JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.255.72.163

Recent Activity

Abuse confidence score ?

100% Critical

113 reports

92 reporters · latest 55 minutes ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.255.72.163

Export CSV

This IP address has been reported a total of 113 times from 92 distinct sources. 20.255.72.163 was first reported on October 3rd 2026, and the most recent report was 55 minutes ago. In the last 60 days, the top reporter locations were: Germany with 33 reports; Netherlands with 16 reports; France with 11 reports. The most common categories in these recent reports were: Web App Attack 80 times; Brute-Force 30 times; Bad Web Bot 29 times; Hacking 21 times; Port Scan 7 times; Other 17 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-05 01:17:54 (55 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 ITSNF	2026-10-05 01:10:09 (1 hour ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80	Port Scan Hacking
🇲🇾 Rizzy	2026-10-05 01:04:51 (1 hour ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 jotoma.de	2026-10-04 23:43:35 (2 hours ago)	[Mon Oct 05 01:43:34.594477 2026] [proxy_fcgi:error] [pid 940112:tid 940205] [client 20.255.72.163:1 ... show more [Mon Oct 05 01:43:34.594477 2026] [proxy_fcgi:error] [pid 940112:tid 940205] [client 20.255.72.163:11835] AH01071: Got error 'Primary script unknown' [Mon Oct 05 01:43:34.783703 2026] [proxy_fcgi:error] [pid 940112:tid 940208] [client 20.255.72.163:11835] AH01071: Got error 'Primary script unknown' [Mon Oct 05 01:43:34.972830 2026] [proxy_fcgi:error] [pid 940112:tid 940209] [client 20.255.72.163:11835] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-10-04 22:50:16 (3 hours ago)	[Mon Oct 05 00:50:14.261216 2026] [proxy_fcgi:error] [pid 56734:tid 57002] [client 20.255.72.163:395 ... show more [Mon Oct 05 00:50:14.261216 2026] [proxy_fcgi:error] [pid 56734:tid 57002] [client 20.255.72.163:3950] AH01071: Got error 'Primary script unknown' [Mon Oct 05 00:50:14.659345 2026] [proxy_fcgi:error] [pid 56734:tid 56995] [client 20.255.72.163:3950] AH01071: Got error 'Primary script unknown' [Mon Oct 05 00:50:15.131642 2026] [proxy_fcgi:error] [pid 56734:tid 56964] [client 20.255.72.163:3950] AH01071: Got error 'Primary script unknown' [Mon Oct 05 00:50:15.525326 2026] [proxy_fcgi:error] [pid 56734:tid 56968] [client 20.255.72.163:3950] AH01071: Got error 'Primary script unknown' [Mon Oct 05 00:50:16.139795 2026] [proxy_fcgi:error] [pid 56734:tid 57037] [client 20.255.72.163:3950] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 pm33	2026-10-04 22:27:44 (3 hours ago)	Unauthorized connections HTTP 403	Web App Attack
🇮🇹 CoreTech srl	2026-10-04 22:17:05 (3 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇳🇱 Alt255	2026-10-04 22:02:31 (4 hours ago)	[ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 20.255.72.163 - - [05/Oct/2026:00:02:09 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6071 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:10 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2074 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:10 +0200] "GET /wsd.php HTTP/1.1" 404 2074 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:10 +0200] "GET /z60.php?p= HTTP/1.1" 404 2074 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:11 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 2074 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:12 +0200] "GET /b8.php HTTP/1.1" 404 2074 "-" "-" 20.255.72.163 - - [05/Oct/2026:00:02:12 +0200] "GET ... show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-04 21:59:08 (4 hours ago)	Auto-ban: 233 malicious requests on 2026-10-03 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 233 malicious requests on 2026-10-03 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇫🇷 Baking333	2026-10-04 21:51:06 (4 hours ago)	[redacted] 20.255.72.163 - - [04/Oct/2026:22:50:59 +0100] "GET /wp-content/plugins/hellopress/wp_fil ... show more [redacted] 20.255.72.163 - - [04/Oct/2026:22:50:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 6778 0/55612 "-" "-" 443 [redacted] 20.255.72.163 - - [04/Oct/2026:22:51:04 +0100] "GET /wp-admin/js/[redacted] HTTP/1.1" 302 1559 0/38854 "-" "-" 443 show less	Bad Web Bot Web App Attack
🇪🇸 yvoictra	2026-10-04 21:40:00 (4 hours ago)	20.255.72.163 - - [04/Oct/2026:23:39:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.72.163 - - [04/Oct/2026:23:39:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:23:40:00 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:23:40:00 +0200] "GET /wsd.php HTTP/1.1" 404 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:23:40:00 +0200] "GET /z60.php?p= HTTP/1.1" 404 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:23:40:00 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 162 "-" "-" ... show less	Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-10-04 20:52:44 (5 hours ago)	20.255.72.163 - - [05/Oct/2026:07:52:43 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.72.163 - - [05/Oct/2026:07:52:43 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 989 "-" "-" 20.255.72.163 - - [05/Oct/2026:07:52:43 +1100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.255.72.163 - - [05/Oct/2026:07:52:43 +1100] "GET /wsd.php HTTP/1.1" 404 16 "-" "-" 20.255.72.163 - - [05/Oct/2026:07:52:44 +1100] "GET /z60.php?p= HTTP/1.1" 404 16 "-" "-" 20.255.72.163 - - [05/Oct/2026:07:52:44 +1100] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 16 "-" "-" 20.255.72.163 - - [05/Oct/2026:07:52:44 +1100] "GET /b8.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇩🇪 macrob	2026-10-04 20:51:41 (5 hours ago)	2026/10/04 20:51:33 [error] 3197181#3197181: 16501991 access forbidden by rule, client: 20.255.72.1 ... show more 2026/10/04 20:51:33 [error] 3197181#3197181: 16501991 access forbidden by rule, client: 20.255.72.163, server: binixo.com.br, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "binixo.com.br" 2026/10/04 20:51:37 [error] 3197178#3197178: 16502181 access forbidden by rule, client: 20.255.72.163, server: binixo.com.br, request: "GET /wp-admin/js/index.php HTTP/2.0", host: "binixo.com.br" 2026/10/04 20:51:39 [error] 3197176#3197176: 16502091 access forbidden by rule, client: 20.255.72.163, server: binixo.com.br, request: "GET /wp-content/admin.php HTTP/2.0", host: "binixo.com.br" ... show less	Web App Attack
Anonymous	2026-10-04 20:45:32 (5 hours ago)	apache vulnerability scan	Web App Attack
🇬🇧 www.elivecd.org	2026-10-04 20:07:05 (6 hours ago)	20.255.72.163 - - [04/Oct/2026:21:07:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.255.72.163 - - [04/Oct/2026:21:07:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:02 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:02 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:03 +0100] "GET /z60.php?p= HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:03 +0100] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:04 +0100] "GET /b8.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:04 +0100] "GET /wp_blog_footer.php HTTP/1.1" 301 162 "-" "-" 20.255.72.163 - - [04/Oct/2026:21:07:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" ... show less	DDoS Attack

Showing 1 to 15 of 113 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.115

🇮🇩 139.255.254.163

🇯🇵 124.45.31.57

🇷🇴 80.94.92.234

🇺🇸 66.132.186.172

🇩🇪 45.149.207.27

🇿🇦 41.181.156.205

🇩🇴 38.246.145.85

🇸🇬 34.143.212.113

🇬🇧 2a06:4880::c

🇺🇸 204.197.161.106

🇳🇱 193.25.217.68

🇷🇺 188.168.86.6

🇲🇽 187.190.11.251

🇳🇱 176.65.149.236

🇺🇸 135.148.29.54

🇺🇸 108.28.86.172

🇧🇪 104.155.80.126

🇳🇱 81.19.216.124

🇳🇱 81.19.216.122