JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.22.206.221

20.22.206.221 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.22.206.221

Whois 20.22.206.221

IP Abuse Reports for 20.22.206.221:

This IP address has been reported a total of 45 times from 43 distinct sources. 20.22.206.221 was first reported on June 11th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-06-12 00:37:47 (18 hours ago)	WebAttack or semilar from 20.22.206.221	Web App Attack
🇩🇪 HandyTreff.de	2026-06-12 00:29:49 (18 hours ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.148 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.148 (Bad < -10 / Very Bad < -20 / Extreme < -35) show less	Web App Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-12 00:07:23 (18 hours ago)	20.22.206.221 - - [12/Jun/2026:03:07:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.22.206.221 - - [12/Jun/2026:03:07:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 709 "-" "-" ... show less	Web App Attack
🇨🇭 zynex	2026-06-11 23:59:47 (18 hours ago)	URL Probing: /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇩🇪 pscriptos	2026-06-11 23:56:19 (18 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 LRob.fr	2026-06-11 22:45:03 (20 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇮🇩 Burayot	2026-06-11 22:42:11 (20 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.22.206.221 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.22.206.221 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-06-11 22:06:11 (20 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-11 21:59:47 (20 hours ago)	Auto-ban: >3000 req/min op 2026-06-11	Web App Attack SSH Hacking
🇨🇦 polycoda	2026-06-11 21:53:15 (21 hours ago)	⌨️ Probes for phpinfo everywhere	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-06-11 21:16:50 (21 hours ago)	20.22.206.221 - - [12/Jun/2026:00:16:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.22.206.221 - - [12/Jun/2026:00:16:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 721 "-" "-" 20.22.206.221 - - [12/Jun/2026:00:16:48 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 404 628 "-" "-" ... show less	Web App Attack
🇫🇮 as211431.net	2026-06-11 20:46:49 (22 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/includes/index.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-11 20:34:31 (22 hours ago)	20.22.206.221 - - [11/Jun/2026:22:34:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.22.206.221 - - [11/Jun/2026:22:34:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:17 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:19 +0200] "GET /core/init.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:19 +0200] "GET /aa.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:19 +0200] "GET /xmrlpc.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:19 +0200] "GET /class.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:20 +0200] "GET /goods.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:20 +0200] "GET /info.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:20 +0200] "GET /as.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:20 +0200] "GET /bb.php HTTP/1.1" 404 164 "-" "-" 20.22.206.221 - - [11/Jun/2026:22:34:20 +0200] "GET /abo ... show less	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-11 20:06:52 (22 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇷🇴 INTEQ	2026-06-11 19:40:15 (23 hours ago)	Web attack from 20.22.206.221	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.182.64.143

🇭🇰 152.32.189.59

🇨🇳 101.201.233.222

🇵🇭 58.69.56.44

🇫🇷 51.159.125.208

🇲🇽 46.250.168.209

🇬🇧 35.203.210.200

🇺🇸 216.180.246.48

🇺🇸 193.3.53.11

🇩🇪 192.109.200.175

🇧🇷 187.33.59.116

🇩🇪 167.94.146.74

🇺🇸 66.132.195.81

🇩🇪 64.89.163.166

🇬🇧 35.203.210.108

🇧🇷 20.226.17.117

🇨🇱 200.68.44.83

🇺🇸 172.105.128.13

🇰🇷 115.178.75.243

🇨🇳 112.31.137.225