JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.216.103

20.196.216.103 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.216.103

Whois 20.196.216.103

IP Abuse Reports for 20.196.216.103:

This IP address has been reported a total of 33 times from 25 distinct sources. 20.196.216.103 was first reported on July 24th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dtorrer	2022-07-26 12:32:55 (4 years ago)	Dictionary attack on login resource.	Brute-Force
🇺🇸 Major Hostility	2022-07-26 12:18:48 (4 years ago)	"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-inc ... show more "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 show less	Web App Attack
🇺🇸 HJ5Ss4Ju	2022-07-26 12:17:57 (4 years ago)	Blocked by Wordfence (SID 1)	Web App Attack
🇩🇪 the-bot-terminator	2022-07-26 10:45:31 (4 years ago)	20.196.216.103 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, ... show more 20.196.216.103 NGINX Blacklist Filter - Blacklisted for several previous hacking, bad web requests, brute force, exploits Repeat Offender Ban! show less	Bad Web Bot Web App Attack
🇳🇱 tmiland	2022-07-26 10:00:36 (4 years ago)	(wordpress_xmlrpc) WordPress XMLPRC Attack 20.196.216.103 (KR/South Korea/-): 3 in the last 3600 sec ... show more (wordpress_xmlrpc) WordPress XMLPRC Attack 20.196.216.103 (KR/South Korea/-): 3 in the last 3600 secs show less	Blog Spam Brute-Force Web App Attack
Anonymous	2022-07-26 07:48:08 (4 years ago)	Probing for Open Source CMS Components	Hacking Brute-Force
🇺🇸 TTWebhosting	2022-07-26 02:18:01 (4 years ago)	(mod_security) mod_security (id:225170) triggered by 20.196.216.103 (KR/South Korea/Seoul/Seoul/-): ... show more (mod_security) mod_security (id:225170) triggered by 20.196.216.103 (KR/South Korea/Seoul/Seoul/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
🇧🇷 AC - Team	2022-07-26 02:12:07 (4 years ago)	20.196.216.103 - - [26/Jul/2022:03:12:12 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 103 ... show more 20.196.216.103 - - [26/Jul/2022:03:12:12 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 Database.red	2022-07-26 01:36:13 (4 years ago)	[2022-07-26 01:36:12] Exploit probing - //wp-includes/wlwmanifest.xml	Hacking Brute-Force Web App Attack
🇳🇱 CryptoYakari	2022-07-26 00:16:33 (4 years ago)	20.196.216.103 - - [26/Jul/2022:07:16:28 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 ... show more 20.196.216.103 - - [26/Jul/2022:07:16:28 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [26/Jul/2022:07:16:28 +0300] "GET /xmlrpc.php?rsd HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [26/Jul/2022:07:16:29 +0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [26/Jul/2022:07:16:29 +0300] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [26/Jul/2022:07:16:29 +0300] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "- ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇺 nyclee.net	2022-07-25 22:15:26 (4 years ago)	Excessive Request/Connection Hacking Attempt to HoneyPot	Hacking Brute-Force
🇺🇸 tradenet	2022-07-25 22:05:57 (4 years ago)	20.196.216.103 - - [25/Jul/2022:21:05:41 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5. ... show more 20.196.216.103 - - [25/Jul/2022:21:05:41 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [25/Jul/2022:21:05:43 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [25/Jul/2022:21:05:44 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [25/Jul/2022:21:05:46 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.196.216.103 - - [25/Jul/2022:21:05:48 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show less	Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-07-25 22:00:43 (4 years ago)	20.196.216.103 - - [25/Jul/2022:23:00:42 -0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 433 ... show more 20.196.216.103 - - [25/Jul/2022:23:00:42 -0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
🇪🇸 10dencehispahard SL	2022-07-25 12:25:39 (4 years ago)	Abusive use detected	Brute-Force
🇳🇿 Tripwire	2022-07-25 10:12:53 (4 years ago)	Scanning for exploits - //wp-includes/wlwmanifest.xml	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.161.116.217

🇺🇸 74.114.29.220

fe80::e1b9:c786:d5fe:c822

🇹🇳 197.15.147.42

🇩🇪 167.94.145.30

🇭🇰 165.154.225.47

🇮🇳 157.51.33.210

🇪🇬 154.177.102.0

🇮🇳 152.52.198.42

🇨🇳 144.123.15.82

🇱🇹 141.98.10.78

🇮🇳 103.97.164.235

🇬🇧 86.143.138.90

🇺🇸 66.181.39.148

🇫🇷 62.171.173.246

🇬🇧 185.247.137.197

🇬🇧 185.247.137.189

🇨🇱 159.112.138.47

🇨🇳 139.214.251.139

🇺🇸 136.56.34.147