JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.32.193

20.63.32.193 was found in our database!

This IP was reported 2,762 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.32.193

Whois 20.63.32.193

IP Abuse Reports for 20.63.32.193:

This IP address has been reported a total of 2,762 times from 724 distinct sources. 20.63.32.193 was first reported on April 17th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-05-17 06:03:00 (2 weeks ago)	IPBlock protected site ID [2711-bg]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-17 05:25:44 (2 weeks ago)	Web vulnerability probing: /adminfuns.php	Web App Attack
🇺🇸 KitsuneTech	2026-05-17 05:08:35 (2 weeks ago)	20.63.32.193 - - [17/May/2026:00:08:35 -0500] "GET /wp-admin/ HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Wi ... show more 20.63.32.193 - - [17/May/2026:00:08:35 -0500] "GET /wp-admin/ HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 PacketFilter	2026-05-17 04:55:07 (2 weeks ago)	Fail2Ban	Hacking Web App Attack
🇫🇮 Christopher Hughes	2026-05-17 04:53:40 (2 weeks ago)	[Sun May 17 05:53:38.854705 2026] [proxy_fcgi:error] [pid 3409654:tid 139774375474752] [client 20.63 ... show more [Sun May 17 05:53:38.854705 2026] [proxy_fcgi:error] [pid 3409654:tid 139774375474752] [client 20.63.32.193:8094] AH01071: Got error 'Primary script unknown' [Sun May 17 05:53:39.056893 2026] [proxy_fcgi:error] [pid 3409654:tid 139774409045568] [client 20.63.32.193:8094] AH01071: Got error 'Primary script unknown' [Sun May 17 05:53:39.190550 2026] [proxy_fcgi:error] [pid 3409654:tid 139774778127936] [client 20.63.32.193:8094] AH01071: Got error 'Primary script unknown' [Sun May 17 05:53:39.353690 2026] [proxy_fcgi:error] [pid 3409654:tid 139774383867456] [client 20.63.32.193:8094] AH01071: Got error 'Primary script unknown' [Sun May 17 05:53:39.487680 2026] [proxy_fcgi:error] [pid 3409654:tid 139773628884544] [client 20.63.32.193:8094] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 devsecops.cv	2026-05-17 04:51:28 (2 weeks ago)	Fail2Ban: apache-ratelimit - 20 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-05-17 04:50:41 (2 weeks ago)	Unauthorized access attempts: [GET] /randkeyword.PhP7 [GET] /wp-admin/js/index.php [GET] /rip.php [ ... show more Unauthorized access attempts: [GET] /randkeyword.PhP7 [GET] /wp-admin/js/index.php [GET] /rip.php [GET] /x.php [GET] /i.php [GET] /h.php [GET] /manager.php [GET] /w1.php [GET] /themes.php [GET] /ws54.php [GET] /222.php [GET] /wp.php [GET] /file.php [GET] /edit.php [GET] /alfa.php [GET] /wk/index.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇨🇦 1gz	2026-05-17 04:38:08 (2 weeks ago)	Triggered Cloudflare WAF (ratelimit) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) En ... show more Triggered Cloudflare WAF (ratelimit) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /ww5.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-05-17 04:37:23 (2 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇮 Christopher Hughes	2026-05-17 04:03:23 (2 weeks ago)	[Sun May 17 05:03:22.948377 2026] [proxy_fcgi:error] [pid 3409654:tid 139774358689344] [client 20.63 ... show more [Sun May 17 05:03:22.948377 2026] [proxy_fcgi:error] [pid 3409654:tid 139774358689344] [client 20.63.32.193:10647] AH01071: Got error 'Primary script unknown' [Sun May 17 05:03:23.118526 2026] [proxy_fcgi:error] [pid 3409654:tid 139773637277248] [client 20.63.32.193:10647] AH01071: Got error 'Primary script unknown' [Sun May 17 05:03:23.252658 2026] [proxy_fcgi:error] [pid 3409654:tid 139774392260160] [client 20.63.32.193:10647] AH01071: Got error 'Primary script unknown' [Sun May 17 05:03:23.387363 2026] [proxy_fcgi:error] [pid 3409654:tid 139774367082048] [client 20.63.32.193:10647] AH01071: Got error 'Primary script unknown' [Sun May 17 05:03:23.521721 2026] [proxy_fcgi:error] [pid 3409654:tid 139774761342528] [client 20.63.32.193:10647] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 AetherFox	2026-05-17 03:25:53 (2 weeks ago)	AetherFox VoidGuard detected: [Sun May 17 03:25:52.668859 2026] [authz_core:error] [pid 274051:tid 2 ... show more AetherFox VoidGuard detected: [Sun May 17 03:25:52.668859 2026] [authz_core:error] [pid 274051:tid 274074] [client 20.63.32.193:16807] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-includes/Text/Diff/ [Sun May 17 03:25:52.859382 2026] [authz_core:error] [pid 274051:tid 274077] [client 20.63.32.193:16807] AH01630: client denied by server configuration: proxy:https://[MASKED]/adminfuns.php/.well-known/acme-challenge/file.php [Sun May 17 03:25:52.955413 2026] [authz_core:error] [pid 274051:tid 274080] [client 20.63.32.193:16807] AH01630: client denied by server configuration: proxy:https://[MASKED]/ahax.php [Sun May 17 03:25:53.070931 2026] [authz_core:error] [pid 274051:tid 274076] [client 20.63.32.193:16807] AH01630: client denied by server configuration: proxy:https://[MASKED]/breads1.php [Sun May 17 03:25:53.167301 2026] [authz_core:error] [pid 274051:tid 274079] [client 20.63.32.193:16807] AH01630: client denied by server co ... show less	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-05-17 03:11:50 (2 weeks ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:06 -03 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:06 -0300] "GET /file.php HTTP/1.1" 404 18193 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:06 -0300] "GET /adminfuns.php HTTP/1.1" 404 18193 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:06 -0300] "GET /wk/index.php HTTP/1.1" 404 18193 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:06 -0300] "GET /about.php HTTP/1.1" 404 18193 20.63.32.193 172.70.50.109 - - [16/May/2026:19:45:07 -0300] "GET /term.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-05-17 03:05:20 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇫🇮 Christopher Hughes	2026-05-17 03:02:06 (2 weeks ago)	[Sun May 17 04:02:05.731382 2026] [proxy_fcgi:error] [pid 3409654:tid 139775042401856] [client 20.63 ... show more [Sun May 17 04:02:05.731382 2026] [proxy_fcgi:error] [pid 3409654:tid 139775042401856] [client 20.63.32.193:11587] AH01071: Got error 'Primary script unknown' [Sun May 17 04:02:05.865767 2026] [proxy_fcgi:error] [pid 3409654:tid 139774769735232] [client 20.63.32.193:11587] AH01071: Got error 'Primary script unknown' [Sun May 17 04:02:06.042053 2026] [proxy_fcgi:error] [pid 3409654:tid 139774367082048] [client 20.63.32.193:11587] AH01071: Got error 'Primary script unknown' [Sun May 17 04:02:06.175846 2026] [proxy_fcgi:error] [pid 3409654:tid 139773654062656] [client 20.63.32.193:11587] AH01071: Got error 'Primary script unknown' [Sun May 17 04:02:06.309969 2026] [proxy_fcgi:error] [pid 3409654:tid 139774409045568] [client 20.63.32.193:11587] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 consul.to	2026-05-17 02:59:27 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack

Showing 196 to 210 of 2762 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.81.229.181

🇮🇩 180.247.102.30

🇩🇪 167.94.146.33

🇺🇸 165.154.182.30

🇻🇳 152.32.250.188

🇮🇱 77.137.75.102

🇺🇸 66.240.223.208

🇶🇦 20.173.116.24

🇺🇸 20.64.104.82

🇯🇵 20.63.210.3

🇧🇬 5.188.206.46

🇨🇳 220.181.108.177

🇨🇳 203.76.241.18

🇷🇺 188.19.249.231

🇬🇧 185.216.145.189

🇵🇾 181.123.62.210

🇺🇸 165.154.135.222

🇫🇷 164.68.108.176

🇺🇸 147.185.132.25

🇭🇰 118.26.39.178