JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.193.155

20.220.193.155 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.193.155

Whois 20.220.193.155

IP Abuse Reports for 20.220.193.155:

This IP address has been reported a total of 210 times from 182 distinct sources. 20.220.193.155 was first reported on July 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Nevermind	2026-07-02 14:34:47 (1 hour ago)	20.220.193.155 - - [02/Jul/2026:16:34:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.193.155 - - [02/Jul/2026:16:34:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-" 20.220.193.155 - - [02/Jul/2026:16:34:46 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-" 20.220.193.155 - - [02/Jul/2026:16:34:47 +0200] "GET /x.php HTTP/1.1" 404 808 "-" "-" 20.220.193.155 - - [02/Jul/2026:16:34:47 +0200] "GET /by.php HTTP/1.1" 404 808 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-02 14:31:13 (1 hour ago)	Bot / seems abusive / Apache connections: 20	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 Operator873	2026-07-02 14:29:41 (1 hour ago)	2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, se ... show more 2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "[OBFUSCATED]" 2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, server: [OBFUSCATED], request: "GET /this_is_a_new_hello_world.php HTTP/1.1", host: "[OBFUSCATED]" 2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, server: [OBFUSCATED], request: "GET /this_is_a_new_hello_world.php HTTP/1.1", host: "[OBFUSCATED]" 2026/07/02 09:29:38 [error] 3414897#0: 1069384 access forbidden by rule, client: 20.220.193.155, server: [OBFUSCATED], request: "GET /x.php HTTP/1 ... show less	Brute-Force Web App Attack
🇳🇱 Webhoster	2026-07-02 14:24:31 (1 hour ago)	CrowdSec scenario: crowdsecurity/http-probing	Hacking
🇩🇪 kosmas	2026-07-02 14:17:34 (1 hour ago)	[Thu Jul 02 17:17:34.245624 2026] [proxy_fcgi:error] [pid 2890353:tid 2890429] [client 20.220.193.15 ... show more [Thu Jul 02 17:17:34.245624 2026] [proxy_fcgi:error] [pid 2890353:tid 2890429] [client 20.220.193.155:40397] AH01071: Got error 'Primary script unknown' [Thu Jul 02 17:17:34.343133 2026] [proxy_fcgi:error] [pid 2890353:tid 2890445] [client 20.220.193.155:40397] AH01071: Got error 'Primary script unknown' [Thu Jul 02 17:17:34.440781 2026] [proxy_fcgi:error] [pid 2890353:tid 2890438] [client 20.220.193.155:40397] AH01071: Got error 'Primary script unknown' [Thu Jul 02 17:17:34.544964 2026] [proxy_fcgi:error] [pid 2890353:tid 2890434] [client 20.220.193.155:40397] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-02 14:10:43 (1 hour ago)	(caddyscan) Scanner path probe from 20.220.193.155 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 20.220.193.155 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.220.193.155 - - [02/Jul/2026:14:09:55 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 20.220.193.155 - - [02/Jul/2026:14:10:31 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 20.220.193.155 - - [02/Jul/2026:14:10:32 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" [REDACTED] 200 2627 20.220.193.155 - - [02/Jul/2026:14:10:35 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" [REDACTED] 200 2627 20.220.193.155 - - [02/Jul/2026:14:10:39 +0000] "GET /wp-admin/css/ HTTP/1.1" show less	Port Scan
🇭🇳 unph	2026-07-02 14:09:19 (2 hours ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇺🇸 KitsuneTech	2026-07-02 14:05:30 (2 hours ago)	20.220.193.155 - - [02/Jul/2026:09:05:29 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.193.155 - - [02/Jul/2026:09:05:29 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 285 "-" "-" ... show less	Web App Attack
🇺🇸 revslowmo	2026-07-02 14:03:55 (2 hours ago)	Bot attempt ssh bruteforce	Brute-Force SSH
🇩🇪 HoneyPotFRI	2026-07-02 13:57:33 (2 hours ago)	20.220.193.155 - - [02/Jul/2026:15:57:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.193.155 - - [02/Jul/2026:15:57:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.220.193.155 [redacted] (8075-MICROSOFT-CORP-MSN-AS-BLOCK Canada T ... show less	Bad Web Bot Web App Attack
🇺🇸 agenciahypelab.com.br	2026-07-02 13:56:41 (2 hours ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇬🇧 djboddington	2026-07-02 13:54:45 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇧🇪 Saec	2026-07-02 13:45:02 (2 hours ago)	Jarvis auto-ban: CF top attacker on saec.me (96 hits, CA)	Port Scan Web App Attack
🇨🇿 Prcek	2026-07-02 13:43:52 (2 hours ago)	PortScan:HOST=20.220.193.155,DPORTS=80,443	Port Scan
🇩🇪 pscriptos	2026-07-02 13:43:51 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.111.14

🇵🇦 181.197.24.148

🇨🇳 180.212.94.92

🇺🇸 162.216.150.98

🇲🇽 148.216.28.11

🇩🇪 128.1.121.141

🇮🇳 125.20.210.182

🇨🇳 116.172.249.68

🇬🇧 51.195.183.222

🇸🇪 46.59.122.78

🇳🇱 45.198.224.92

🇮🇩 36.37.73.242

🇬🇧 35.203.210.161

🇨🇳 14.103.75.9

🇨🇳 14.103.54.150

🇨🇴 191.102.80.82

🇦🇷 181.164.12.188

🇪🇪 158.173.75.144

🇨🇳 111.53.166.163

🇮🇹 79.55.197.38