JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.197.230

20.196.197.230

Neutral Activity

266 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.196.197.230 has been reported 266 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.196.197.230:

This IP address has been reported a total of 266 times from 109 distinct sources. 20.196.197.230 was first reported on April 15th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-23 05:52:11 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 01:09:07 (4 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx02,mx03]	Bad Web Bot Web App Attack
🇺🇸 raymarron.com	2026-04-30 13:35:09 (4 months ago)	/wp-content/plugins/WordPressCore/ /wp-includes/images/ /wp-includes/PHPMailer/ /wp-content/plugi ... show more /wp-content/plugins/WordPressCore/ /wp-includes/images/ /wp-includes/PHPMailer/ /wp-content/plugins/index.php /wp-content/themes/index.php /wp-content/themes/admin.php /wp-content/uploads/ /wp-admin/css/colors/ectoplasm/ /wp-content/admin.php /wp-includes/html-api/ /wp-includes/Requests/src/Response/about.php /cgi-bin/ /info.php /defaults.php /classwithtostring.php /chosen.php?p= /autoload_classmap.php /kbfr.php /sf.php /class-t.api.php /goods.php /xmlrpc.php /wp-good.php /adminfuns.php /file.php /about.php /wp-trackback.php /as.php /abcd.php /abc.php /wp-login.php /wp-content/themes/hideo/network.php /wp-conf.php /wp-admin/user.php /404.php /ws.php /randkeyword.PhP7 /index/function.php /an.php /themes.php /cache.php /wp-content/uploads/index.php /admin.php /rip.php /function/function.php /ioxi-o.php /inputs.php show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-21 21:59:05 (4 months ago)	Auto-ban: 23 malicious requests on 2026-04-20 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 23 malicious requests on 2026-04-20 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇫🇷 SpaceHost-Server	2026-04-20 22:33:25 (4 months ago)		Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-04-20 06:53:43 (4 months ago)	[Mon Apr 20 07:53:41.763804 2026] [proxy_fcgi:error] [pid 2346847:tid 140446697252416] [client 20.19 ... show more [Mon Apr 20 07:53:41.763804 2026] [proxy_fcgi:error] [pid 2346847:tid 140446697252416] [client 20.196.197.230:3754] AH01071: Got error 'Primary script unknown' [Mon Apr 20 07:53:42.055828 2026] [proxy_fcgi:error] [pid 2346847:tid 140447267661376] [client 20.196.197.230:3754] AH01071: Got error 'Primary script unknown' [Mon Apr 20 07:53:42.329520 2026] [proxy_fcgi:error] [pid 2346847:tid 140446143596096] [client 20.196.197.230:3754] AH01071: Got error 'Primary script unknown' [Mon Apr 20 07:53:42.602574 2026] [proxy_fcgi:error] [pid 2346847:tid 140447301232192] [client 20.196.197.230:3754] AH01071: Got error 'Primary script unknown' [Mon Apr 20 07:53:42.901260 2026] [proxy_fcgi:error] [pid 2346847:tid 140446118417984] [client 20.196.197.230:3754] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 IRISIO	2026-04-20 06:31:51 (4 months ago)	scans/SQL injection/spam posts : 9583 queries	Web App Attack SQL Injection
🇳🇱 Site.eu	2026-04-20 05:45:20 (4 months ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-04-20 04:49:26 (4 months ago)	AGERADE WEBEXPLOIT 20.196.197.230 (20.196.197.230)	Web App Attack
🇫🇷 bazter.pro	2026-04-20 04:35:03 (4 months ago)	Fail2Ban: apache-ratelimit - 20 failures	Port Scan Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-04-20 04:21:10 (4 months ago)	Fail2Ban Jail s2: tomcat-404 \| Evidence: 20.196.197.230 162.158.138.75 - - [20/Apr/2026:01:20:57 -03 ... show more Fail2Ban Jail s2: tomcat-404 \| Evidence: 20.196.197.230 162.158.138.75 - - [20/Apr/2026:01:20:57 -0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:20:58 -0300] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:20:58 -0300] "GET /user.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:20:58 -0300] "GET /version.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:20:59 -0300] "GET /wander.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:20:59 -0300] "GET /webadmin.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:21:00 -0300] "GET /wp-2019.php HTTP/1.1" 404 414 20.196.197.230 162.158.139.35 - - [20/Apr/2026:01:21:00 -0300] "GET /wp-add.php HTTP/1.1" 404 414 show less	Bad Web Bot Web App Attack
🇩🇪 Skyrider	2026-04-20 03:57:26 (4 months ago)	crowdsecurity/http-wordpress-scan	Hacking
🇩🇪 macrob	2026-04-20 03:27:23 (4 months ago)	2026/04/20 03:27:20 [error] 1567513#1567513: 164077899 access forbidden by rule, client: 20.196.197 ... show more 2026/04/20 03:27:20 [error] 1567513#1567513: 164077899 access forbidden by rule, client: 20.196.197.230, server: binixo.com.ua, request: "GET /upload2/10-27-24_8:26_1.php HTTP/1.1", host: "binixo.com.ua" 2026/04/20 03:27:21 [error] 1567513#1567513: 164077899 access forbidden by rule, client: 20.196.197.230, server: binixo.com.ua, request: "GET /webadmin.php HTTP/1.1", host: "binixo.com.ua" 2026/04/20 03:27:22 [error] 1567513#1567513: 164077899 access forbidden by rule, client: 20.196.197.230, server: binixo.com.ua, request: "GET /wp-admin/autoload_classmap.php HTTP/1.1", host: "binixo.com.ua" ... show less	Web App Attack
Anonymous	2026-04-20 03:26:14 (4 months ago)	SPARSDE WEBEXPLOIT 20.196.197.230 (20.196.197.230)	Web App Attack
🇦🇹 penguin-solutions.at	2026-04-20 03:25:39 (4 months ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.142

🇦🇷 191.85.54.249

🇨🇦 138.197.164.175

🇫🇷 91.231.89.241

🇸🇪 83.209.250.100

🇺🇸 73.244.76.231

🇺🇸 71.6.239.37

🇺🇸 70.183.233.55

🇱🇺 64.89.160.73

🇳🇱 45.142.193.169

🇺🇸 40.124.170.250

🇮🇩 103.193.166.12

🇺🇸 69.247.228.196

🇱🇹 62.60.130.253

🇱🇹 62.60.130.201

🇰🇷 222.104.76.94

🇰🇷 211.46.225.31

🇹🇼 110.25.109.54

🇺🇸 104.171.69.168

🇺🇸 92.204.128.28