JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.238.64.167

20.238.64.167

Recent Activity

263 reports found in our database

4% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇮🇪 Ireland

City

Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.238.64.167:

This IP address has been reported a total of 263 times from 204 distinct sources. 20.238.64.167 was first reported on April 9th 2026, and the most recent report was 12 hours ago. In the last 60 days, the only reporter location was: Canada with 11 reports. The most common categories in these recent reports were: Brute-Force 11 times; SSH 11 times; DDoS Attack 11 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-10 17:09:00 (5 months ago)	...	Web App Attack
🇩🇪 london2038.com	2026-04-10 17:07:36 (5 months ago)	Probing for exploits 20.238.64.167 - - [10/Apr/2026:19:07:02 +0200] "GET /wp-content/plugins/hellopr ... show more Probing for exploits 20.238.64.167 - - [10/Apr/2026:19:07:02 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 20.238.64.167 - - [10/Apr/2026:19:07:32 +0200] "GET /wp-includes/Ipv6.php HTTP/1.1" 301 169 "-" "-" show less	Hacking Web App Attack
🇺🇸 infra-monitor	2026-04-10 17:00:06 (5 months ago)	Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, wp-sensitive-paths, +5 mo ... show more Automated ban via infra-monitor: webshell-high-confidence, webshell-probe, wp-sensitive-paths, +5 more show less	Port Scan Hacking Web App Attack
🇺🇸 Gabriel Camargo	2026-04-10 16:49:05 (5 months ago)	20.238.64.167 - - [10/Apr/2026:11:49:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.238.64.167 - - [10/Apr/2026:11:49:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" 20.238.64.167 - - [10/Apr/2026:11:49:04 -0500] "GET /press.php HTTP/1.1" 404 162 "-" "-" 20.238.64.167 - - [10/Apr/2026:11:49:04 -0500] "GET /dx.php HTTP/1.1" 404 162 "-" "-" ... show less	Brute-Force SSH
🇦🇺 paulshipley.com.au	2026-04-10 16:48:35 (5 months ago)	paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:29 +1000] "GET /press.php HTTP/1.1" 404 ... show more paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:29 +1000] "GET /press.php HTTP/1.1" 404 70420 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:31 +1000] "GET /dx.php HTTP/1.1" 404 70417 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:34 +1000] "GET /ga.php HTTP/1.1" 404 70417 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:36 +1000] "GET /less.php HTTP/1.1" 404 70419 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:38 +1000] "GET /x3x.php HTTP/1.1" 404 70418 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:40 +1000] "GET /wp-includes/Ipv6.php HTTP/1.1" 404 70432 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:42 +1000] "GET /state.php HTTP/1.1" 404 70420 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:45 +1000] "GET /xozx.php HTTP/1.1" 404 70419 "-" "-" paulshipley.com.au:443 20.238.64.167 - - [11/Apr/2026:02:47:47 +1000] "GET /1100.php HT ... show less	Web App Attack
🇨🇭 beatsnet.com	2026-04-10 16:44:20 (5 months ago)	[Fri Apr 10 18:44:15.032235 2026] [proxy_fcgi:error] [pid 72781:tid 27714254366736] [client 20.238.6 ... show more [Fri Apr 10 18:44:15.032235 2026] [proxy_fcgi:error] [pid 72781:tid 27714254366736] [client 20.238.64.167:22653] AH01071: Got error 'Primary script unknown' [Fri Apr 10 18:44:15.071593 2026] [proxy_fcgi:error] [pid 72781:tid 27714254366736] [client 20.238.64.167:22653] AH01071: Got error 'Primary script unknown' [Fri Apr 10 18:44:15.107505 2026] [proxy_fcgi:error] [pid 72781:tid 27714254368784] [client 20.238.64.167:22653] AH01071: Got error 'Primary script unknown' [Fri Apr 10 18:44:15.143413 2026] [proxy_fcgi:error] [pid 72781:tid 27714254368784] [client 20.238.64.167:22653] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇦🇹 Pingger Shikkoken	2026-04-10 16:39:30 (5 months ago)	20.238.64.167 - - [10/Apr/2026:13:33:31 +0000] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" ... show more 20.238.64.167 - - [10/Apr/2026:13:33:31 +0000] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 302 470 "-" "-" 20.238.64.167 - - [10/Apr/2026:13:33:31 +0000] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 404 503 "-" "-" 20.238.64.167 - - [10/Apr/2026:16:39:30 +0000] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 302 470 "-" "-" 20.238.64.167 - - [10/Apr/2026:16:39:30 +0000] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 404 503 "-" "-" ... show less	Web App Attack
🇺🇸 ipblock.com	2026-04-10 16:36:00 (5 months ago)	IPBlock protected site ID [2711-bg]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇬🇧 Shadymint	2026-04-10 16:34:41 (5 months ago)	cms login attempt from IP marked as abusive	Web App Attack
🇨🇭 lufi	2026-04-10 16:34:08 (5 months ago)	2026-04-10T18:34:08+02:00 lufischer04 ids442 2026-04-10 18:34:08 20.238.64.167: blacklisted Pattern: ... show more 2026-04-10T18:34:08+02:00 lufischer04 ids442 2026-04-10 18:34:08 20.238.64.167: blacklisted Pattern: wp-content/ ... show less	Web Spam Brute-Force Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-04-10 16:31:47 (5 months ago)	angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:29 +1000] "GET /press.php HTTP/1.1" ... show more angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:29 +1000] "GET /press.php HTTP/1.1" 404 64422 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:32 +1000] "GET /dx.php HTTP/1.1" 404 64419 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:35 +1000] "GET /ga.php HTTP/1.1" 404 64419 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:38 +1000] "GET /less.php HTTP/1.1" 404 64421 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:40 +1000] "GET /x3x.php HTTP/1.1" 404 64420 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:43 +1000] "GET /wp-includes/Ipv6.php HTTP/1.1" 404 64434 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:45 +1000] "GET /state.php HTTP/1.1" 404 64422 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [11/Apr/2026:02:30:48 +1000] "GET /xozx.php HTTP/1.1" 404 64421 "-" "-" angleseaarthouse.com.au:443 20.238.64.167 - - [ ... show less	Web App Attack
🇫🇮 kumiko	2026-04-10 16:23:41 (5 months ago)	[2026-04-10 19:23:40] Apache auth failure: brute force attempt, file probing	Brute-Force Bad Web Bot
🇺🇦 URAN Publishing Service	2026-04-10 16:23:24 (5 months ago)	20.238.64.167 - - [10/Apr/2026:19:23:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.238.64.167 - - [10/Apr/2026:19:23:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 706 "-" "-" ... show less	Web App Attack
🇨🇦 polycoda	2026-04-10 16:23:14 (5 months ago)	🔥 VERY AGGRESSIVE SCANNER probed over 100 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
Anonymous	2026-04-10 16:17:17 (5 months ago)	20.238.64.167 - - [10/Apr/2026:18:17:16 +0200] "GET / HTTP/1.1" 403 5355 "-" "-" ...	Web App Attack

Showing 46 to 60 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.233.30.91

🇨🇳 221.233.30.39

🇳🇱 195.178.110.232

🇩🇪 69.5.169.170

🇨🇱 34.176.243.48

🇺🇸 18.213.27.222

🇧🇷 2804:214:d:303:3c86:f51f:b8b2:b1cc

🇨🇳 221.233.210.2

🇧🇷 205.210.31.228

🇩🇪 69.5.169.123

🇺🇸 47.88.30.187

🇧🇷 45.164.251.106

🇨🇳 221.233.118.3

🇨🇳 221.232.102.75

🇳🇱 195.178.110.228

🇺🇸 154.222.105.168

🇺🇸 147.182.182.183

🇬🇧 86.27.106.219

🇳🇱 37.48.122.143

🇺🇸 3.139.58.65