JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.63.97.61

20.63.97.61 was found in our database!

This IP was reported 270 times. Confidence of Abuse is 7%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.63.97.61

Whois 20.63.97.61

IP Abuse Reports for 20.63.97.61:

This IP address has been reported a total of 270 times from 169 distinct sources. 20.63.97.61 was first reported on March 24th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Werr Brassder	2026-06-06 00:00:20 (1 week ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇺🇸 Werr Brassder	2026-06-04 00:00:21 (1 week ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇺🇸 Werr Brassder	2026-06-01 00:00:20 (2 weeks ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇺🇸 Werr Brassder	2026-05-30 00:00:22 (2 weeks ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇺🇸 Werr Brassder	2026-05-29 00:00:20 (2 weeks ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇺🇸 Werr Brassder	2026-05-27 10:09:58 (2 weeks ago)	Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09: ... show more Honeypot caught 2 probes: wp-login ×1, xmlrpc ×1. First 2026-03-25T08:09:50Z, last 2026-03-25T08:09:51Z. WordPress + Next.js decoy endpoints on a personal site (no real CMS). show less	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-04-30 13:04:29 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 sc user	2026-04-01 04:40:51 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇿🇦 agentics	2026-04-01 02:16:08 (2 months ago)	20.63.97.61 report :	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
🇩🇪 ghostwarriors	2026-04-01 01:02:39 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 sc user	2026-03-31 03:39:08 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-03-28 06:47:13 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 www.Examensfragen.de	2026-03-27 23:03:29 (2 months ago)		Web Spam Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-27 20:12:17 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-26 23:45:21 (2 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.204

🇳🇱 195.178.110.30

🇩🇪 87.186.101.150

🇺🇸 66.132.195.84

🇨🇳 14.103.121.78

🇹🇼 198.235.24.82

🇺🇸 195.184.76.128

🇹🇼 101.13.5.32

🇷🇴 80.94.92.182

🇺🇸 74.87.117.149

🇮🇶 65.20.237.175

🇧🇷 45.205.1.243

🇮🇳 34.100.227.2

🇯🇵 160.251.169.213

🇺🇸 152.32.206.181

🇨🇳 117.40.114.112

🇱🇧 94.187.15.107

🇳🇱 91.92.40.44

🇩🇪 47.254.151.115

🇬🇧 35.203.211.111