20.196.90.160
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Seoul, Seoul
No reports in the last 60 days
20.196.90.160 has been reported 106 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
106 from
92 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Nrbrtkls |
SSH honeypot (endlessh tarpit) connection from 20.196.90.160
|
Port Scan SSH | |
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 20 malicious requests on 2025-12-24 (e.g., env/backup probes, brute-force, or error bursts).
|
Hacking Web App Attack SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| Anonymous |
FortiWeb WAF: 56 attacks detected. Threat Score: 5600. Types: Client Management(28), GEO IP(28). Origin: Republic Of Korea.
|
Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2025-12-24
|
Hacking Web App Attack SSH | |
| Anonymous |
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
|
Hacking Web App Attack | |
| 🇳🇱 JCB |
20.196.90.160 - - [24/Dec/2025:16:02:32 +0200] "GET /neshe HTTP/1.1" 404 416 "-" "-"
20.196.90.160 - - [24/Dec/2025:16:02:32 +0200] "GET /byp8.php HTTP/1.1" 404 416 "-" "-"
...
|
Web App Attack | |
| 🇺🇸 MKWServer |
Reported from Imunify360 blocklist
|
Brute-Force SSH | |
| 🇫🇷 dwmp |
Url probing: /qaez.php56
|
Web App Attack | |
| 🇵🇱 Roper123 |
WP-LOGIN brute-force
|
Brute-Force Web App Attack | |
| 🇩🇪 on-com |
URL scan
|
Brute-Force Web App Attack | |
| 🇷🇺 DZBOT |
Website Scanning / Scraping
|
Bad Web Bot Exploited Host Web App Attack | |
| 🇧🇾 lns.bz |
Too many 404 requests [BY]
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown