JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.39.201.65

20.39.201.65 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.39.201.65

Whois 20.39.201.65

IP Abuse Reports for 20.39.201.65:

This IP address has been reported a total of 70 times from 60 distinct sources. 20.39.201.65 was first reported on September 4th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-16 20:08:50 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-15 20:08:48 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-09-15 04:12:00 (11 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 14. 22:28:32 Source IP: 20.39. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 14. 22:28:32 Source IP: 20.39.201.65 Portion of the log(s): 20.39.201.65 - [14/Sep/2025:22:28:31 +0200] "GET /file7.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:30 +0200] "GET /file4.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:30 +0200] "GET /file2.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:30 +0200] "GET /file5.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:30 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:30 +0200] "GET /dejavu.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:29 +0200] "GET /lock360.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:29 +0200] "GET /lc.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:29 +0200] "GET /CLA.php HTTP/1.1" 404 153 "-" "-" 20.39.201.65 - [14/Sep/2025:22:28:29 +0200] "GET /aa.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇸🇪 Lemmy	2025-09-14 23:13:21 (11 months ago)		Web App Attack
Anonymous	2025-09-14 22:51:41 (11 months ago)	[Mon Sep 15 00:51:40.407177 2025] [authz_core:error] [pid 31369] [client 20.39.201.65:8302] AH01630: ... show more [Mon Sep 15 00:51:40.407177 2025] [authz_core:error] [pid 31369] [client 20.39.201.65:8302] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 15 00:51:40.625211 2025] [authz_core:error] [pid 31369] [client 20.39.201.65:8302] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 15 00:51:40.848841 2025] [authz_core:error] [pid 31369] [client 20.39.201.65:8302] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 lnklnx	2025-09-14 22:30:23 (11 months ago)	www.lnklnx.com:80 20.39.201.65 - - [14/Sep/2025:17:30:20 -0500] "GET /wp-content/plugins/hellopress/ ... show more www.lnklnx.com:80 20.39.201.65 - - [14/Sep/2025:17:30:20 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 607 "-" "-" ... show less	Web App Attack
🇩🇪 ghostwarriors	2025-09-14 22:20:05 (11 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇮 Mr-Money	2025-09-14 21:02:14 (11 months ago)	20.39.201.65 - - [14/Sep/2025:23:02:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.39.201.65 - - [14/Sep/2025:23:02:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 461 "-" "-" 20.39.201.65 - - [14/Sep/2025:23:02:09 +0200] "GET /wp-content/plugins/lwbdene/index.php HTTP/1.1" 404 461 "-" "-" 20.39.201.65 - - [14/Sep/2025:23:02:13 +0200] "GET /wp-mn.php HTTP/1.1" 404 177 "-" "-" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇱🇻 garmtech.com	2025-09-14 20:34:40 (11 months ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇷 Campus France	2025-09-14 19:53:56 (11 months ago)	[Sun Sep 14 21:53:50.947437 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var ... show more [Sun Sep 14 21:53:50.947437 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var/www/nextcloud/file8.php' not found or unable to stat [Sun Sep 14 21:53:51.930780 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var/www/nextcloud/ahax.php' not found or unable to stat [Sun Sep 14 21:53:53.932431 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var/www/nextcloud/aa.php' not found or unable to stat [Sun Sep 14 21:53:54.962883 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var/www/nextcloud/CLA.php' not found or unable to stat [Sun Sep 14 21:53:55.972163 2025] [php7:error] [pid 1021484] [client 20.39.201.65:3365] script '/var/www/nextcloud/lc.php' not found or unable to stat ... show less	Web App Attack
🇩🇪 updown.io	2025-09-14 18:15:41 (11 months ago)	{"level":"info","ts":1757872166.759772,"logger":"http.log.access.log0","msg":"handled request","requ ... show more {"level":"info","ts":1757872166.759772,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.39.201.65","remote_port":"5430","client_ip":"20.39.201.65","proto":"HTTP/1.1","method":"GET","host":"rwfj.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.00004406,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://rwfj.status.updown.io/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[]}} {"level":"info","ts":1757872168.301604,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.39.201.65","remote_port":"4786","client_ip":"20.39.201.65","proto":"HTTP/1.1","method":"GET","host":"rwfj.status.updown.io","uri":"/file8.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000043589,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://rwfj.st ... show less	DDoS Attack Web App Attack
🇸🇬 Charles	2025-09-14 16:57:18 (11 months ago)	20.39.201.65 - - [15/Sep/2025:00:57:16 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.39.201.65 - - [15/Sep/2025:00:57:16 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2025-09-14 16:31:44 (11 months ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2025-09-14 15:20:00 (11 months ago)	wordpress-trap	Web App Attack
🇳🇱 homeshowdomain.nl	2025-09-13 21:59:06 (11 months ago)	Auto-ban: >3000 req/min op 2025-09-13	Hacking Web App Attack SSH

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.34.225.217

🇫🇷 2400:cb00:533:1000:b63e:edde:bdd3:18

🇹🇼 220.132.149.61

🇺🇸 207.90.244.4

🇧🇷 179.64.43.210

🇭🇰 165.154.225.20

🇺🇸 162.216.150.148

🇲🇽 158.23.184.117

🇻🇳 125.212.217.143

🇺🇸 73.130.77.134

🇺🇸 52.173.121.69

🇩🇪 46.101.180.162

🇳🇱 45.154.98.191

🇺🇸 3.234.254.133

🇺🇸 199.47.82.20

🇺🇸 167.172.153.138

🇮🇳 103.207.9.246

🇵🇰 103.82.120.215

🇳🇱 77.239.124.252

🇮🇳 66.116.242.235