JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.209.81

20.196.209.81 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.209.81

Whois 20.196.209.81

IP Abuse Reports for 20.196.209.81:

This IP address has been reported a total of 171 times from 135 distinct sources. 20.196.209.81 was first reported on August 21st 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-08-22 11:32:33 (12 minutes ago)	ave-21 : Rogue PHP files=>/file.php	Hacking
Anonymous	2026-08-22 11:26:32 (18 minutes ago)	/httpdocs/wp-content/plugins/wp-file-manager/lib/themes/load.php	Web App Attack
🇩🇪 LRob	2026-08-22 11:07:38 (36 minutes ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Wi ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇹🇭 thaizone.com	2026-08-22 11:04:26 (40 minutes ago)	Brute Force Attack on a Web Resources (repeated 404) #2	DDoS Attack Web Spam Brute-Force Web App Attack
🇩🇪 macrob	2026-08-22 10:26:51 (1 hour ago)	2026/08/22 10:26:44 [error] 2888837#2888837: 507692449 access forbidden by rule, client: 20.196.209 ... show more 2026/08/22 10:26:44 [error] 2888837#2888837: 507692449 access forbidden by rule, client: 20.196.209.81, server: finami.ph, request: "GET /images/class-config.php HTTP/2.0", host: "finami.ph" 2026/08/22 10:26:45 [error] 2888837#2888837: 507690771 access forbidden by rule, client: 20.196.209.81, server: finami.ph, request: "GET /install.php HTTP/2.0", host: "finami.ph" 2026/08/22 10:26:50 [error] 2888835#2888835: 507689257 access forbidden by rule, client: 20.196.209.81, server: finami.ph, request: "GET /media/plg_system_jcepro/editor/plugins/admin.php HTTP/2.0", host: "finami.ph" ... show less	Web App Attack
🇺🇸 deskpass.com	2026-08-22 09:53:21 (1 hour ago)	GET /tmp/index.php	Web App Attack
🇷🇺 ago.su	2026-08-22 09:32:23 (2 hours ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack
🇪🇸 el-brujo	2026-08-22 08:57:37 (2 hours ago)	Cloudflare WAF: Request Path: /cgi-bin/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: ... show more Cloudflare WAF: Request Path: /cgi-bin/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: Microsoft Corporation Country: KR Method: GET Timestamp: 2026-08-22T08:57:37Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇺🇸 Starburst SysOp Team	2026-08-22 08:51:36 (2 hours ago)	Restricted File Access Attempt. Matched phrase "config.php" at REQUEST_FILENAME. (930130-mnz6-7)	Hacking Web App Attack
🇵🇱 sledzik1984	2026-08-22 08:15:25 (3 hours ago)	20.196.209.81 - - [22/Aug/2026:01:53:36 +0200] "GET /cgi-bin/wp-load.php HTTP/1.1" 404 47 "-" "Mozil ... show more 20.196.209.81 - - [22/Aug/2026:01:53:36 +0200] "GET /cgi-bin/wp-load.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.209.81 - - [22/Aug/2026:01:53:36 +0200] "GET /cgi-bin/wp-mail.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.196.209.81 - - [22/Aug/2026:10:15:25 +0200] "GET /function/function.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 macrob	2026-08-22 08:14:10 (3 hours ago)	2026/08/22 08:14:01 [error] 2888836#2888836: 507164374 access forbidden by rule, client: 20.196.209 ... show more 2026/08/22 08:14:01 [error] 2888836#2888836: 507164374 access forbidden by rule, client: 20.196.209.81, server: binixo.pl, request: "GET /images/class-config.php HTTP/2.0", host: "binixo.pl" 2026/08/22 08:14:03 [error] 2888836#2888836: 507280129 access forbidden by rule, client: 20.196.209.81, server: binixo.pl, request: "GET /install.php HTTP/2.0", host: "binixo.pl" 2026/08/22 08:14:08 [error] 2888836#2888836: 507214024 access forbidden by rule, client: 20.196.209.81, server: binixo.pl, request: "GET /media/plg_system_jcepro/editor/plugins/admin.php HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇹🇭 thaizone.com	2026-08-22 08:00:43 (3 hours ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇩🇪 marten_o	2026-08-22 08:00:14 (3 hours ago)	20.196.209.81 - - [22/Aug/2026:10:00:14 +0200] "GET /tmp/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 ... show more 20.196.209.81 - - [22/Aug/2026:10:00:14 +0200] "GET /tmp/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 736 437 ... show less	Web App Attack
🇷🇴 iulianh	2026-08-22 07:55:16 (3 hours ago)	*	Brute-Force SSH
🇺🇸 antlac1	2026-08-22 07:54:57 (3 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.248.207.142

🇮🇩 182.9.35.151

🇺🇸 147.185.132.254

🇺🇸 66.132.186.239

🇶🇦 37.210.238.59

🇦🇷 190.247.116.191

🇳🇱 107.189.17.69

🇨🇳 60.166.83.32

🇲🇾 47.250.124.101

🇬🇧 35.203.210.96

🇨🇳 171.211.24.108

🇩🇪 162.62.223.77

🇧🇷 138.185.145.78

🇳🇱 94.154.43.56

🇷🇴 92.118.39.49

🇫🇷 192.145.37.34

🇺🇸 137.184.226.118

🇫🇷 135.125.29.129

🇺🇦 92.249.92.20

🇵🇭 58.69.117.24