JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.63.216

20.220.63.216 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.63.216

Whois 20.220.63.216

IP Abuse Reports for 20.220.63.216:

This IP address has been reported a total of 129 times from 113 distinct sources. 20.220.63.216 was first reported on July 27th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Epimetheus	2026-07-27 22:34:32 (16 minutes ago)	Unauthorized access attempts: [GET] /wp-content/ [GET] /x.php [GET] /i.php [GET] /u.php [GET] /simp ... show more Unauthorized access attempts: [GET] /wp-content/ [GET] /x.php [GET] /i.php [GET] /u.php [GET] /simple.php [GET] /ms-edit.php [GET] /bolt.php [GET] /edit.php [GET] /wp-content/themes/pridmag/il.php [GET] /a.php [GET] /deepseek_d.php [GET] /goods.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 Zundapper	2026-07-27 22:28:21 (22 minutes ago)	20.220.63.216 - - [28/Jul/2026:00:28:14 +0200] "GET /wp-admin/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (W ... show more 20.220.63.216 - - [28/Jul/2026:00:28:14 +0200] "GET /wp-admin/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:28:17 +0200] "GET /admin/controller/extension/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:28:18 +0200] "GET /cgi-bin/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:28:20 +0200] "GET /wp-includes/fonts/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:28:21 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show less	Web App Attack Port Scan
Anonymous	2026-07-27 22:25:53 (24 minutes ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin	Web App Attack
🇫🇷 masterguru	2026-07-27 22:24:37 (26 minutes ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇩🇪 ramazan	2026-07-27 22:21:09 (29 minutes ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /404.php /about.php /admin.php /adminfuns.php /file.php	Web App Attack Hacking
🇩🇪 Skyrider	2026-07-27 22:21:06 (29 minutes ago)	crowdsecurity/http-probing	Web App Attack
Anonymous	2026-07-27 22:20:37 (30 minutes ago)	wp admin page access attempt ...	Hacking Web App Attack
🇫🇷 Lunix	2026-07-27 22:19:41 (31 minutes ago)		Brute-Force Web App Attack
🇮🇹 madaello	2026-07-27 22:16:48 (33 minutes ago)	20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /inputs.php HTTP/1.1" 404 4226 "-" "Mozilla/5.0 ... show more 20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /inputs.php HTTP/1.1" 404 4226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /admin.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /goods.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /file.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.63.216 - - [28/Jul/2026:00:16:47 +0200] "GET /adminfuns.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan
🇬🇧 Smish	2026-07-27 22:09:52 (40 minutes ago)	HONEYPOT HIT --> Fail2ban time=1785190191 log=2026-07-27T23:09:51+01:00 ip=20.220.63.216 host=tpa-lg ... show more HONEYPOT HIT --> Fail2ban time=1785190191 log=2026-07-27T23:09:51+01:00 ip=20.220.63.216 host=tpa-lg.bya.ac method=GET uri="/admin.php" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ref="-" rid=6a9b37b453fc3e2d62169077fa85b554 show less	Web App Attack
🇨🇦 zXero	2026-07-27 22:08:50 (41 minutes ago)	Fail2Ban automatic report - jail: web-exploit	Brute-Force SSH DDoS Attack
🇩🇪 expandmade.com	2026-07-27 21:53:15 (57 minutes ago)	trolling for resource vulnerabilities [27/Jul/2026:21:53:15 "GET /wp-content/plugins/fix/up.php"]	Web App Attack
🇩🇪 macrob	2026-07-27 21:48:16 (1 hour ago)	2026/07/27 21:48:12 [error] 4144891#4144891: 418395461 access forbidden by rule, client: 20.220.63. ... show more 2026/07/27 21:48:12 [error] 4144891#4144891: 418395461 access forbidden by rule, client: 20.220.63.216, server: binixo.mx, request: "GET /admin.php HTTP/1.1", host: "binixo.mx" 2026/07/27 21:48:13 [error] 4144891#4144891: 418395461 access forbidden by rule, client: 20.220.63.216, server: binixo.mx, request: "GET /adminfuns.php HTTP/1.1", host: "binixo.mx" 2026/07/27 21:48:14 [error] 4144891#4144891: 418395461 access forbidden by rule, client: 20.220.63.216, server: binixo.mx, request: "GET /wp-admin/ HTTP/1.1", host: "binixo.mx" ... show less	Web App Attack
🇪🇸 netfactotum	2026-07-27 21:37:28 (1 hour ago)		Hacking Web App Attack
🇩🇪 ketovoila.pl	2026-07-27 21:32:55 (1 hour ago)	ketovoila.pl web app/PHP backdoor scan: hits=1; unique_paths=1; sample_paths=/wp-content/plugins/fix ... show more ketovoila.pl web app/PHP backdoor scan: hits=1; unique_paths=1; sample_paths=/wp-content/plugins/fix/up.php; UA="Mozilla/5.0"; window=2026-07-27T21:32:55Z..2026-07-27T21:32:55Z show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.231.50.155

🇨🇲 165.210.38.160

🇩🇪 118.193.58.20

🇨🇳 101.126.81.213

🇨🇳 101.96.192.88

🇷🇺 81.211.72.167

🇷🇺 78.138.168.46

🇱🇺 46.151.182.202

🇨🇿 213.192.4.14

🇹🇷 212.154.57.18

🇭🇰 199.45.155.100

🇺🇸 185.223.152.104

🇺🇸 162.214.5.224

🇹🇹 161.0.154.50

🇹🇳 160.157.196.181

🇪🇬 156.197.239.212

🇨🇳 111.162.159.222

🇭🇰 103.14.33.129

🇺🇦 81.162.244.249

🇳🇱 45.148.10.147