JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.81.113

20.196.81.113 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.81.113

Whois 20.196.81.113

IP Abuse Reports for 20.196.81.113:

This IP address has been reported a total of 71 times from 60 distinct sources. 20.196.81.113 was first reported on September 3rd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 igerman	2025-10-18 16:13:29 (10 months ago)	caddy probes: [web] GET /as4AaPasd.php -> 403 [web] GET /w3llstore.php -> 403 [web] GET /shell202506 ... show more caddy probes: [web] GET /as4AaPasd.php -> 403 [web] GET /w3llstore.php -> 403 [web] GET /shell20250630.php -> 403 [web] GET /aaaa.php -> 403 [web] GET /css.php -> 403 [web] GET /.lajuju.php -> 403 [wordpress] GET /wp-gr.php -> 403 [web] GET /ffile.php -> 403 [web] GET /trd.php -> 403 [web] GET /goh.php -> 403 show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-05 20:08:37 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 homeshowdomain.nl	2025-09-04 21:59:11 (11 months ago)	Auto-ban: >500 bad req/min on 2025-09-03	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-09-04 20:08:37 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-09-04 05:13:03 (11 months ago)	84 attacks on PHP URLs: GET /uploan.php HTTP/1.1	Web App Attack
🇮🇹 mauri64	2025-09-03 23:30:09 (11 months ago)	Troppi errori Apache (68)	Hacking
🇳🇱 homeshowdomain.nl	2025-09-03 21:59:07 (11 months ago)	Auto-ban: >3000 req/min op 2025-09-03	Hacking Web App Attack SSH
🇩🇪 ghostwarriors	2025-09-03 17:20:07 (11 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2025-09-03 16:44:04 (11 months ago)		Web App Attack
Anonymous	2025-09-03 16:35:34 (11 months ago)	20.196.81.113 - - [03/Sep/2025:16:35:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.196.81.113 - - [03/Sep/2025:16:35:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:32 +0000] "GET /pm.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:32 +0000] "GET /vxrl.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:32 +0000] "GET /live.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:33 +0000] "GET /Lux.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:33 +0000] "GET /ext.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" 20.196.81.113 - - [03/Sep/2025:16:35:34 +0000] "GET /shorw.php HTTP/1.1" 403 162 "-" "-" "TLSv1.2" "ECDHE-RSA-AES256-GCM-SHA384" ... show less	Brute-Force SSH
🇩🇪 todix	2025-09-03 16:31:33 (11 months ago)	WebAttack or semilar from 20.196.81.113	Web App Attack
Anonymous	2025-09-03 16:30:21 (11 months ago)	Unsollicted Connect (Location-1)	Port Scan
🇫🇷 Campus France	2025-09-03 15:36:15 (11 months ago)	[Wed Sep 03 17:36:13.796688 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/va ... show more [Wed Sep 03 17:36:13.796688 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/var/www/html/campus-perpignan/pm.php' not found or unable to stat [Wed Sep 03 17:36:14.217215 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/var/www/html/campus-perpignan/vxrl.php' not found or unable to stat [Wed Sep 03 17:36:14.637745 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/var/www/html/campus-perpignan/live.php' not found or unable to stat [Wed Sep 03 17:36:15.058176 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/var/www/html/campus-perpignan/Lux.php' not found or unable to stat [Wed Sep 03 17:36:15.478955 2025] [php7:error] [pid 3058787] [client 20.196.81.113:1934] script '/var/www/html/campus-perpignan/ext.php' not found or unable to stat ... show less	Web App Attack
🇦🇺 aranguren.org	2025-09-03 15:29:11 (11 months ago)	20.196.81.113 - - [04/Sep/2025:01:29:10 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.196.81.113 - - [04/Sep/2025:01:29:10 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 999 "-" "-" 20.196.81.113 - - [04/Sep/2025:01:29:10 +1000] "GET /pm.php HTTP/1.1" 404 16 "-" "-" 20.196.81.113 - - [04/Sep/2025:01:29:11 +1000] "GET /vxrl.php HTTP/1.1" 404 16 "-" "-" 20.196.81.113 - - [04/Sep/2025:01:29:11 +1000] "GET /live.php HTTP/1.1" 404 16 "-" "-" 20.196.81.113 - - [04/Sep/2025:01:29:11 +1000] "GET /Lux.php HTTP/1.1" 404 16 "-" "-" 20.196.81.113 - - [04/Sep/2025:01:29:11 +1000] "GET /ext.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇫🇷 mouafiq	2025-09-03 14:59:33 (11 months ago)	2025-09-03 14:59:30,451 8196 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:30] "GET /wp-cont ... show more 2025-09-03 14:59:30,451 8196 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:30] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 - 1 0.002 0.007 2025-09-03 14:59:30,965 2012 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:30] "GET /pm.php HTTP/1.0" 404 - 1 0.002 0.006 2025-09-03 14:59:31,497 2012 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:31] "GET /vxrl.php HTTP/1.0" 404 - 1 0.002 0.028 2025-09-03 14:59:32,008 8196 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:32] "GET /shorw.php HTTP/1.0" 404 - 1 0.002 0.005 2025-09-03 14:59:32,517 8196 INFO ? werkzeug: 20.196.81.113 - - [03/Sep/2025 14:59:32] "GET /gifclass.php HTTP/1.0" 404 - 1 0.002 0.004 show less	Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.122

🇵🇰 223.123.65.54

🇨🇳 220.189.209.18

🇩🇪 213.209.159.25

🇬🇧 87.106.63.76

🇨🇳 49.77.20.217

🇺🇸 35.171.117.160

10.145.172.135

10.98.93.118

192.168.226.97

192.168.220.176

🇺🇸 172.182.224.160

172.16.40.22

🇮🇳 119.18.48.74

🇸🇪 104.23.223.52

100.113.154.154

100.94.123.176

100.88.114.204

🇷🇴 80.94.92.55

🇺🇸 66.132.172.197