JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.22.47

20.104.22.47 was found in our database!

This IP was reported 273 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.22.47

Whois 20.104.22.47

IP Abuse Reports for 20.104.22.47:

This IP address has been reported a total of 273 times from 242 distinct sources. 20.104.22.47 was first reported on July 29th 2026, and the most recent report was 2 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 19:08:41 (2 seconds ago)	20.104.22.47 - [29/Jul/2026:12:08:39 -0700] audiobookshelf.koselig.dynu.net "GET /wp-content/plugins ... show more 20.104.22.47 - [29/Jul/2026:12:08:39 -0700] audiobookshelf.koselig.dynu.net "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4556 20.104.22.47 - [29/Jul/2026:12:08:40 -0700] audiobookshelf.koselig.dynu.net "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 504 20.104.22.47 - [29/Jul/2026:12:08:40 -0700] audiobookshelf.koselig.dynu.net "GET /inputs.php HTTP/1.1" 404 485 20.104.22.47 - [29/Jul/2026:12:08:40 -0700] audiobookshelf.koselig.dynu.net "GET /admin.php HTTP/1.1" 404 484 20.104.22.47 - [29/Jul/2026:12:08:40 -0700] audiobookshelf.koselig.dynu.net "GET /goods.php HTTP/1.1" 404 484 ... show less	Web App Attack
🇫🇷 guillaume illien	2026-07-29 19:06:58 (1 minute ago)	20.104.22.47 - - [29/Jul/2026:19:06:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.22.47 - - [29/Jul/2026:19:06:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:56 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:56 +0000] "GET /inputs.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:57 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:57 +0000] "GET /goods.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:57 +0000] "GET /file.php HTTP/1.1" 301 178 "-" "-" 20.104.22.47 - - [29/Jul/2026:19:06:58 +0000] "GET /adminfuns.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇩🇪 thesimonmanuel	2026-07-29 19:06:39 (2 minutes ago)	20.104.22.47 - - [30/Jul/2026:00:36:39 +0530] "GET /info.php HTTP/1.1" 404 27 "-" "-" "-"	Web App Attack
🇺🇸 beerman81	2026-07-29 19:05:47 (2 minutes ago)	Scan for known-vulnerable web paths (wp-content/.git/.env/PHP)	Brute-Force Web App Attack
🇨🇭 Mario Bretscher	2026-07-29 19:04:57 (3 minutes ago)	[Wed Jul 29 21:04:55.635822 2026] [php:error] [pid 2556914] [client 20.104.22.47:32464] script '/var ... show more [Wed Jul 29 21:04:55.635822 2026] [php:error] [pid 2556914] [client 20.104.22.47:32464] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 29 21:04:55.750479 2026] [php:error] [pid 2556914] [client 20.104.22.47:32464] script '/var/www/html/wp-blog-header.php' not found or unable to stat [Wed Jul 29 21:04:55.879375 2026] [php:error] [pid 2556914] [client 20.104.22.47:32464] script '/var/www/html/wp-load.php' not found or unable to stat ... show less	Web App Attack
🇫🇷 mouafiq	2026-07-29 19:00:30 (8 minutes ago)	2026-07-29 19:00:28,988 9230 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:28] "GET /en/ ... show more 2026-07-29 19:00:28,988 9230 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:28] "GET /en/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 - 14 0.007 0.017 2026-07-29 19:00:29,317 9230 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:29] "GET /en/this_is_a_new_hello_world.php HTTP/1.0" 404 - 14 0.006 0.011 2026-07-29 19:00:29,695 9230 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:29] "GET /en/inputs.php HTTP/1.0" 404 - 14 0.008 0.017 2026-07-29 19:00:30,072 9336 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:30] "GET /en/admin.php HTTP/1.0" 404 - 14 0.005 0.012 2026-07-29 19:00:30,424 9336 INFO merija werkzeug: 20.104.22.47 - - [29/Jul/2026 19:00:30] "GET /en/goods.php HTTP/1.0" 404 - 14 0.005 0.012 show less	Brute-Force SSH
🇳🇱 Mangelot Hosting	2026-07-29 19:00:21 (8 minutes ago)	(upload_shell) srv104 PHP Shell Upload 20.104.22.47 (CA/Canada/-): 1 in the last 3600 secs; Ports: * ... show more (upload_shell) srv104 PHP Shell Upload 20.104.22.47 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 london2038.com	2026-07-29 19:00:15 (8 minutes ago)	Probing for exploits 20.104.22.47 - - [29/Jul/2026:21:00:11 +0200] "GET //wp-content/plugins/fix/up. ... show more Probing for exploits 20.104.22.47 - - [29/Jul/2026:21:00:11 +0200] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.104.22.47 - - [29/Jul/2026:21:00:11 +0200] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" show less	Hacking Web App Attack
🇫🇮 mnazibo	2026-07-29 19:00:05 (8 minutes ago)	Date: 29/Jul/2026 21:25:00 \| Reported IP: 20.104.22.47 mod_security \| id: 930130 \| CA/group.my_domai ... show more Date: 29/Jul/2026 21:25:00 \| Reported IP: 20.104.22.47 mod_security \| id: 930130 \| CA/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /images/class-config.php \| Logs: Restricted File Access Attempt show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 Blexyel	2026-07-29 18:59:27 (9 minutes ago)	20.104.22.47 - - [29/Jul/2026:20:59:26 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "-" "pingusmc ... show more 20.104.22.47 - - [29/Jul/2026:20:59:26 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "-" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇫🇷 dwmp	2026-07-29 18:56:48 (11 minutes ago)	Url probing: /images/class-config.php	Web App Attack
🇧🇪 Saec	2026-07-29 18:56:04 (12 minutes ago)	Jarvis auto-ban: CF honeypot path /admin.php (2× on saec.me)	Port Scan Web App Attack
🇳🇱 CryptoYakari	2026-07-29 18:55:50 (12 minutes ago)	[Wed Jul 29 21:55:45.664517 2026] [proxy_fcgi:error] [pid 2968576:tid 2968630] [client 20.104.22.47: ... show more [Wed Jul 29 21:55:45.664517 2026] [proxy_fcgi:error] [pid 2968576:tid 2968630] [client 20.104.22.47:0] AH01071: Got error 'Primary script unknown' [Wed Jul 29 21:55:45.804334 2026] [proxy_fcgi:error] [pid 2968575:tid 2968596] [client 20.104.22.47:0] AH01071: Got error 'Primary script unknown' [Wed Jul 29 21:55:45.946453 2026] [proxy_fcgi:error] [pid 2968576:tid 2968602] [client 20.104.22.47:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2026-07-29 18:52:25 (16 minutes ago)	20.104.22.47 - - [29/Jul/2026:21:52:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.22.47 - - [29/Jul/2026:21:52:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 660 "-" "-" ... show less	Web App Attack
🇩🇪 NihiliousMonk	2026-07-29 18:52:14 (16 minutes ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack

Showing 1 to 15 of 273 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 217.112.100.11

🇨🇳 203.176.95.143

🇺🇸 195.184.76.38

🇸🇪 192.36.198.80

🇵🇦 191.98.196.19

🇬🇧 154.16.44.140

🇳🇱 138.226.239.21

🇺🇸 138.68.41.152

🇨🇳 117.50.226.213

🇨🇭 107.189.2.131

🇫🇷 79.137.76.231

🇳🇱 77.83.240.70

🇺🇸 52.21.227.35

🇺🇸 47.254.28.173

🇺🇸 45.79.8.221

🇫🇷 45.77.61.56

🇸🇬 43.156.36.169

🇻🇪 38.52.138.197

🇳🇱 213.176.26.44

🇺🇦 213.5.196.198