JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.208.161

20.196.208.161 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.208.161

Whois 20.196.208.161

IP Abuse Reports for 20.196.208.161:

This IP address has been reported a total of 42 times from 36 distinct sources. 20.196.208.161 was first reported on June 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 milcraft.nl	2026-07-01 21:09:27 (1 day ago)	Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect aut ... show more Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect automated scanners or malicious bots. .env, .env.local, .env.production, .htpasswd Activity is consistent with web application abuse. show less	Hacking
Anonymous	2026-07-01 09:38:31 (2 days ago)	Malicious activity	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-01 05:24:42 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.196.208.161 (KR/South Korea/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.196.208.161 (KR/South Korea/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 LRob	2026-07-01 01:45:09 (2 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇫🇷 ✨	2026-07-01 00:57:08 (2 days ago)	Domain : m-powerenterprises.com Rule : pluginsphp 2026-07-01 00:54:43 *hidden-privacy46 GET /wp ... show more Domain : m-powerenterprises.com Rule : pluginsphp 2026-07-01 00:54:43 hidden-privacy*46 GET /wp-content/plugins/fix/up.php - 80 - 20.196.208.161 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36 - m-powerenterprises.com 404 0 0 17868 276 1109 - - show less	Web App Attack
🇫🇷 ✨	2026-07-01 00:36:21 (2 days ago)	Domain : projectsresearch.co.uk Rule : pluginsphp 2026-07-01 00:33:43 *hidden-privacy* GET /wp-c ... show more Domain : projectsresearch.co.uk Rule : pluginsphp 2026-07-01 00:33:43 *hidden-privacy* GET /wp-content/plugins/fix/up.php - 443 - 20.196.208.161 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36 - projectsresearch.co.uk 404 0 0 31995 275 1621 - - show less	Web App Attack
🇫🇷 ✨	2026-07-01 00:17:19 (2 days ago)	Domain : rathbonepartnership.co.uk Rule : pluginsphp 2026-07-01 00:16:10 *hidden-privacy* GET /w ... show more Domain : rathbonepartnership.co.uk Rule : pluginsphp 2026-07-01 00:16:10 *hidden-privacy* GET /wp-content/plugins/fix/up.php - 443 - 20.196.208.161 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36 - rathbonepartnership.co.uk 404 0 0 50276 278 1618 - - show less	Web App Attack
🇨🇿 ddw	2026-06-30 23:43:20 (2 days ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇫🇷 _tom	2026-06-30 23:23:18 (2 days ago)	Automated report (2026-07-01T00:23:18+02:00). Caught probing for webshells/backdoors. Host might be ... show more Automated report (2026-07-01T00:23:18+02:00). Caught probing for webshells/backdoors. Host might be compromised. show less	Hacking Exploited Host Web App Attack Open Proxy
🇨🇭 zynex	2026-06-30 22:51:44 (2 days ago)	URL Probing: /wp-content/plugins/fix/up.php	Web App Attack
🇩🇪 SCHAPPY	2026-06-30 22:16:52 (2 days ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇩🇰 ScamAware	2026-06-30 22:06:30 (2 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇩🇪 Lino Project	2026-06-30 21:56:42 (2 days ago)	20.196.208.161 - - [30/Jun/2026:23:56:38 +0200] "GET /wp-content/plugins/fix/up.php HTTP/2.0" 404 56 ... show more 20.196.208.161 - - [30/Jun/2026:23:56:38 +0200] "GET /wp-content/plugins/fix/up.php HTTP/2.0" 404 56308 "http://www.macubedrone.com/wp-content/plugins/fix/up.php" "Mozilla/5.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 _tom	2026-06-30 21:34:34 (2 days ago)	Automated report (2026-06-30T23:34:34+02:00). Caught probing for webshells/backdoors. Host might be ... show more Automated report (2026-06-30T23:34:34+02:00). Caught probing for webshells/backdoors. Host might be compromised. show less	Hacking Exploited Host Web App Attack Open Proxy
🇮🇹 abuseiphack	2026-06-30 21:23:41 (2 days ago)	Automatic report for brute force attack	Bad Web Bot

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 75.44.98.71

🇮🇳 20.219.187.11

🇺🇸 138.197.40.250

🇨🇳 117.60.24.57

🇮🇩 103.59.161.120

🇳🇱 91.92.40.200

🇱🇹 45.227.254.170

🇪🇨 45.70.196.253

🇨🇦 20.48.255.163

🇷🇺 154.83.196.237

🇸🇬 139.99.74.35

🇪🇸 90.162.116.66

🇩🇪 65.111.22.119

🇳🇱 45.148.10.147

🇮🇳 20.219.151.116

🇷🇴 2.57.122.150

🇨🇭 216.131.108.38

🇪🇸 95.20.200.240

🇵🇱 87.251.64.156

🇳🇱 45.156.87.162