port Scan Hacking Brute-Force Web App Attack
🇫🇮 KTSTechnology	2026-10-17 03:50:41 (30 minutes ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
🇹🇷 eryilmaz	2026-10-17 03:50:39 (30 minutes ago)	Automated attack blocked by eryilmaz WAF/defense engine (level 2, source: auto, path: /app.php)	Web App Attack Hacking
🇪🇸 robotstxt	2026-10-17 03:50:13 (31 minutes ago)	20.196.193.222 - - [17/Oct/2026:03:49:30 +0000] "GET /radio.php HTTP/2.0" 400 193 "-" "-" "20.196.19 ... show more 20.196.193.222 - - [17/Oct/2026:03:49:30 +0000] "GET /radio.php HTTP/2.0" 400 193 "-" "-" "20.196.193.222" edge="172.71.110.63" 20.196.193.222 - - [17/Oct/2026:03:49:31 +0000] "GET /BDKR28WP.php HTTP/2.0" 400 193 "-" "-" "20.196.193.222" edge="172.71.110.63" 20.196.193.222 - - [17/Oct/2026:03:49:31 +0000] "GET /z60.php?p= HTTP/2.0" 400 193 "-" "-" "20.196.193.222" edge="172.71.111.133" 20.196.193.222 - - [17/Oct/2026:03:49:32 +0000] "GET /ebkid.php HTTP/2.0" 400 193 "-" "-" "20.196.193.222" edge="172.71.111.133" 20.196.193.222 - - [17/Oct/2026:03:49:32 +0000] "GET /133.php HTTP/2.0" 400 193 "-" "-" "20.196.193.222" edge="172.71.110.63" ... show less	Web Spam Web App Attack
🇺🇸 helios.live	2026-10-17 03:49:23 (31 minutes ago)	2026/10/17 03:49:22 [error] 1253601#1253601: 1207557 FastCGI sent in stderr: "Primary script unknow ... show more 2026/10/17 03:49:22 [error] 1253601#1253601: 1207557 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.196.193.222, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 2026/10/17 03:49:22 [error] 1253601#1253601: 1207557 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.196.193.222, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 20.196.193.222 - - [17/Oct/2026:03:49:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:49:22 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-" 2026/10/17 03:49:23 [error] 1253601#1253601: 12 ... show less	Web App Attack
Anonymous	2026-10-17 03:46:23 (34 minutes ago)		Bad Web Bot
🇺🇸 lime	2026-10-17 03:45:43 (35 minutes ago)	[Sat Oct 17 03:45:42.874629 2026] [php7:error] [pid 2462101] [client 20.196.193.222:24117] script '/ ... show more [Sat Oct 17 03:45:42.874629 2026] [php7:error] [pid 2462101] [client 20.196.193.222:24117] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Sat Oct 17 03:45:43.136875 2026] [php7:error] [pid 2462101] [client 20.196.193.222:24117] script '/var/www/html/app.php' not found or unable to stat show less	Hacking Web App Attack
🇺🇸 EmilGH	2026-10-17 03:41:51 (39 minutes ago)	20.196.193.222 - - [17/Oct/2026:03:41:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.196.193.222 - - [17/Oct/2026:03:41:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7300 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /app.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /app.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /bootstrap.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /bootstrap.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /core.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:44 +0000] "GET /core.php HTTP/1.1" 404 3343 "-" "-" 20.196.193.222 - - [17/Oct/2026:03:41:45 +0000] "GET /footer.php HTTP/1.1" 404 3343 "-" "-" 20.196.1 ... show less	Bad Web Bot Web App Attack
🇩🇰 HostingGroup	2026-10-17 03:31:54 (49 minutes ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-10-17. show less	Bad Web Bot Web App Attack
🇩🇪 Jarda_H	2026-10-17 03:26:39 (54 minutes ago)	php-url-scan Attack Detected	Hacking Web App Attack

Showing 1 to 15 of 1115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.83.183.254

🇺🇸 162.216.150.163

🇸🇬 159.223.59.82

🇮🇩 103.63.101.24

🇳🇱 93.113.203.91

🇺🇸 91.230.168.160

🇺🇸 45.33.78.24

🇭🇰 43.161.225.52

🇬🇧 35.203.211.81

🇯🇵 34.97.154.24

🇳🇱 31.14.32.8

🇧🇷 205.210.31.165

🇧🇴 200.105.172.184

🇬🇧 195.96.139.47

🇫🇷 185.2.101.55

🇺🇸 184.105.139.106

🇺🇸 172.236.123.208

🇺🇸 150.136.214.177

🇨🇳 119.165.121.43

🇫🇷 79.143.185.58