JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.150.55

20.220.150.55 was found in our database!

This IP was reported 325 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.150.55

Whois 20.220.150.55

IP Abuse Reports for 20.220.150.55:

This IP address has been reported a total of 325 times from 273 distinct sources. 20.220.150.55 was first reported on June 13th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-06-14 01:00:58 (1 hour ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-06-14 00:41:58 (1 hour ago)	Portscan: TCP/80 (8x)	Port Scan
🇯🇵 jup10393	2026-06-14 00:24:00 (1 hour ago)	20.220.150.55 [20.220.150.55] - - [14/Jun/2026:05:47:38 +0900] "GET /wp-content/plugins/hellopress/w ... show more 20.220.150.55 [20.220.150.55] - - [14/Jun/2026:05:47:38 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 406 289 "-" "-" show less	Web App Attack
🇺🇸 mc4bbs	2026-06-14 00:04:19 (2 hours ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404 UA=""; GET /wp-sing.php -> 404 UA=""; GET /wp-thi.php -> 404 UA=""; GET /wp-der.php -> 404 UA=""; GET /wp-ver.php -> 404 UA="" show less	Web App Attack Hacking
Anonymous	2026-06-14 00:02:12 (2 hours ago)	20.220.150.55 - - [14/Jun/2026:02:02:08 +0200] "GET /about2.php HTTP/1.1" 301 449 "-" "-" 20.220.150 ... show more 20.220.150.55 - - [14/Jun/2026:02:02:08 +0200] "GET /about2.php HTTP/1.1" 301 449 "-" "-" 20.220.150.55 - - [14/Jun/2026:02:02:09 +0200] "GET /about2.php HTTP/1.1" 403 4401 "-" "-" 20.220.150.55 - - [14/Jun/2026:02:02:09 +0200] "GET /dr.php HTTP/1.1" 301 441 "-" "-" 20.220.150.55 - - [14/Jun/2026:02:02:09 +0200] "GET /dr.php HTTP/1.1" 403 1807 "-" "-" 20.220.150.55 - - [14/Jun/2026:02:02:09 +0200] "GET /xamp.php HTTP/1.1" 301 445 "-" "-" ... show less	Brute-Force SSH
🇩🇪 barbarella	2026-06-13 23:58:55 (2 hours ago)	Multiple (12) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-conten ... show more Multiple (12) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content/plugins/hellopress/wp_filemanager.php) 23:58:56 Hacking attempt of vulnerable PHP Script (GET /this_is_a_new_hello_world.php) 23:58:57 Hacking attempt of vulnerable PHP Script (GET /crgio.php) 23:58:57 Hacking attempt of vulnerable PHP Script (GET /drykl.php) 23:58:57 Hacking attempt of vulnerable PHP Script (GET /wp-sing.php) 23:58:58 Hacking attempt of vulnerable PHP Script (GET /mifta.php) 23:58:58 Hacking attempt of vulnerable PHP Script (GET /wp-thi.php) 23:58:59 Hacking attempt of vulnerable PHP Script (GET /aevly.php) 23:58:59 Hacking attempt of vulnerable PHP Script (GET /vx.php) show less	Hacking Web App Attack
🇬🇧 Greg Poulson	2026-06-13 23:55:13 (2 hours ago)	Our website was hit by this DDOS at a rate of 124 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇫🇷 Rom74	2026-06-13 23:40:10 (2 hours ago)	[Sun Jun 14 01:40:09.476769 2026] [proxy_fcgi:error] [pid 2282758:tid 131878799513280] [client 20.22 ... show more [Sun Jun 14 01:40:09.476769 2026] [proxy_fcgi:error] [pid 2282758:tid 131878799513280] [client 20.220.150.55:35056] AH01071: Got error 'Primary script unknown' [Sun Jun 14 01:40:09.581005 2026] [proxy_fcgi:error] [pid 2282758:tid 131878312998592] [client 20.220.150.55:35056] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-06-13 23:32:08 (2 hours ago)	20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 525 "-" "-" 20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4400 "-" "-" 20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 487 "-" "-" 20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 1807 "-" "-" 20.220.150.55 - - [14/Jun/2026:01:32:07 +0200] "GET /x.php HTTP/1.1" 301 439 "-" "-" ... show less	Brute-Force SSH
🇸🇪 nekopavel	2026-06-13 23:32:00 (2 hours ago)	20.220.150.55 - - [14/Jun/2026:01:31:51 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.150.55 - - [14/Jun/2026:01:31:51 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" intelligence.neko.chat "-""0.000" "-""Toronto" "CA" 20.220.150.55 - - [14/Jun/2026:01:31:51 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 19"-" intelligence.neko.chat "-""0.004" "0.004""Toronto" "CA" 20.220.150.55 - - [14/Jun/2026:01:31:58 +0200]"GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 162"-" intelligence.neko.chat "-""0.000" "-""Toronto" "CA" ... show less	Hacking Bad Web Bot Web App Attack
🇹🇷 joethesleeper	2026-06-13 23:23:23 (2 hours ago)	[Sun Jun 14 02:23:21.896769 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] ... show more [Sun Jun 14 02:23:21.896769 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] script '/var/lib/roundcube/public_html/this_is_a_new_hello_world.php' not found or unable to stat [Sun Jun 14 02:23:22.158699 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] script '/var/lib/roundcube/public_html/crgio.php' not found or unable to stat [Sun Jun 14 02:23:22.419538 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] script '/var/lib/roundcube/public_html/drykl.php' not found or unable to stat [Sun Jun 14 02:23:22.702562 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] script '/var/lib/roundcube/public_html/wp-sing.php' not found or unable to stat [Sun Jun 14 02:23:22.975064 2026] [php:error] [pid 3907594:tid 3907594] [client 20.220.150.55:14982] script '/var/lib/roundcube/public_html/mifta.php' not found or unable to stat ... show less	Web App Attack
🇨🇦 lakered	2026-06-13 23:11:03 (2 hours ago)	Detectors: [NGINX] \| Reasons: Automated scan targeting an unauthorized host or default server sinkho ... show more Detectors: [NGINX] \| Reasons: Automated scan targeting an unauthorized host or default server sinkhole show less	Port Scan Bad Web Bot
Anonymous	2026-06-13 23:06:02 (2 hours ago)		Bad Web Bot
🇩🇪 Interceptor_HQ	2026-06-13 22:52:36 (3 hours ago)	request_uri: /wp-content/plugins/hellopress/wp_filemanager.php -- automatic report --	Brute-Force Hacking
🇮🇩 soc-yk	2026-06-13 22:42:11 (3 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 111 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 111 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking

Showing 1 to 15 of 325 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.121.42.178

🇵🇪 190.119.63.81

🇺🇸 165.154.36.79

🇺🇸 162.216.149.242

🇩🇪 158.94.208.205

🇨🇳 111.30.42.43

🇧🇪 104.155.52.128

🇮🇩 103.172.20.218

🇳🇱 86.54.31.40

🇺🇸 68.60.77.128

🇺🇸 66.132.172.138

🇩🇪 64.89.163.235

🇺🇸 64.62.156.24

🇺🇸 34.186.8.148

🇳🇱 34.13.177.195

🇸🇬 8.219.188.175

🇷🇺 213.177.102.238

🇬🇧 195.206.182.212

🇩🇪 194.88.98.106

🇺🇸 172.253.86.80