JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.170.16.216

20.170.16.216 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.170.16.216

Whois 20.170.16.216

IP Abuse Reports for 20.170.16.216:

This IP address has been reported a total of 131 times from 87 distinct sources. 20.170.16.216 was first reported on July 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-07-27 15:39:23 (12 hours ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 20.170.16.216 - - [25/Jul/20 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 20.170.16.216 - - [25/Jul/2026:03:21:47 +0300] "GET /alfa.php HTTP/1.1" 404 2426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-07-27 04:16:53 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇦🇹 penguin-solutions.at	2026-07-26 07:31:04 (1 day ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇵🇱 miriks	2026-07-26 07:05:46 (1 day ago)	Automated scan detected: GET /wp-admin/css/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ... show more Automated scan detected: GET /wp-admin/css/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇫🇮 Christopher Hughes	2026-07-26 06:48:00 (1 day ago)	[Sun Jul 26 07:47:59.532788 2026] [proxy_fcgi:error] [pid 2221985:tid 139825076237888] [client 20.17 ... show more [Sun Jul 26 07:47:59.532788 2026] [proxy_fcgi:error] [pid 2221985:tid 139825076237888] [client 20.170.16.216:1534] AH01071: Got error 'Primary script unknown' [Sun Jul 26 07:47:59.625185 2026] [proxy_fcgi:error] [pid 2221985:tid 139826007369280] [client 20.170.16.216:1534] AH01071: Got error 'Primary script unknown' [Sun Jul 26 07:47:59.656507 2026] [proxy_fcgi:error] [pid 2221985:tid 139826015761984] [client 20.170.16.216:1534] AH01071: Got error 'Primary script unknown' [Sun Jul 26 07:47:59.688005 2026] [proxy_fcgi:error] [pid 2221985:tid 139825453712960] [client 20.170.16.216:1534] AH01071: Got error 'Primary script unknown' [Sun Jul 26 07:47:59.719491 2026] [proxy_fcgi:error] [pid 2221985:tid 139825998976576] [client 20.170.16.216:1534] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇱🇻 garmtech.com	2026-07-26 06:47:25 (1 day ago)	IM360 WAF: Block abusive scripts MV:/wp-admin/maint/index.php	Web App Attack
🇮🇩 soc-yk	2026-07-26 05:42:31 (1 day ago)	Type: suspicious_network_activity Risk: 100 Events: 239 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 239 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇵🇱 lns.bz	2026-07-26 04:23:40 (2 days ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-07-26 04:07:45 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-26 03:40:22 (2 days ago)	20.170.16.216 - - [26/Jul/2026:06:40:22 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 788 "-" ... show more 20.170.16.216 - - [26/Jul/2026:06:40:22 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 CryptoYakari	2026-07-26 01:27:00 (2 days ago)	20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /test1.php HTTP/1.0" 404 5496 "-" "Mozilla/5.0 ( ... show more 20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /test1.php HTTP/1.0" 404 5496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /wp-admin/maint/index.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /wp-content/uploads/min.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /zoom1.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.170.16.216 - - [26/Jul/2026:04:26:56 +0300] "GET /lock360.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇺🇸 xmission.com	2026-07-26 01:06:38 (2 days ago)	20.170.16.216 - - [25/Jul/2026:19:06:38 -0600] "GET /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 ( ... show more 20.170.16.216 - - [25/Jul/2026:19:06:38 -0600] "GET /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 bazter.pro	2026-07-26 00:52:25 (2 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-26 00:51:04 (2 days ago)	20.170.16.216 - - [26/Jul/2026:01:51:01 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5. ... show more 20.170.16.216 - - [26/Jul/2026:01:51:01 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇱🇻 garmtech.com	2026-07-26 00:49:47 (2 days ago)	Attempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unaut ... show more Attempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.8

🇺🇸 66.132.186.226

🇫🇮 2a01:4f9:4b:1513::2

🇰🇷 222.107.156.227

🇰🇷 211.253.31.30

🇳🇱 192.42.116.18

🇸🇪 185.246.130.20

🇲🇾 180.74.142.250

🇧🇷 177.91.72.2

🇻🇳 113.167.37.224

🇨🇳 106.12.127.250

🇺🇸 103.144.245.123

🇺🇸 99.6.104.157

🇺🇸 66.132.186.220

🇺🇸 23.94.28.177

🇷🇺 178.213.114.194

🇭🇰 165.154.6.224

🇺🇸 162.216.150.159

🇺🇸 147.185.132.120

🇨🇳 116.53.130.4