20.196.90.213

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
91 reports
81 reporters · latest 10 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇰🇷 Korea (the Republic of)
City
Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.196.90.213 has been reported 91 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV
Total reports
91 from 81 distinct reporters
First reported
Most recent report
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 GEDAL
Fail2ban webexploits @ <hostname> : 20.196.90.213 - - [26/Dec/2025:18:43:51 +0100] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 162 "-" "-"
Brute-Force SSH
Anonymous
Web App Attack
🇮🇩 sockominfo
Known webshell filename detected (Indonesian hacker pattern). Threat Score: 6.5/10 (MEDIUM). Reported by TangerangKota-CSIRT
Email Spam Hacking
🇮🇩 sockominfo
Known webshell filename detected (Indonesian hacker pattern). Threat Score: 6.6/10 (MEDIUM). Reported by TangerangKota-CSIRT
Email Spam Hacking
🇬🇧 [email protected]
...
Brute-Force SSH
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2025-12-26
Hacking Web App Attack SSH
Anonymous
DDoS Attack
🇬🇧 Greg Poulson
Our website was hit by this DDOS at a rate of 286 in 5 minutes.
DDoS Attack Web Spam Brute-Force
Anonymous
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
Hacking Web App Attack
Anonymous
(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 20.196.90.213 (KR/South Korea/-)
Brute-Force
🇦🇺 paulshipley.com.au
Web App Attack
🇩🇪 McClay
Web App Attack
🇳🇱 ParaBug
20.196.90.213 - - [26/Dec/2025:21:22:28 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 525 "-" "-" ...
Phishing Brute-Force Web App Attack
🇬🇧 Apache
(mod_security) mod_security (id:20000010) triggered by 20.196.90.213 (KR/South Korea/-): 5 in the last 300 secs
Brute-Force Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 216.40.75.211
🇬🇧 193.176.29.19
🇩🇪 193.124.20.230
🇰🇷 119.204.122.94
🇨🇭 107.189.7.186
🇺🇸 71.6.135.131
🇰🇷 221.166.48.149
🇳🇱 200.138.46.78
🇺🇸 199.165.159.57
🇺🇦 195.135.246.240
🇫🇮 193.142.38.58
🇲🇽 189.216.235.72
🇫🇮 172.83.252.189
🇫🇮 147.185.133.24
🇺🇸 137.184.214.131
🇩🇪 109.160.32.40
🇳🇱 93.88.156.8
🇺🇸 69.164.217.74
🇺🇸 67.205.170.84
🇶🇦 34.18.137.251
feedback