JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.87.152

20.63.87.152 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.87.152

Whois 20.63.87.152

IP Abuse Reports for 20.63.87.152:

This IP address has been reported a total of 204 times from 150 distinct sources. 20.63.87.152 was first reported on July 5th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-07-07 00:05:02 (16 minutes ago)	[Tue Jul 07 01:05:02.134995 2026] [proxy_fcgi:error] [pid 1558850:tid 139822784255552] [client 20.63 ... show more [Tue Jul 07 01:05:02.134995 2026] [proxy_fcgi:error] [pid 1558850:tid 139822784255552] [client 20.63.87.152:54777] AH01071: Got error 'Primary script unknown' [Tue Jul 07 01:05:02.249654 2026] [proxy_fcgi:error] [pid 1558850:tid 139821670438464] [client 20.63.87.152:54777] AH01071: Got error 'Primary script unknown' [Tue Jul 07 01:05:02.393025 2026] [proxy_fcgi:error] [pid 1558850:tid 139822492530240] [client 20.63.87.152:54777] AH01071: Got error 'Primary script unknown' [Tue Jul 07 01:05:02.542129 2026] [proxy_fcgi:error] [pid 1558850:tid 139822500922944] [client 20.63.87.152:54777] AH01071: Got error 'Primary script unknown' [Tue Jul 07 01:05:02.670502 2026] [proxy_fcgi:error] [pid 1558850:tid 139821175531072] [client 20.63.87.152:54777] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 blik2108	2026-07-07 00:04:24 (17 minutes ago)	solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:22 +0100] "GET /admin.php HTTP/1.1" 4 ... show more solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:22 +0100] "GET /admin.php HTTP/1.1" 404 3901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:23 +0100] "GET /about.php HTTP/1.1" 404 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:23 +0100] "GET /cgi-bin/ HTTP/1.1" 404 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:23 +0100] "GET /wp-content/themes/ HTTP/1.1" 404 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" solentyachtcharter.com:443 20.63.87.152 - - [07/Jul/2026:01:04:23 +0100] "GET /adminfuns.ph ... show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-07 00:03:16 (18 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇹🇭 thaizone.com	2026-07-06 23:59:15 (22 minutes ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
Anonymous	2026-07-06 23:45:33 (35 minutes ago)	Automated report (2026-07-06T19:45:33-04:00). Caught probing for webshells/backdoors. Host might be ... show more Automated report (2026-07-06T19:45:33-04:00). Caught probing for webshells/backdoors. Host might be compromised. show less	Hacking Exploited Host Web App Attack Open Proxy
🇫🇮 etasoft	2026-07-06 23:43:27 (37 minutes ago)	Auto-blocked by WP Security AI: Honeypot: /admin.php	Hacking
🇺🇸 Major Hostility	2026-07-06 23:39:54 (41 minutes ago)	"GET /inputs.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /goods.php HTTP/1.1" 404 "GET /fil ... show more "GET /inputs.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /goods.php HTTP/1.1" 404 "GET /file.php HTTP/1.1" 404 "GET /adminfuns.php HTTP/1.1" 404 "GET /404.php HTTP/1.1" 404 "GET /about.php HTTP/1.1" 404 "GET /term.php HTTP/1.1" 404 "GET /ioxi-o.php HTTP/1.1" 404 "GET /1.php HTTP/1.1" 404 "GET /alfa.php HTTP/1.1" 404 "GET /edit.php HTTP/1.1" 404 "GET /elp.php HTTP/1.1" 404 "GET /classwithtostring.php HTTP/1.1" 404 "GET /666.php HTTP/1.1" 404 "GET /ws54.php HTTP/1.1" 404 "GET /deepseek_d.php HTTP/1.1" 404 "GET /function/function.php HTTP/1.1" 404 "GET /nw.php HTTP/1.1" 404 "GET /xleet.php HTTP/1.1" 404 "GET /wp.php HTTP/1.1" 404 "GET /155.ph show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-06 23:33:34 (47 minutes ago)	underconstruction.paulshipley.info:443 20.63.87.152 - - [07/Jul/2026:09:33:34 +1000] "GET /inputs.ph ... show more underconstruction.paulshipley.info:443 20.63.87.152 - - [07/Jul/2026:09:33:34 +1000] "GET /inputs.php HTTP/1.1" 404 4776 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 netclix.gr	2026-07-06 23:28:23 (53 minutes ago)	(PERMBLOCK) 20.63.87.152 (CA/Canada/-) has had more than 2 temp blocks in the last 604800 secs; Port ... show more (PERMBLOCK) 20.63.87.152 (CA/Canada/-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇧🇬 HighWay	2026-07-06 23:28:07 (53 minutes ago)	20.63.87.152 - - [06/Jul/2026:23:28:04 +0000] "GET /admin.php HTTP/1.1" 404 63766 "-" "Mozilla/5.0 ( ... show more 20.63.87.152 - - [06/Jul/2026:23:28:04 +0000] "GET /admin.php HTTP/1.1" 404 63766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.87.152 - - [06/Jul/2026:23:28:05 +0000] "GET /about.php HTTP/1.1" 404 63803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.87.152 - - [06/Jul/2026:23:28:05 +0000] "GET /about.php HTTP/1.1" 404 63803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇫🇷 Lunix	2026-07-06 23:16:57 (1 hour ago)		Brute-Force Web App Attack
🇺🇸 antlac1	2026-07-06 22:49:57 (1 hour ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇺🇸 deskpass.com	2026-07-06 22:46:21 (1 hour ago)	GET /file.php	Web App Attack
Anonymous	2026-07-06 22:45:01 (1 hour ago)	Admin access attempt: 20.63.87.152 - - [06/Jul/2026:23:43:19 +0100] "GET /admin.php HTTP/1.1" 404 2 ... show more Admin access attempt: 20.63.87.152 - - [06/Jul/2026:23:43:19 +0100] "GET /admin.php HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇷🇺 sms.ru	2026-07-06 22:10:01 (2 hours ago)	/wp-admin/	Web App Attack

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 172.253.95.215

🇸🇬 144.48.6.26

🇺🇸 143.137.164.229

🇺🇸 143.137.164.162

🇻🇳 113.173.93.251

🇳🇬 105.127.17.7

🇭🇰 103.243.24.124

🇵🇭 98.98.43.121

🇸🇪 90.227.105.134

🇺🇸 47.253.156.31

🇺🇸 34.197.70.90

🇺🇸 20.127.244.253

🇺🇸 209.250.5.219

🇧🇷 205.210.31.230

🇮🇩 192.232.48.28

🇧🇷 177.184.79.61

🇵🇱 176.53.159.198

🇲🇾 173.239.236.21

🇺🇸 143.137.164.155

🇺🇸 143.137.164.154