JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.196.93.105

20.196.93.105 was found in our database!

This IP was reported 822 times. Confidence of Abuse is 1%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.196.93.105

Whois 20.196.93.105

IP Abuse Reports for 20.196.93.105:

This IP address has been reported a total of 822 times from 395 distinct sources. 20.196.93.105 was first reported on December 6th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Scampi_ml	2026-06-10 13:17:48 (2 weeks ago)	8x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 8x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇩🇪 SwinT	2026-04-22 15:03:29 (2 months ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
Anonymous	2025-12-15 08:05:39 (6 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
Anonymous	2025-12-14 19:47:22 (6 months ago)	$f2bV_matches	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-13 20:10:26 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇪🇸 Gem	2025-12-12 23:09:49 (6 months ago)	Unauthorized web scan.	Web App Attack
🇬🇧 sc user	2025-12-12 07:59:42 (6 months ago)	Fail2Ban nginx: HTTP probing / bad web bot or scanner behaviour against public web server. Technical ... show more Fail2Ban nginx: HTTP probing / bad web bot or scanner behaviour against public web server. Technical log details and local server identifiers intentionally omitted for privacy. show less	Port Scan Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-12-12 05:01:48 (6 months ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2025-12-12 04:46:03 (6 months ago)		Bad Web Bot
🇹🇷 rtbh.com.tr	2025-12-11 20:10:24 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇺 paulshipley.com.au	2025-12-11 17:18:46 (6 months ago)	levellapromotions.com.au:443 20.196.93.105 - - [12/Dec/2025:04:17:54 +1100] "GET /.well-known/acme-c ... show more levellapromotions.com.au:443 20.196.93.105 - - [12/Dec/2025:04:17:54 +1100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 161141 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" levellapromotions.com.au:443 20.196.93.105 - - [12/Dec/2025:04:17:55 +1100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 158302 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" levellapromotions.com.au:443 20.196.93.105 - - [12/Dec/2025:04:17:57 +1100] "GET /.well-known/pki-validation/ HTTP/1.1" 404 150245 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" levellapromotions.com.au:443 20.196.93.105 - - [12/Dec/2025:04:17:59 +1100] "GET /1.php HTTP/1.1" 404 150223 "https://www.goog ... show less	Web App Attack
🇩🇪 todix	2025-12-11 17:00:59 (6 months ago)	WebAttack or semilar from 20.196.93.105	Web App Attack
🇬🇧 SecondEdge	2025-12-11 15:52:29 (6 months ago)	A web attack was detected from 20.196.93.105 (South Korea / Seoul / Seoul) against second-edge.co.uk ... show more A web attack was detected from 20.196.93.105 (South Korea / Seoul / Seoul) against second-edge.co.uk (Admin,CGI-BIN,PHPUnit,Wordpress,Wordpress Admin,XMLRPC) over 2m15s. show less	Web App Attack
🇫🇷 Lacrimosa99	2025-12-11 15:51:05 (6 months ago)	20.196.93.105 - - [11/Dec/2025:16:50:54 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1. ... show more 20.196.93.105 - - [11/Dec/2025:16:50:54 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 196 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.196.93.105 - - [11/Dec/2025:16:50:57 +0100] "GET /admin.php HTTP/1.1" 404 267 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.196.93.105 - - [11/Dec/2025:16:51:04 +0100] "GET /images/admin.php HTTP/1.1" 404 363 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ... show less	Web Spam
🇩🇪 big-cloud.nl	2025-12-11 15:12:45 (6 months ago)	Try to access /stellingia/vendor/phpunit/phpunit/src/Util/PHP/as.php	Web App Attack

Showing 1 to 15 of 822 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.23

🇲🇾 211.25.241.153

🇺🇸 209.222.101.194

🇬🇧 188.240.59.5

🇺🇸 147.185.132.29

🇺🇸 66.132.195.76

🇺🇸 66.132.172.225

🇹🇼 198.235.24.88

🇵🇪 190.223.60.209

🇧🇷 190.52.73.239

🇺🇸 159.89.184.232

🇨🇳 111.17.162.242

🇩🇪 69.5.169.132

🇺🇸 65.111.13.120

🇮🇳 4.240.96.30

🇬🇧 193.163.125.124

🇪🇨 190.154.54.66

🇦🇲 176.32.193.16

🇸🇪 171.25.158.57

🇫🇷 167.86.80.37