JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.211.172

20.63.211.172 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 93%: ?

93%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.211.172

Whois 20.63.211.172

IP Abuse Reports for 20.63.211.172:

This IP address has been reported a total of 55 times from 47 distinct sources. 20.63.211.172 was first reported on May 18th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-19 18:04:15 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-05-19 04:08:38 (4 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇹🇭 thaizone.com	2026-05-18 20:37:27 (4 weeks ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇺🇸 Epimetheus	2026-05-18 19:30:45 (4 weeks ago)	Unauthorized access attempts: [GET] /xmlrpc.php [GET] /goods.php [GET] /kbfr.php [GET] /class-t.api ... show more Unauthorized access attempts: [GET] /xmlrpc.php [GET] /goods.php [GET] /kbfr.php [GET] /class-t.api.php [GET] /ioxi-o.php [GET] /autoload_classmap.php [GET] /wp-content/admin.php [GET] /about.php [GET] /an.php [GET] /wp-content/uploads/index.php [GET] /wp-admin/user.php [GET] /randkeyword.PhP7 [GET] /index/function.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇮🇹 ciccio diddo	2026-05-18 19:17:46 (4 weeks ago)	CMS/WP Exploit xmlrpc port:Tcp/80,443	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-05-18 19:03:53 (4 weeks ago)	20.63.211.172 - - [18/May/2026:22:03:45 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 788 ... show more 20.63.211.172 - - [18/May/2026:22:03:45 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.211.172 - - [18/May/2026:22:03:52 +0300] "GET /wp-admin/user.php HTTP/1.1" 404 788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-05-18 18:15:25 (4 weeks ago)	20.63.211.172 - - [18/May/2026:20:14:58 +0200] "GET /inputs.php HTTP/1.1" 404 32789 20.63.211.172 - ... show more 20.63.211.172 - - [18/May/2026:20:14:58 +0200] "GET /inputs.php HTTP/1.1" 404 32789 20.63.211.172 - - [18/May/2026:20:15:00 +0200] "GET /ioxi-o.php HTTP/1.1" 404 29178 20.63.211.172 - - [18/May/2026:20:15:02 +0200] "GET /function/function.php HTTP/1.1" 404 29177 20.63.211.172 - - [18/May/2026:20:15:04 +0200] "GET /rip.php HTTP/1.1" 404 29178 20.63.211.172 - - [18/May/2026:20:15:07 +0200] "GET /admin.php HTTP/1.1" 404 29178 20.63.211.172 - - [18/May/2026:20:15:10 +0200] "GET /cache.php HTTP/1.1" 404 29178 20.63.211.172 - - [18/May/2026:20:15:12 +0200] "GET /themes.php HTTP/1.1" 404 29177 20.63.211.172 - - [18/May/2026:20:15:14 +0200] "GET /an.php HTTP/1.1" 404 29178 20.63.211.172 - - [18/May/2026:20:15:17 +0200] "GET /index/function.php HTTP/1.1" 404 29177 20.63.211.172 - - [18/May/2026:20:15:19 +0200] "GET /randkeyword.PhP7 HTTP/1.1" 404 30537 ... show less	Web Spam Web App Attack
Anonymous	2026-05-18 18:05:53 (4 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (39/60 min)'; Requests=39	Port Scan
🇺🇸 antlac1	2026-05-18 18:02:29 (4 weeks ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-05-18 17:33:10 (4 weeks ago)	(upload_shell) srv104 Shell upload 20.63.211.172 (JP/Japan/-): 1 in the last 3600 secs; Ports: ; Di ... show more (upload_shell) srv104 Shell upload 20.63.211.172 (JP/Japan/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 kjaerulff	2026-05-18 17:24:40 (4 weeks ago)	Probing for PHP files (admin.php)	Web App Attack
🇩🇪 igerman	2026-05-18 17:20:58 (4 weeks ago)	caddy probes: admin-panel: GET /admin.php(DROP), GET /adminfuns.php(DROP) \| web: GET /404.php(DROP), ... show more caddy probes: admin-panel: GET /admin.php(DROP), GET /adminfuns.php(DROP) \| web: GET /404.php(DROP), GET /abc.php(DROP), GET /abcd.php(DROP), GET /about.php(DROP), GET /an.php(DROP), GET /as.php(DROP), GET /cache.php(DROP), GET /file.php(DROP), GET /function/function.php(DROP), GET /index/function.php(DROP), GET /inputs.php(DROP), GET /ioxi-o.php(DROP), GET /randkeyword.PhP7(DROP), GET /rip.php(DROP), GET /themes.php(DROP), GET /ws.php(DROP) \| wordpress: GET /wp-admin/user.php(DROP), GET /wp-conf.php(DROP), GET /wp-content/themes/hideo/network.php(DROP), GET /wp-content/uploads/index.php(DROP), GET /wp-good.php(DROP), GET /wp-login.php(DROP), GET /wp-trackback.php(DROP) show less	Web App Attack
🇺🇸 ipblock.com	2026-05-18 17:12:00 (4 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-18 17:04:22 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-18 16:59:41 (4 weeks ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.111.170

🇸🇦 172.70.203.142

🇺🇸 162.216.149.128

🇨🇳 122.190.152.163

🇨🇳 112.239.67.76

🇨🇳 112.49.47.108

🇺🇸 107.150.1.208

🇮🇳 103.199.202.184

🇺🇸 71.6.233.2

🇮🇳 66.116.224.161

🇳🇱 45.156.128.8

🇰🇷 220.124.208.27

🇧🇷 172.70.236.142

🇩🇿 172.69.238.150

🇨🇳 123.173.76.46

🇩🇪 69.5.169.63

🇺🇸 195.184.76.115

🇲🇽 187.191.48.24

🇮🇳 172.69.178.30

🇮🇸 172.69.144.172