JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.172.218.20

20.172.218.20 was found in our database!

This IP was reported 376 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.172.218.20

Whois 20.172.218.20

IP Abuse Reports for 20.172.218.20:

This IP address has been reported a total of 376 times from 304 distinct sources. 20.172.218.20 was first reported on July 21st 2026, and the most recent report was 41 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2026-07-22 06:27:00 (41 minutes ago)	20.172.218.20 - - [22/Jul/2026:03:38:56 +0300] "GET /classwithtostring.php HTTP/1.1" 404 236 "-" "Mo ... show more 20.172.218.20 - - [22/Jul/2026:03:38:56 +0300] "GET /classwithtostring.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - - [22/Jul/2026:03:38:56 +0300] "GET /css/index.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-22 06:18:08 (50 minutes ago)	"GET /wp-admin/maint/index.php HTTP/1.1"	Hacking Web App Attack
🇮🇳 evicky2002	2026-07-22 06:00:00 (1 hour ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-07-22 05:14:06 (1 hour ago)	2558 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /wp-blog ... show more 2558 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /wp-blog.php HTTP/1.1 show less	Web App Attack
🇭🇺 DumaNet	2026-07-22 04:50:00 (2 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 21. 23:37:46 Source IP: 20.172.218.20 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 21. 23:37:46 Source IP: 20.172.218.20 Portion of the log(s): 20.172.218.20 - [21/Jul/2026:23:37:46 +0200] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - [21/Jul/2026:23:37:46 +0200] "GET /php8.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - [21/Jul/2026:23:37:46 +0200] "GET /admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - [21/Jul/2026:23:37:46 +0200] "GET /adminfuns.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - [21/Jul/2026:23:37:45 +0200] "GET /wp-content/plugins/admin.php show less	Web App Attack Hacking
🇲🇽 octageeks.com	2026-07-22 04:16:05 (2 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇳 walkintoadmin	2026-07-22 02:37:05 (4 hours ago)	wp_filemanager.php botnet scanner	Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-07-22 01:22:21 (5 hours ago)	GET /atomlib.php	Web App Attack
Anonymous	2026-07-22 01:20:40 (5 hours ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇵🇱 nfsec.pl	2026-07-22 01:20:33 (5 hours ago)	20.172.218.20 - - [22/Jul/2026:01:20:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.172.218.20 - - [22/Jul/2026:01:20:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 357 "-" "-" 20.172.218.20 - - [22/Jul/2026:01:20:31 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 357 "-" "-" 20.172.218.20 - - [22/Jul/2026:01:20:32 +0000] "GET /wp.php HTTP/1.1" 403 357 "-" "-" 20.172.218.20 - - [22/Jul/2026:01:20:32 +0000] "GET /new.php HTTP/1.1" 403 357 "-" "-" 20.172.218.20 - - [22/Jul/2026:01:20:33 +0000] "GET /class-t.api.php HTTP/1.1" 403 357 "-" "-" ... show less	Web App Attack Exploited Host
🇱🇻 garmtech.com	2026-07-22 01:18:24 (5 hours ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 enjoyably	2026-07-22 01:17:12 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇩🇪 webanyone	2026-07-22 01:15:52 (5 hours ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
Anonymous	2026-07-22 01:14:36 (5 hours ago)	20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /classwithtostring.php HTTP/1.1" 404 16 "-" "Moz ... show more 20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /classwithtostring.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /css/index.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /css/index.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /error.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.172.218.20 - - [22/Jul/2026:09:14:35 +0800] "GET /error.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Saf ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-22 01:14:15 (5 hours ago)	Attempt to scan vulnerabilities	Hacking

Showing 1 to 15 of 376 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.188.242.139

🇨🇳 183.61.109.221

🇺🇸 172.252.13.101

🇧🇷 168.205.27.130

🇺🇸 162.216.149.226

🇺🇸 162.216.149.173

🇺🇸 150.107.38.182

🇮🇳 111.235.66.253

🇿🇲 102.23.122.235

🇨🇳 101.42.41.164

🇫🇷 85.217.140.41

🇧🇬 78.128.112.6

🇺🇸 66.240.192.138

🇩🇪 64.89.163.179

🇯🇵 40.81.194.185

🇨🇳 39.181.107.35

🇬🇧 194.36.27.215

🇧🇷 191.219.189.163

🇺🇸 162.216.150.54

🇮🇩 125.161.159.189