JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.100.172.253

20.100.172.253 was found in our database!

This IP was reported 322 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.100.172.253

Whois 20.100.172.253

IP Abuse Reports for 20.100.172.253:

This IP address has been reported a total of 322 times from 266 distinct sources. 20.100.172.253 was first reported on June 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-26 01:07:01 (1 hour ago)	20.100.172.253 - - [26/Jun/2026:04:07:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.100.172.253 - - [26/Jun/2026:04:07:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php?password-protected=login&redirect_to=http%3A%2F%2Flvi-viitala.6kw.fi%2Fwp-content%2Fplugins%2Fhellopress%2Fwp_filemanager.php HTTP/1.1" 404 4606 "-" "-" ... show less	Web App Attack
🇬🇧 andypiper	2026-06-26 01:00:28 (1 hour ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 AvonleaConsulting	2026-06-26 00:53:32 (1 hour ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-06-26 00:48:45 (1 hour ago)	(upload_shell) srv201 Shell upload 20.100.172.253 (NO/Norway/-): 1 in the last 3600 secs; Ports: ; ... show more (upload_shell) srv201 Shell upload 20.100.172.253 (NO/Norway/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 Phenix Info	2026-06-26 00:46:39 (1 hour ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇩🇪 strxmpp	2026-06-26 00:42:24 (1 hour ago)	20.100.172.253 - - [26/Jun/2026:02:42:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.100.172.253 - - [26/Jun/2026:02:42:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4757 "-" "-" ... show less	Bad Web Bot
🇫🇮 Christopher Hughes	2026-06-26 00:36:19 (1 hour ago)	[Fri Jun 26 01:26:12.223771 2026] [proxy_fcgi:error] [pid 1165703:tid 139822383490624] [client 20.10 ... show more [Fri Jun 26 01:26:12.223771 2026] [proxy_fcgi:error] [pid 1165703:tid 139822383490624] [client 20.100.172.253:31259] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:36:19.084409 2026] [proxy_fcgi:error] [pid 1165704:tid 139822742292032] [client 20.100.172.253:31249] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:36:19.153501 2026] [proxy_fcgi:error] [pid 1165704:tid 139821183923776] [client 20.100.172.253:31249] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:36:19.280431 2026] [proxy_fcgi:error] [pid 1165704:tid 139821712401984] [client 20.100.172.253:31249] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:36:19.354921 2026] [proxy_fcgi:error] [pid 1165704:tid 139822207309376] [client 20.100.172.253:31249] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 tecnoacquisti.com	2026-06-26 00:34:54 (1 hour ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
🇮🇪 AutosOnShow	2026-06-26 00:27:06 (1 hour ago)	blocked for webapp attack \| path requested: /wp-ws68.php \| seen at 2026-06-26 00:26:10.886 \|	Web App Attack
🇺🇸 xmission.com	2026-06-26 00:25:30 (1 hour ago)	Blocked by UFW (TCP on 80) Source port: 45588 TTL: 97 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 45588 TTL: 97 Packet length: 52 TOS: 0x00 This report (for 20.100.172.253) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 mw	2026-06-26 00:20:27 (1 hour ago)	GET /wp-admin/css/colors/blue/file.php HTTP/1.1	Web App Attack
Anonymous	2026-06-26 00:17:36 (1 hour ago)	Logfile match	Web App Attack
🇺🇸 Hmorrin	2026-06-26 00:16:21 (1 hour ago)		Port Scan
🇫🇮 Christopher Hughes	2026-06-26 00:16:06 (1 hour ago)	[Fri Jun 26 01:16:05.367768 2026] [proxy_fcgi:error] [pid 1165704:tid 139821175531072] [client 20.10 ... show more [Fri Jun 26 01:16:05.367768 2026] [proxy_fcgi:error] [pid 1165704:tid 139821175531072] [client 20.100.172.253:31275] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:16:05.514938 2026] [proxy_fcgi:error] [pid 1165704:tid 139821687223872] [client 20.100.172.253:31275] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:16:05.580820 2026] [proxy_fcgi:error] [pid 1165704:tid 139822224094784] [client 20.100.172.253:31275] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:16:05.669418 2026] [proxy_fcgi:error] [pid 1165704:tid 139822775862848] [client 20.100.172.253:31275] AH01071: Got error 'Primary script unknown' [Fri Jun 26 01:16:05.755682 2026] [proxy_fcgi:error] [pid 1165704:tid 139821183923776] [client 20.100.172.253:31275] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-06-26 00:11:23 (2 hours ago)	[Fri Jun 26 00:11:23.144235 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/v ... show more [Fri Jun 26 00:11:23.144235 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/var/www/vhosts/mcdermit.org/BOISD/this_is_a_new_hello_world.php' not found or unable to stat [Fri Jun 26 00:11:23.263249 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/var/www/vhosts/mcdermit.org/BOISD/7.php' not found or unable to stat [Fri Jun 26 00:11:23.382129 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/var/www/vhosts/mcdermit.org/BOISD/faze.php' not found or unable to stat [Fri Jun 26 00:11:23.502307 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/var/www/vhosts/mcdermit.org/BOISD/011i.php' not found or unable to stat [Fri Jun 26 00:11:23.621163 2026] [php:error] [pid 2070486] [client 20.100.172.253:62556] script '/var/www/vhosts/mcdermit.org/BOISD/axds.php' not found or unable to stat ... show less	Brute-Force

Showing 1 to 15 of 322 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 34.166.169.65

🇧🇪 34.156.55.116

🇻🇳 2001:ee0:4f44:8aa0:b167:7a48:96fc:b01a

🇩🇴 187.63.156.128

🇨🇳 182.117.48.3

🇷🇺 176.115.140.225

🇵🇰 153.117.6.98

🇨🇳 106.117.104.166

🇮🇳 103.75.157.98

🇺🇸 97.225.63.245

🇫🇮 94.159.112.56

🇺🇸 68.183.130.50

🇳🇱 64.188.77.26

🇷🇺 62.16.41.154

🇩🇪 51.75.155.193

🇻🇳 45.119.212.99

🇧🇷 45.70.164.151

🇺🇸 44.215.219.236

🇧🇪 34.156.248.214

🇧🇪 34.156.248.82