JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.63.80.2

Neutral Activity

Abuse Confidence Score

0% Low Risk

247 reports

176 reporters · latest 7 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.63.80.2 has been reported 247 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

247 from 176 distinct reporters

First reported

February 28th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 innovacommunications	2026-03-09 18:45:03 UTC · (7 months ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇭🇺 DumaNet	2026-03-03 00:57:00 UTC · (8 months ago)	WordPress plugin attack attempts. Date: 2026 Mar 01. 19:27:18 Source IP: 20.63.80.2 Portion of the log(s): 20.63.80.2 - [01/Mar/2026:19:27:18 +0100] "GET /hplfuns.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show more WordPress plugin attack attempts. Date: 2026 Mar 01. 19:27:18 Source IP: 20.63.80.2 Portion of the log(s): 20.63.80.2 - [01/Mar/2026:19:27:18 +0100] "GET /hplfuns.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:19:27:17 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:19:27:17 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:19:27:17 +0100] "GET /xml.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:19:27:17 +0100] "GET /themes.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Wi show less	Web App Attack Hacking
🇭🇺 DumaNet	2026-03-03 00:24:00 UTC · (8 months ago)	WordPress plugin attack attempts. Date: 2026 Mar 01. 13:31:08 Source IP: 20.63.80.2 Portion of the log(s): 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more WordPress plugin attack attempts. Date: 2026 Mar 01. 13:31:08 Source IP: 20.63.80.2 Portion of the log(s): 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /plugins.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /wp-content/1.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.80.2 - [01/Mar/2026:13:29:06 +0100] "GET /wp-includes/fonts/wp-login.php HTTP show less	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-03-02 22:59:31 UTC · (8 months ago)	Auto-ban: 15 malicious requests on 2026-03-01 (e.g., env/backup probes, brute-force, or error bursts).	Web App Attack SSH Hacking
🇹🇷 rtbh.com.tr	2026-03-02 20:11:51 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 LRob	2026-03-02 16:30:36 UTC · (8 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
Anonymous	2026-03-02 10:18:49 UTC · (8 months ago)	FortiWeb WAF: 329 attacks detected. Threat Score: 27600. Types: Block IP List(138), Client Management(137), Custom Signature Detection(54). Origin: Canada.	Web App Attack
🇺🇸 chronos	2026-03-02 07:07:35 UTC · (8 months ago)	[AUTORAVALT][[02/03/2026 - 04:07:35 -03:00 UTC] Attack from [Microsoft Corporation] [20.63.80.2] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications suc ... show more [AUTORAVALT][[02/03/2026 - 04:07:35 -03:00 UTC] Attack from [Microsoft Corporation] [20.63.80.2] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plu] ... show less	Hacking Web App Attack
Anonymous	2026-03-02 06:21:50 UTC · (8 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-03-02 06:13:57 UTC · (8 months ago)	3092 attacks on PHP URLs, ACME URLs: GET /wp-includes/pomo/about.php HTTP/1.1 GET /.well-known/acme-challenge/index.php HTTP/1.1	Web App Attack
🇧🇪 taivas.nl	2026-03-02 05:32:29 UTC · (8 months ago)	Many_bad_calls	Web App Attack
🇺🇸 octageeks.com	2026-03-02 05:06:14 UTC · (8 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇮🇹 mauri64	2026-03-02 00:31:23 UTC · (8 months ago)	Troppi errori Apache (798)	Hacking
🇪🇸 librebit	2026-03-02 00:26:07 UTC · (8 months ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇫🇷 Murazaki	2026-03-01 23:10:26 UTC · (8 months ago)	balamb.studio 20.63.80.2 - - [01/Mar/2026:11:28:02 +0100] "GET /cgi-bin/ HTTP/1.1" 404 113190 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.55:80" imap.balamb.fr 20.63. ... show more balamb.studio 20.63.80.2 - - [01/Mar/2026:11:28:02 +0100] "GET /cgi-bin/ HTTP/1.1" 404 113190 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.55:80" imap.balamb.fr 20.63.80.2 - - [01/Mar/2026:11:52:30 +0100] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.59:80" benadel.fr 20.63.80.2 - - [01/Mar/2026:11:53:33 +0100] "GET /cgi-bin/ HTTP/1.1" 404 74628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.4:80" git.mehdibenadel.com 20.63.80.2 - - [01/Mar/2026:13:39:06 +0100] "GET /cgi-bin/ HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" balamb.studio 20.63.80.2 - - [01/Mar/2026:14:25:02 +0100] "GET /wp-admin.php HTTP/1.1" 404 555 "-" " ... show less	Bad Web Bot

Showing 1 to 15 of 247 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 103.82.121.197

🇳🇱 103.47.145.18

🇷🇺 81.222.232.205

🇺🇸 66.132.195.73

🇺🇸 45.8.19.60

🇺🇸 45.8.19.55

🇺🇸 45.8.19.51

🇸🇬 34.87.47.86

🇨🇳 8.155.2.159

🇷🇴 2.57.121.25

🇵🇱 216.151.183.211

🇳🇱 193.47.62.69

🇫🇷 161.97.146.13

🇵🇰 139.135.43.49

🇨🇳 113.24.225.237

🇳🇱 109.160.32.138

🇺🇸 69.221.144.156

🇺🇸 66.132.172.240

🇮🇷 62.133.46.22

🇺🇸 3.130.168.2