JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.81.20

20.63.81.20 was found in our database!

This IP was reported 783 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.81.20

Whois 20.63.81.20

IP Abuse Reports for 20.63.81.20:

This IP address has been reported a total of 783 times from 597 distinct sources. 20.63.81.20 was first reported on August 26th 2026, and the most recent report was 21 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-27 22:45:07 (21 seconds ago)	Detected by CrowdSec: crowdsecurity/http-probing	Web App Attack
🇮🇪 AutosOnShow	2026-08-27 22:43:04 (2 minutes ago)	blocked for webapp attack \| path requested: /inx.php \| seen at 2026-08-27 22:42:38.176 \|	Web App Attack
🇯🇵 amyriad	2026-08-27 22:42:34 (2 minutes ago)	[Fri Aug 28 07:42:33.297268 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home ... show more [Fri Aug 28 07:42:33.297268 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home/ubuntu/website/this_is_a_new_hello_world.php' not found or unable to stat [Fri Aug 28 07:42:33.472410 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home/ubuntu/website/filefuns.php' not found or unable to stat [Fri Aug 28 07:42:33.637600 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home/ubuntu/website/wp-cron.php' not found or unable to stat [Fri Aug 28 07:42:33.802386 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home/ubuntu/website/lock360.php' not found or unable to stat [Fri Aug 28 07:42:33.979619 2026] [php:error] [pid 3291344] [client 20.63.81.20:25558] script '/home/ubuntu/website/wp-theme.php' not found or unable to stat ... show less	DDoS Attack Hacking Brute-Force
🇫🇮 pixiekat	2026-08-27 22:39:39 (5 minutes ago)	[Thu Aug 27 23:39:37.727945 2026] [authz_core:error] [pid 503978:tid 504013] [client 20.63.81.20:327 ... show more [Thu Aug 27 23:39:37.727945 2026] [authz_core:error] [pid 503978:tid 504013] [client 20.63.81.20:32726] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/baikal/html/wp-content [Thu Aug 27 23:39:37.989983 2026] [authz_core:error] [pid 503978:tid 504017] [client 20.63.81.20:32726] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/baikal/html/this_is_a_new_hello_world.php [Thu Aug 27 23:39:38.252086 2026] [authz_core:error] [pid 503978:tid 504006] [client 20.63.81.20:32726] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/baikal/html/filefuns.php [Thu Aug 27 23:39:38.514112 2026] [authz_core:error] [pid 503978:tid 504022] [client 20.63.81.20:32726] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/baikal/html/wp-cron.php [Thu Aug 27 23:39:38.776485 2026] [authz_core:error] [pid 503978:tid 504012] [client 20.63.81.20:32726] AH01630: client denied by server configuration ... show less	Brute-Force
🇸🇪 Juha Jurvanen	2026-08-27 22:33:00 (12 minutes ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇳🇱 0xffffffff	2026-08-27 22:28:22 (17 minutes ago)	[2026-08-28 01:28:20.076535] [authz_core:error] [pid 2325289:tid 127818254030528] [client 20.63.81.2 ... show more [2026-08-28 01:28:20.076535] [authz_core:error] [pid 2325289:tid 127818254030528] [client 20.63.81.20:36826] AH01630: client denied by server configuration: /var/www//wp-content/plugins/hellopress , error_notes:wp:include-files , URI:'/wp-content/plugins/hellopress/wp_filemanager.php' [2026-08-28 01:28:20.251596] [authz_core:error] [pid 2325289:tid 127817891182272] [client 20.63.81.20:36826] AH01630: client denied by server configuration: /var/www//this_is_a_new_hello_world.php , error_notes:missing-php , URI:'/this_is_a_new_hello_world.php' [2026-08-28 01:28:20.428449] [authz_core:error] [pid 2325289:tid 127818025400000] [client 20.63.81.20:36826] AH01630: client denied by server configuration: /var/www//filefuns.php , error_notes:missing-php , URI:'/filefuns.php' [2026-08-28 01:28:20.782365] [authz_core:error] [pid 2325289:tid 127817975043776] [client 20.63.81.20:36826] AH01630: client denied by server configuration: /var/www//lock360.php , error_notes:missing-php , URI:'/lock360.php' [2026-08-28 01:28: show less	Web App Attack Bad Web Bot
🇫🇷 ecode hosting	2026-08-27 22:21:06 (24 minutes ago)	Domain : sunnavturkey.com Rule : hack 2026-08-27 22:19:52 10.100.1.20 GET /admin.php p= 80 - 20.63.8 ... show more Domain : sunnavturkey.com Rule : hack 2026-08-27 22:19:52 10.100.1.20 GET /admin.php p= 80 - 20.63.81.20 HTTP/1.1 - - sunnavturkey.com 301 0 0 378 54 191 - - show less	Hacking SQL Injection Brute-Force
🇺🇸 ruusvuu	2026-08-27 22:20:35 (24 minutes ago)	Automated abuse report: 149 attack/probe requests from Microsoft Corporation / CA. Targeted paths: / ... show more Automated abuse report: 149 attack/probe requests from Microsoft Corporation / CA. Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, /filefuns.php, /wp-cron.php, /lock360.php. Sample log lines: [mir-com] [8/27/2026, 3:20:35 PM] GET .mirregistry.com/wp-content/plugins/hellopress/wp_filemanager.php 404 20.63.81.20 - 0.248 ms [mir-com] [8/27/2026, 3:20:35 PM] GET .mirregistry.com/this_is_a_new_hello_world.php 404 20.63.81.20 - 5.525 ms [mir-com] [8/27/2026, 3:20:35 PM] GET .mirregistry.com/filefuns.php 404 20.63.81.20 - 6.236 ms Detected by an automated web-server log monitor. show less	Web App Attack
🇩🇪 itsolon	2026-08-27 22:20:11 (25 minutes ago)	[28/Aug/2026:00:20:11 +0200] 178786921178.352174 20.63.81.20 59113 217.154.7.177 443 [28/Aug/2026:00 ... show more [28/Aug/2026:00:20:11 +0200] 178786921178.352174 20.63.81.20 59113 217.154.7.177 443 [28/Aug/2026:00:20:11 +0200] 178786921195.918666 20.63.81.20 59113 217.154.7.177 443 [28/Aug/2026:00:20:11 +0200] 17878692119.227807 20.63.81.20 59113 217.154.7.177 443 [28/Aug/2026:00:20:11 +0200] 178786921184.497866 20.63.81.20 59113 217.154.7.177 443 [28/Aug/2026:00:20:11 +0200] 178786921178.109262 20.63.81.20 59113 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇨🇭 GAS	2026-08-27 22:18:40 (26 minutes ago)	Bad Bot. 20.63.81.20 - - [28/Aug/2026:00:18:39 +0200] "GET /wp-content/plugins/hellopress/wp_fileman ... show more Bad Bot. 20.63.81.20 - - [28/Aug/2026:00:18:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 402 3396 "-" "-" ... show less	Bad Web Bot Web App Attack
🇨🇱 Denis Chavez	2026-08-27 22:16:15 (29 minutes ago)	Fail2Ban detected malicious activity on Nginx	Brute-Force SSH Web App Attack
🇫🇷 largo-it.net	2026-08-27 22:04:32 (40 minutes ago)	[28/Aug/2026:00:04:28.555] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [28/Aug/ ... show more [28/Aug/2026:00:04:28.555] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [28/Aug/2026:00:04:29.090] HTTP 404 - GET /this_is_a_new_hello_world.php [28/Aug/2026:00:04:29.504] HTTP 404 - GET /filefuns.php [28/Aug/2026:00:04:30.117] HTTP 404 - GET /lock360.php [28/Aug/2026:00:04:30.540] HTTP 404 - GET /wp-theme.php [28/Aug/2026:00:04:31.153] HTTP 404 - GET /2d7433/ [28/Aug/2026:00:04:31.908] HTTP 404 - GET /images.php [28/Aug/2026:00:04:32.363] HTTP 404 - GET /ops.php show less	Hacking Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-27 21:59:08 (46 minutes ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
Anonymous	2026-08-27 21:58:03 (47 minutes ago)	[Thu Aug 27 23:58:01.915966 2026] [proxy_fcgi:error] [pid 1571:tid 1739] [client 20.63.81.20:25544] ... show more [Thu Aug 27 23:58:01.915966 2026] [proxy_fcgi:error] [pid 1571:tid 1739] [client 20.63.81.20:25544] AH01071: Got error 'Primary script unknown' [Thu Aug 27 23:58:02.136407 2026] [proxy_fcgi:error] [pid 1571:tid 1755] [client 20.63.81.20:25544] AH01071: Got error 'Primary script unknown' [Thu Aug 27 23:58:02.136407 2026] [proxy_fcgi:error] [pid 1571:tid 1755] [client 20.63.81.20:25544] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇵🇱 swiszczu	2026-08-27 21:52:34 (52 minutes ago)	Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 20.63.81.20 - - [27/ ... show more Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /filefuns.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /wp-cron.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /lock360.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /wp-theme.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /2d7433/index.php HTTP/1.1" 403 153 "-" "-" "-" 20.63.81.20 - - [27/Aug/2026:23:52:33 +0200] "GET /wp-l show less	Hacking Web App Attack

Showing 1 to 15 of 783 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 172.68.183.72

🇮🇳 47.11.130.118

🇱🇹 213.176.26.54

🇰🇷 211.106.133.202

🇨🇭 209.99.185.81

🇧🇷 201.92.71.208

🇰🇷 175.118.127.138

🇨🇳 140.206.235.59

🇷🇺 95.25.176.111

🇷🇴 92.118.39.71

🇸🇰 87.197.133.194

🇷🇴 80.94.92.179

🇨🇦 70.54.182.130

🇩🇪 69.5.169.32

🇷🇴 2.57.122.53

🇷🇴 2.57.121.112

🇮🇱 193.169.229.121

🇲🇽 187.147.139.81

🇮🇳 182.78.86.62

🇰🇿 176.12.74.176