JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.100.175.163

20.100.175.163 was found in our database!

This IP was reported 612 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.100.175.163

Whois 20.100.175.163

IP Abuse Reports for 20.100.175.163:

This IP address has been reported a total of 612 times from 266 distinct sources. 20.100.175.163 was first reported on August 22nd 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 Abuse Buster	2026-08-26 09:45:53 (2 minutes ago)	20.100.175.163 - [26/Aug/2026:11:45:52 +0200] "GET /inputs.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Wi ... show more 20.100.175.163 - [26/Aug/2026:11:45:52 +0200] "GET /inputs.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.100.175.163 Forwared for: 20.100.175.163 20.100.175.163 - [26/Aug/2026:11:45:52 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.100.175.163 Forwared for: 20.100.175.163 20.100.175.163 - [26/Aug/2026:11:45:52 +0200] "GET /goods.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.100.175.163 Forwared for: 20.100.175.163 ... show less	Web App Attack
🇮🇹 madaello	2026-08-26 09:42:23 (5 minutes ago)	20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /inputs.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 ... show more 20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /inputs.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /admin.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /goods.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /file.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:11:42:22 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0 ... show less	Port Scan
🇩🇪 Ha1fdan	2026-08-26 09:33:57 (14 minutes ago)	[2026-08-26T09:33:53Z] 20.100.175.163 '<URI>'	Brute-Force Web App Attack
Anonymous	2026-08-26 09:33:55 (14 minutes ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 dynamix	2026-08-26 09:21:36 (26 minutes ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-26 09:10:07 (38 minutes ago)	Fail2Ban nginx-botsearch on Security-Instance. Persistent malicious activity detected. Evidence: /va ... show more Fail2Ban nginx-botsearch on Security-Instance. Persistent malicious activity detected. Evidence: /var/log/nginx/access.log:20.100.175.163 - - [26/Aug/2026:11:10:06 +0200] "GET /bthil.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" /var/log/nginx/access.log:20.100.175.163 - - [26/Aug/2026:11:10:06 +0200] "GET /cgi-bin/ HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" /var/log/nginx/access.log:20.100.175.163 - - [26/Aug/2026:11:10:06 +0200] "GET /x.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" /var/log/nginx/acces show less	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-08-26 09:03:23 (44 minutes ago)	20.100.175.163 - - [26/Aug/2026:10:03:21 +0100] "GET /cgi-bin/ HTTP/1.1" 404 1006 "-" "Mozilla/5.0 ( ... show more 20.100.175.163 - - [26/Aug/2026:10:03:21 +0100] "GET /cgi-bin/ HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇺🇸 slay3r9903	2026-08-26 08:57:00 (51 minutes ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
Anonymous	2026-08-26 08:44:10 (1 hour ago)	20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /inputs.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 ... show more 20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /inputs.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /admin.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /goods.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /file.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [26/Aug/2026:10:44:06 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0 ... show less	DDoS Attack
🇩🇪 ramazan	2026-08-26 08:42:13 (1 hour ago)	Fail2Ban: nginx-4xx \| Failures: 2 \| Log: /inputs.php	Web App Attack Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-08-26 08:15:27 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇨🇦 alexbfr	2026-08-26 07:43:59 (2 hours ago)	Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.	Web App Attack
🇮🇳 evicky2002	2026-08-26 07:31:11 (2 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 Epimetheus	2026-08-26 07:00:32 (2 hours ago)	Unauthorized access attempts: [GET] /wp-admin/images/chosen.php [GET] /wp-admin/images/index.php [G ... show more Unauthorized access attempts: [GET] /wp-admin/images/chosen.php [GET] /wp-admin/images/index.php [GET] /wp-admin/css/colors/blue/admin.php [GET] /x.php [GET] /403.php [GET] /vv.php [GET] /wp-content/about.php [GET] /.well-known/acme-challenge/index.php [GET] /k.php [GET] /css/xmrlpc.php [GET] /wp-content/plugins/pwnd/1.php [GET] /hehehehe.php [GET] /site/wp-admin/ [GET] /wp-admin/user/xmrlpc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 Baking333	2026-08-26 06:59:04 (2 hours ago)	[redacted] 20.100.175.163 - - [26/Aug/2026:07:59:01 +0100] "GET /wp-content/themes/[redacted] HTTP/1 ... show more [redacted] 20.100.175.163 - - [26/Aug/2026:07:59:01 +0100] "GET /wp-content/themes/[redacted] HTTP/1.1" 302 1554 0/82601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 20.100.175.163 - - [26/Aug/2026:07:59:02 +0100] "GET /[redacted] HTTP/1.1" 302 1554 0/292409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 612 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:f804:36::

🇳🇱 213.176.24.72

🇮🇷 212.33.195.84

🇺🇸 195.184.76.85

🇺🇸 195.184.76.84

🇺🇸 195.184.76.62

🇨🇴 186.121.139.227

🇳🇱 185.242.226.72

🇨🇦 172.71.120.31

🇲🇾 47.250.53.69

🇩🇪 47.245.141.200

🇳🇱 45.156.128.59

🇬🇧 35.203.211.80

🇺🇸 20.65.194.123

🇺🇸 20.15.164.165

🇱🇹 213.176.26.77

🇺🇸 195.184.76.73

🇨🇴 179.12.76.192

🇩🇪 167.94.145.23

🇰🇷 118.37.214.187