JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.113.56.22

20.113.56.22 was found in our database!

This IP was reported 341 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.113.56.22

Whois 20.113.56.22

IP Abuse Reports for 20.113.56.22:

This IP address has been reported a total of 341 times from 281 distinct sources. 20.113.56.22 was first reported on July 25th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-26 12:52:13 (12 minutes ago)	20.113.56.22 - - [26/Jul/2026:15:52:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.113.56.22 - - [26/Jul/2026:15:52:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 660 "-" "-" ... show less	Web App Attack
🇩🇪 hchristo	2026-07-26 12:51:15 (13 minutes ago)	[Sun Jul 26 14:51:14.699640 2026] [proxy_fcgi:error] [pid 14412:tid 14464] [client 20.113.56.22:1521 ... show more [Sun Jul 26 14:51:14.699640 2026] [proxy_fcgi:error] [pid 14412:tid 14464] [client 20.113.56.22:15211] AH01071: Got error 'Primary script unknown' [Sun Jul 26 14:51:14.718053 2026] [proxy_fcgi:error] [pid 14412:tid 14487] [client 20.113.56.22:15211] AH01071: Got error 'Primary script unknown' [Sun Jul 26 14:51:14.768820 2026] [proxy_fcgi:error] [pid 14412:tid 14503] [client 20.113.56.22:15211] AH01071: Got error 'Primary script unknown' [Sun Jul 26 14:51:14.787849 2026] [proxy_fcgi:error] [pid 14412:tid 14504] [client 20.113.56.22:15211] AH01071: Got error 'Primary script unknown' [Sun Jul 26 14:51:14.841005 2026] [proxy_fcgi:error] [pid 14412:tid 14493] [client 20.113.56.22:15211] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 i-turnradio.nl	2026-07-26 12:43:26 (21 minutes ago)	2026-07-26 @ 14:43:26 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-26 @ 14:43:26 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇬🇧 Oakley	2026-07-26 12:39:20 (25 minutes ago)	(mod_security) mod_security (id:900191) triggered by 20.113.56.22 (DE/Germany/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900191) triggered by 20.113.56.22 (DE/Germany/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇹🇭 thaizone.com	2026-07-26 12:26:16 (38 minutes ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
🇯🇵 ki3	2026-07-26 12:25:55 (39 minutes ago)	Fail2Ban: Web App Attacks and Forum Spam 20.113.56.22 1785068705.7676227(JST)	Web Spam Bad Web Bot Web App Attack
🇮🇩 zam	2026-07-26 12:13:25 (51 minutes ago)	20.113.56.22 - - [26/Jul/2026:12:13:09 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.113.56.22 - - [26/Jul/2026:12:13:09 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7449 20.113.56.22 - - [26/Jul/2026:12:13:11 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 7449 20.113.56.22 - - [26/Jul/2026:12:13:12 +0000] "GET /media.php HTTP/1.1" 404 7449 20.113.56.22 - - [26/Jul/2026:12:13:13 +0000] "GET /images.php HTTP/1.1" 404 7449 20.113.56.22 - - [26/Jul/2026:12:13:14 +0000] "GET /adminner.php HTTP/1.1" 404 7449 {"log":"20.113.56.22 - - [26/Jul/2026:12:13:16 +0000] "GET /admin.php show less	Web App Attack
🇩🇪 yvoictra	2026-07-26 12:04:12 (1 hour ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing	Web App Attack
🇨🇭 beatsnet.com	2026-07-26 11:46:25 (1 hour ago)	[Sun Jul 26 13:46:25.589245 2026] [proxy_fcgi:error] [pid 14306:tid 2490613987344] [client 20.113.56 ... show more [Sun Jul 26 13:46:25.589245 2026] [proxy_fcgi:error] [pid 14306:tid 2490613987344] [client 20.113.56.22:15335] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:46:25.613888 2026] [proxy_fcgi:error] [pid 14306:tid 2490613987344] [client 20.113.56.22:15335] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:46:25.631529 2026] [proxy_fcgi:error] [pid 14306:tid 2490613987344] [client 20.113.56.22:15335] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:46:25.649015 2026] [proxy_fcgi:error] [pid 14306:tid 2490613983248] [client 20.113.56.22:15335] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇬🇧 Greg Poulson	2026-07-26 11:39:31 (1 hour ago)	Our website was hit by this DDOS at a rate of 133 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇺🇸 LotPhantom	2026-07-26 11:38:53 (1 hour ago)	20.113.56.22 - - [26/Jul/2026:11:37:53 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.113.56.22 - - [26/Jul/2026:11:37:53 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "0" ... show less	Web App Attack
🇩🇪 tikket	2026-07-26 11:35:13 (1 hour ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇫🇷 tecnoacquisti.com	2026-07-26 11:23:36 (1 hour ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇫🇷 bazter.pro	2026-07-26 11:21:30 (1 hour ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-07-26 11:10:43 (1 hour ago)	20.113.56.22 - - [26/Jul/2026:13:10:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.113.56.22 - - [26/Jul/2026:13:10:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 63653 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 341 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 114.130.85.36

🇮🇳 152.59.26.156

🇵🇱 145.239.89.124

🇨🇳 119.113.78.159

🇨🇳 114.115.129.77

🇺🇸 64.62.156.51

🇧🇪 35.195.198.145

🇰🇭 202.178.127.231

🇳🇱 176.65.148.244

🇺🇸 172.234.192.12

🇵🇭 158.62.64.47

🇩🇿 129.45.84.205

🇻🇳 116.98.245.72

🇷🇺 45.195.221.26

🇧🇷 45.190.9.113

🇬🇧 5.226.140.29

🇨🇳 218.9.233.231

🇸🇬 209.42.27.159

🇧🇷 191.232.199.39

🇲🇾 182.62.172.206