JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.195.239

20.196.195.239 was found in our database!

This IP was reported 240 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.195.239

Whois 20.196.195.239

IP Abuse Reports for 20.196.195.239:

This IP address has been reported a total of 240 times from 182 distinct sources. 20.196.195.239 was first reported on June 29th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-29 23:10:05 (1 hour ago)	\| [Dangerous/South Korea] Aggressive IP 20.196.195.239 (~30 hits). Type: DoS Defender- Web server 40 ... show more \| [Dangerous/South Korea] Aggressive IP 20.196.195.239 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 SpaceHost-Server	2026-06-29 22:37:19 (1 hour ago)		Brute-Force Web App Attack
Anonymous	2026-06-29 18:05:03 (6 hours ago)	Unknown PHP script access detected by Fail2Ban	Web App Attack
🇭🇺 kranem	2026-06-29 18:00:05 (6 hours ago)	Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/plugins/WordPressCore/ Timestamp: 2026-06-29T17:42:27Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-06-29 17:12:43 (7 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 FeG Deutschland	2026-06-29 17:10:31 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇦🇺 paulshipley.com.au	2026-06-29 17:10:25 (7 hours ago)	stkildashule.org.au:443 20.196.195.239 - - [30/Jun/2026:03:10:23 +1000] "GET /inputs.php HTTP/1.1" 4 ... show more stkildashule.org.au:443 20.196.195.239 - - [30/Jun/2026:03:10:23 +1000] "GET /inputs.php HTTP/1.1" 404 49649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Alvino	2026-06-29 17:05:15 (7 hours ago)	Blocked due to using a VPN or data center IP with abuse: 100	Web Spam VPN IP
Anonymous	2026-06-29 17:01:45 (7 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇫🇮 Christopher Hughes	2026-06-29 16:56:14 (7 hours ago)	[Mon Jun 29 17:56:11.237489 2026] [proxy_fcgi:error] [pid 1291849:tid 139821829834304] [client 20.19 ... show more [Mon Jun 29 17:56:11.237489 2026] [proxy_fcgi:error] [pid 1291849:tid 139821829834304] [client 20.196.195.239:5412] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:56:11.506059 2026] [proxy_fcgi:error] [pid 1291849:tid 139822031160896] [client 20.196.195.239:5412] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:56:12.041875 2026] [proxy_fcgi:error] [pid 1291849:tid 139822651926080] [client 20.196.195.239:5412] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:56:12.310326 2026] [proxy_fcgi:error] [pid 1291849:tid 139822759077440] [client 20.196.195.239:5412] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:56:12.855792 2026] [proxy_fcgi:error] [pid 1291849:tid 139822005982784] [client 20.196.195.239:5412] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-06-29 16:54:57 (7 hours ago)	Automated report (2026-06-30T00:54:57+08:00). Caught probing for webshells/backdoors. Host might be ... show more Automated report (2026-06-30T00:54:57+08:00). Caught probing for webshells/backdoors. Host might be compromised. show less	Hacking Exploited Host Web App Attack Open Proxy
🇳🇱 i-turnradio.nl	2026-06-29 16:45:00 (7 hours ago)	2026-06-29 @ 18:45:00 (CET) ~ Blocked for trying to access: /inputs.php	Web App Attack
🇩🇪 Melle	2026-06-29 16:34:41 (7 hours ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-probing \| 20.196.195.239 triggered 11 events \| De ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-probing \| 20.196.195.239 triggered 11 events \| Detected: 2026-06-29T16:34:37.706823541Z show less	Web App Attack Hacking
🇳🇱 Mangelot Hosting	2026-06-29 16:30:48 (7 hours ago)	(PERMBLOCK) 20.196.195.239 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs ... show more (PERMBLOCK) 20.196.195.239 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇳🇱 CryptoYakari	2026-06-29 16:24:29 (8 hours ago)	[Mon Jun 29 19:24:24.326270 2026] [proxy_fcgi:error] [pid 466310:tid 466339] [client 20.196.195.239: ... show more [Mon Jun 29 19:24:24.326270 2026] [proxy_fcgi:error] [pid 466310:tid 466339] [client 20.196.195.239:0] AH01071: Got error 'Primary script unknown' [Mon Jun 29 19:24:24.618293 2026] [proxy_fcgi:error] [pid 466310:tid 466331] [client 20.196.195.239:0] AH01071: Got error 'Primary script unknown' [Mon Jun 29 19:24:25.160813 2026] [proxy_fcgi:error] [pid 466309:tid 466320] [client 20.196.195.239:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot

Showing 1 to 15 of 240 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.83.114.88

🇻🇳 171.231.182.115

🇺🇸 162.216.150.89

🇧🇬 79.124.56.238

🇩🇪 45.144.233.139

🇰🇷 222.108.100.117

🇺🇸 216.25.89.87

🇲🇾 202.187.157.136

🇳🇱 138.124.30.187

🇮🇩 103.186.31.66

🇲🇩 95.65.98.52

🇮🇷 85.198.9.33

🇱🇹 81.30.98.158

🇧🇬 79.124.49.174

🇩🇪 69.5.169.21

🇬🇧 57.128.182.5

🇳🇱 46.151.178.13

🇳🇱 45.148.10.157

🇺🇸 24.45.233.231

🇮🇪 20.13.164.162