JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.200.23

20.196.200.23 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.200.23

Whois 20.196.200.23

IP Abuse Reports for 20.196.200.23:

This IP address has been reported a total of 142 times from 104 distinct sources. 20.196.200.23 was first reported on June 28th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-29 22:37:20 (18 hours ago)		Brute-Force Web App Attack
Anonymous	2026-06-29 08:02:44 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-06-29 05:14:45 (1 day ago)	1258 attacks on PHP URLs: GET /wp-content/plugins/atomlib.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-06-29 04:14:03 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 SpaceHost-Server	2026-06-28 22:27:19 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-06-28 22:13:48 (1 day ago)	[Mon Jun 29 00:13:43.446812 2026] [authz_core:error] [pid 44745:tid 44877] [client 20.196.200.23:165 ... show more [Mon Jun 29 00:13:43.446812 2026] [authz_core:error] [pid 44745:tid 44877] [client 20.196.200.23:1655] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/js/index.php [Mon Jun 29 00:13:48.214150 2026] [authz_core:error] [pid 44745:tid 44834] [client 20.196.200.23:1655] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/colors/index.php [Mon Jun 29 00:13:48.214150 2026] [authz_core:error] [pid 44745:tid 44834] [client 20.196.200.23:1655] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/colors/index.php ... show less	Brute-Force Web App Attack
🇮🇳 dineshskt4all	2026-06-28 22:10:52 (1 day ago)	[Sun Jun 28 22:10:49.811070 2026] [proxy_fcgi:error] [pid 2316460:tid 138343807428288] [client 20.19 ... show more [Sun Jun 28 22:10:49.811070 2026] [proxy_fcgi:error] [pid 2316460:tid 138343807428288] [client 20.196.200.23:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇧🇷 Halux	2026-06-28 22:04:30 (1 day ago)	20.196.200.23 Probing protected path or service	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-28 22:03:00 (1 day ago)	Auto-ban: >3000 req/min op 2026-06-28	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-06-28 22:01:06 (1 day ago)	Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /main.php Timestamp: 2026-06-28T20:35:40Z Ray ID: a12f7aaf3976f3ef UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇪 EmK530	2026-06-28 21:55:51 (1 day ago)	URL flagged by RegEx: /wp-admin/js/index.php	Web App Attack
🇮🇹 Inartis	2026-06-28 21:31:59 (1 day ago)	20.196.200.23 - - [28/Jun/2026:23:31:54 +0200] "GET /admin/controller/extension/extension/ HTTP/1.1" ... show more 20.196.200.23 - - [28/Jun/2026:23:31:54 +0200] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.200.23 - - [28/Jun/2026:23:31:57 +0200] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.200.23 - - [28/Jun/2026:23:31:58 +0200] "GET /admin/function.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇱 n33	2026-06-28 21:25:11 (1 day ago)	Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-06-28 20:55:00 (1 day ago)	(PERMBLOCK) 20.196.200.23 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; ... show more (PERMBLOCK) 20.196.200.23 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇦🇺 paulshipley.com.au	2026-06-28 20:23:56 (1 day ago)	paulshipley.com.au:443 20.196.200.23 - - [29/Jun/2026:06:23:54 +1000] "GET /admin/function.php HTTP/ ... show more paulshipley.com.au:443 20.196.200.23 - - [29/Jun/2026:06:23:54 +1000] "GET /admin/function.php HTTP/1.1" 404 76120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 185.211.94.76

🇭🇰 152.32.168.34

🇸🇪 88.129.165.39

🇺🇸 66.132.172.137

🇸🇬 43.173.176.8

🇸🇬 43.173.173.38

🇲🇾 202.165.29.123

🇮🇩 163.7.11.155

🇩🇴 148.103.9.128

🇵🇰 103.125.177.193

🇳🇱 45.156.87.254

🇺🇸 13.86.104.104

🇺🇸 4.17.226.146

🇪🇸 200.234.227.140

🇩🇪 193.124.20.236

🇧🇷 187.0.238.194

🇦🇪 165.154.12.108

🇮🇳 103.70.40.36

🇳🇬 102.90.123.168

🇺🇸 73.36.177.174