JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.171.55.167

20.171.55.167 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.171.55.167

Whois 20.171.55.167

IP Abuse Reports for 20.171.55.167:

This IP address has been reported a total of 151 times from 121 distinct sources. 20.171.55.167 was first reported on July 24th 2026, and the most recent report was 15 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 helios.live	2026-07-26 07:48:07 (15 seconds ago)	2026/07/26 07:48:06 [error] 2030985#2030985: 2796294 FastCGI sent in stderr: "Primary script unknow ... show more 2026/07/26 07:48:06 [error] 2030985#2030985: 2796294 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.171.55.167, server: kocerroxy.com, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 20.171.55.167 - - [26/Jul/2026:07:48:06 +0000] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2026/07/26 07:48:06 [error] 2030985#2030985: *2796294 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.171.55.167, server: kocerroxy.com, request: "GET /about.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 20.171.55.167 - - [26/Jul/2026:07:48:06 +0000] "GET /about.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ... show less	Web App Attack
🇩🇪 maxpower	2026-07-26 07:46:55 (1 minute ago)	(PERMBLOCK) 20.171.55.167 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 20.171.55.167 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-07-26 07:38:30 (9 minutes ago)	/cgi-bin probe	Web App Attack
🇺🇸 SX Communications	2026-07-26 07:33:56 (14 minutes ago)	Web vulnerability scanning / probing from 20.171.55.167: automated requests for CMS admin paths, log ... show more Web vulnerability scanning / probing from 20.171.55.167: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 8 hits; paths: /.well-known/logs233/index.php, /admin.php, /about.php, /wp-admin/, /lite.php. show less	Port Scan Hacking Web App Attack
🇺🇸 KitsuneTech	2026-07-26 07:33:11 (15 minutes ago)	20.171.55.167 - - [26/Jul/2026:02:33:10 -0500] "GET /wp-content/themes/ HTTP/1.1" 301 290 "-" "Mozil ... show more 20.171.55.167 - - [26/Jul/2026:02:33:10 -0500] "GET /wp-content/themes/ HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 MatStef132	2026-07-26 07:28:03 (20 minutes ago)	MatShield L7: blocked on mathost.eu (suspicious behaviour)	DDoS Attack
🇹🇷 oalver	2026-07-26 07:11:31 (36 minutes ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-admin/maint/ (HTTP 404); 404_flood: 10 requests to /lite.php (HTTP 404) within 60s. First seen: 2026-07-26. Risk score: 45/100. show less	Web App Attack
🇨🇭 rt	2026-07-26 07:06:54 (41 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-07-26 06:00:00 (1 hour ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-07-26 05:14:10 (2 hours ago)	13 attacks on PHP URLs: GET /inputs.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-07-26 04:15:49 (3 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 demomodule	2026-07-26 03:15:46 (4 hours ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇩🇪 macrob	2026-07-26 03:13:19 (4 hours ago)	2026/07/26 03:13:16 [error] 2785883#2785883: 411955992 access forbidden by rule, client: 20.171.55. ... show more 2026/07/26 03:13:16 [error] 2785883#2785883: 411955992 access forbidden by rule, client: 20.171.55.167, server: finami.mx, request: "GET /admin.php HTTP/2.0", host: "finami.mx" 2026/07/26 03:13:17 [error] 2785878#2785878: 411956877 access forbidden by rule, client: 20.171.55.167, server: finami.mx, request: "GET /wp-content/themes/ HTTP/2.0", host: "finami.mx" 2026/07/26 03:13:17 [error] 2785878#2785878: 411994013 access forbidden by rule, client: 20.171.55.167, server: finami.mx, request: "GET /adminfuns.php HTTP/2.0", host: "finami.mx" ... show less	Web App Attack
🇺🇸 Epimetheus	2026-07-26 03:10:41 (4 hours ago)	Unauthorized access attempts: [GET] /inputs.php [GET] /edit.php [GET] /wk/index.php [GET] /admin.ph ... show more Unauthorized access attempts: [GET] /inputs.php [GET] /edit.php [GET] /wk/index.php [GET] /admin.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
Anonymous	2026-07-26 03:09:27 (4 hours ago)	WEBCONDE WEBEXPLOIT 20.171.55.167 (20.171.55.167)	Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.153.236.171

🇺🇦 176.36.134.50

🇺🇸 165.1.64.191

🇺🇸 152.32.236.157

🇨🇳 221.222.16.173

🇵🇪 190.117.232.16

🇫🇮 147.185.133.99

🇮🇳 103.204.167.40

🇦🇿 94.20.62.126

🇵🇱 91.196.111.7

🇫🇷 51.68.236.90

🇺🇸 47.77.198.192

🇬🇧 35.203.210.129

🇰🇷 15.165.200.243

🇩🇪 193.124.20.237

🇫🇮 147.185.133.179

🇫🇷 91.196.152.119

🇷🇺 90.150.93.151

🇺🇸 65.49.20.111

🇻🇳 14.191.248.22