JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.147.44

20.220.147.44 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.147.44

Whois 20.220.147.44

IP Abuse Reports for 20.220.147.44:

This IP address has been reported a total of 310 times from 257 distinct sources. 20.220.147.44 was first reported on June 15th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-06-16 01:02:48 (16 minutes ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-16 00:12:47 (1 hour ago)	Too many Status 40X (62) Request Overload (128)	Brute-Force Web App Attack
🇩🇪 4server	2026-06-15 23:17:11 (2 hours ago)	[TueJun1601:17:06.6019642026][security2:error][pid72762:tid72832][client20.220.147.44:0]ModSecurity: ... show more [TueJun1601:17:06.6019642026][security2:error][pid72762:tid72832][client20.220.147.44:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.gustotondo.ch\"][uri\"/consultantx/wp-config.php\"][unique_id\"ajCH8pVVSGfNHMGayDDF5AAAABY\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Donovan	2026-06-15 23:13:19 (2 hours ago)	Web scan/exploit blocked by fail2ban on commitshift.fr - jail: npm-http - 10 attempt(s)	Web App Attack
🇩🇪 netclix.gr	2026-06-15 23:11:56 (2 hours ago)	(aggressive_scan) Aggressive Web Exploit Scan 20.220.147.44 (CA/Canada/-): 5 in the last 4600 secs; ... show more (aggressive_scan) Aggressive Web Exploit Scan 20.220.147.44 (CA/Canada/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.220.147.44 - - [16/Jun/2026:02:11:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-" 20.220.147.44 - - [16/Jun/2026:02:11:51 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-" 20.220.147.44 - - [16/Jun/2026:02:11:51 +0300] "GET /jj.php HTTP/1.1" 404 808 "-" "-" 20.220.147.44 - - [16/Jun/2026:02:11:51 +0300] "GET /click.php HTTP/1.1" 404 808 "-" "-" 20.220.147.44 - - [16/Jun/2026:02:11:51 +0300] "GET /222.php HTTP/1.1" 404 808 "-" "-" show less	Port Scan
🇺🇸 daveoctober	2026-06-15 23:06:58 (2 hours ago)	October Sentinel: honeypot triggered	Bad Web Bot Web App Attack
🇨🇿 ddw	2026-06-15 23:06:50 (2 hours ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇩🇪 Dennis	2026-06-15 23:02:14 (2 hours ago)	20.220.147.44 has been banned for triggering http-probing (11 events over 3.690260877s).	Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-15 23:00:58 (2 hours ago)	[redacted] 20.220.147.44 - - [15/Jun/2026:22:19:46 +0100] "GET /wp-admin/js HTTP/1.1" 200 147 0/1175 ... show more [redacted] 20.220.147.44 - - [15/Jun/2026:22:19:46 +0100] "GET /wp-admin/js HTTP/1.1" 200 147 0/11751 "-" "-" [redacted] 20.220.147.44 - - [15/Jun/2026:22:19:46 +0100] "GET /wp-admin/css/[redacted] HTTP/1.1" 200 147 0/11915 "-" "-" show less	Bad Web Bot Web App Attack
🇺🇸 lnklnx	2026-06-15 22:59:20 (2 hours ago)	git.lnklnx.com:80 20.220.147.44 - - [15/Jun/2026:17:59:16 -0500] "GET /wp-content/plugins/hellopress ... show more git.lnklnx.com:80 20.220.147.44 - - [15/Jun/2026:17:59:16 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 651 "-" "-" ... show less	Web App Attack
🇺🇸 nationaleventpros.com	2026-06-15 22:54:36 (2 hours ago)	vulnerability scan	Web App Attack
🇫🇷 [email protected]	2026-06-15 22:53:03 (2 hours ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
Anonymous	2026-06-15 22:51:23 (2 hours ago)	[Mon Jun 15 22:51:22.094312 2026] [proxy_fcgi:error] [pid 1250843:tid 140006672824000] [client 20.22 ... show more [Mon Jun 15 22:51:22.094312 2026] [proxy_fcgi:error] [pid 1250843:tid 140006672824000] [client 20.220.147.44:33539] AH01071: Got error 'Primary script unknown' [Mon Jun 15 22:51:22.423440 2026] [proxy_fcgi:error] [pid 1250843:tid 140007637493440] [client 20.220.147.44:33539] AH01071: Got error 'Primary script unknown' [Mon Jun 15 22:51:22.708874 2026] [proxy_fcgi:error] [pid 1250843:tid 140006647645888] [client 20.220.147.44:33539] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇨🇭 beatsnet.com	2026-06-15 22:46:42 (2 hours ago)	[Tue Jun 16 00:46:35.802467 2026] [proxy_fcgi:error] [pid 42243:tid 20404475885584] [client 20.220.1 ... show more [Tue Jun 16 00:46:35.802467 2026] [proxy_fcgi:error] [pid 42243:tid 20404475885584] [client 20.220.147.44:40655] AH01071: Got error 'Primary script unknown' [Tue Jun 16 00:46:35.936337 2026] [proxy_fcgi:error] [pid 42243:tid 20404475885584] [client 20.220.147.44:40655] AH01071: Got error 'Primary script unknown' [Tue Jun 16 00:46:36.037923 2026] [proxy_fcgi:error] [pid 42243:tid 20404475885584] [client 20.220.147.44:40655] AH01071: Got error 'Primary script unknown' [Tue Jun 16 00:46:36.140064 2026] [proxy_fcgi:error] [pid 42243:tid 20404475885584] [client 20.220.147.44:40655] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 itsolon	2026-06-15 22:36:37 (2 hours ago)	[16/Jun/2026:00:36:36 +0200] 178156299654.658173 20.220.147.44 61336 217.154.7.177 80 [16/Jun/2026:0 ... show more [16/Jun/2026:00:36:36 +0200] 178156299654.658173 20.220.147.44 61336 217.154.7.177 80 [16/Jun/2026:00:36:36 +0200] 178156299677.248955 20.220.147.44 61336 217.154.7.177 80 [16/Jun/2026:00:36:37 +0200] 17815629979.926800 20.220.147.44 61336 217.154.7.177 80 [16/Jun/2026:00:36:37 +0200] 178156299738.248695 20.220.147.44 61336 217.154.7.177 80 [16/Jun/2026:00:36:37 +0200] 178156299722.865892 20.220.147.44 61336 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 188.72.11.45

🇮🇩 182.23.20.116

🇧🇷 179.48.229.117

🇻🇳 113.190.67.103

🇨🇳 110.249.201.31

🇨🇳 58.50.167.218

🇩🇪 45.129.242.47

🇺🇸 45.55.158.168

🇨🇳 39.80.43.230

🇺🇸 32.185.206.57

🇺🇸 3.131.24.55

🇩🇪 209.50.190.234

🇨🇳 203.2.112.241

🇻🇬 199.182.195.166

🇱🇧 185.192.162.52

🇯🇴 176.28.157.113

🇳🇬 165.154.10.165

🇺🇸 159.65.222.96

🇸🇬 148.66.132.204

🇺🇸 143.198.116.47