JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.171.103.96

Neutral Activity

Abuse Confidence Score

0% Low Risk

266 reports

202 reporters · latest 10 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.171.103.96 has been reported 266 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

266 from 202 distinct reporters

First reported

November 13th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-15 08:05:21 UTC · (10 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇺🇸 bazter.pro	2025-12-08 02:18:30 UTC · (11 months ago)	Suspicious Datacenter (Microsoft Corporation); DC: Microsoft Corporation [Paths: 65]	Web App Attack
🇩🇪 itsolon	2025-11-18 09:54:41 UTC · (11 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇭🇺 DumaNet	2025-11-16 05:38:00 UTC · (11 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 13. 23:30:25 Source IP: 20.171.103.96 Portion of the log(s): 20.171.103.96 - [13/Nov/2025:23:30:22 +0100] "GET /user.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 13. 23:30:25 Source IP: 20.171.103.96 Portion of the log(s): 20.171.103.96 - [13/Nov/2025:23:30:22 +0100] "GET /user.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:22 +0100] "GET /hehe.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:22 +0100] "GET /goods.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:22 +0100] "GET /randkeyword.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:21 +0100] "GET /about.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:21 +0100] "GET /abcd.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:21 +0100] "GET /index.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:21 +0100] "GET /meta.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:21 +0100] "GET /file.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:23:30:20 +0100] "GET /admin.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2025-11-16 05:22:00 UTC · (11 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 13. 20:27:06 Source IP: 20.171.103.96 Portion of the log(s): 20.171.103.96 - [13/Nov/2025:20:27:06 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [1 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 13. 20:27:06 Source IP: 20.171.103.96 Portion of the log(s): 20.171.103.96 - [13/Nov/2025:20:27:06 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:06 +0100] "GET /xleet.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:06 +0100] "GET /nc4.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:05 +0100] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:05 +0100] "GET /info.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:05 +0100] "GET /images/index.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:05 +0100] "GET /flower.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:04 +0100] "GET /file.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:04 +0100] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 20.171.103.96 - [13/Nov/2025:20:27:04 +0100] "GET /cgi-bin/ HTTP/1.1" 404 show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-11-15 20:09:56 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 itsolon	2025-11-15 19:39:10 UTC · (11 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇺🇸 octageeks.com	2025-11-15 05:06:27 UTC · (11 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇨🇴 adalbertoreyes.org	2025-11-15 04:58:40 UTC · (11 months ago)	CategoryPortScan	Port Scan
🇳🇱 Site.eu	2025-11-15 02:20:52 UTC · (11 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 tecnicorioja	2025-11-14 23:01:14 UTC · (11 months ago)	wp-login attack [14/Nov/2025:13:52:18	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-14 20:09:55 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇪 Jim Keir	2025-11-14 13:44:08 UTC · (11 months ago)	2025-11-14 13:44:07 20.171.103.96 File scanning, blocking 20.171.103.96 for 5 minutes	Web App Attack
🇩🇪 hbrks	2025-11-14 13:25:46 UTC · (11 months ago)	1 attack(s) detected, such as these: {"event":"nginx_block","ip":"20.171.103.96","host":"p4u.xyz","request":"GET /wp-includes/widgets/ HTTP/1.1","user_agent":"","reason":"404","timestamp":"2025-11-14T13:25:46 00:00","logentry":"p4u.xyz 20.171.103.96 ... show more 1 attack(s) detected, such as these: {"event":"nginx_block","ip":"20.171.103.96","host":"p4u.xyz","request":"GET /wp-includes/widgets/ HTTP/1.1","user_agent":"","reason":"404","timestamp":"2025-11-14T13:25:46 00:00","logentry":"p4u.xyz 20.171.103.96 - - [14/Nov/2025:13:25:46 0000] GET /wp-includes/widgets/ HTTP/1.1 404 0 - - 172.25.79.54:5000 matched:-"} * Report Details : https://p4u.xyz/FCEE1FXVT35/1 IP Details *: https://p4u.xyz/FCEE1FXVT35/2 show less	Web Spam Hacking Bad Web Bot
🇬🇧 adnscom.net	2025-11-14 12:51:50 UTC · (11 months ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 213.5.130.217

🇨🇭 209.99.190.186

🇧🇷 205.210.31.159

🇧🇴 190.186.25.115

🇺🇸 157.230.223.68

🇨🇳 118.196.114.236

🇨🇳 115.231.50.242

🇫🇷 104.253.134.203

🇸🇬 2a13:f43:3209:45f1:f876:5879:d867:9317

🇺🇸 216.25.90.61

🇳🇱 204.76.203.214

🇧🇷 189.63.4.161

🇪🇨 185.181.33.67

🇳🇱 172.94.9.55

🇧🇪 158.173.67.12

🇺🇸 157.230.237.176

🇰🇷 58.122.253.78

🇮🇩 43.173.51.138

🇺🇸 34.139.64.54

🇺🇦 31.42.171.240