JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.194.176

20.220.194.176 was found in our database!

This IP was reported 238 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.194.176

Whois 20.220.194.176

IP Abuse Reports for 20.220.194.176:

This IP address has been reported a total of 238 times from 201 distinct sources. 20.220.194.176 was first reported on June 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 itsolon	2026-06-01 20:03:41 (2 days ago)	[01/Jun/2026:22:03:40 +0200] 178034422019.946303 20.220.194.176 65459 217.154.7.177 443 [01/Jun/2026 ... show more [01/Jun/2026:22:03:40 +0200] 178034422019.946303 20.220.194.176 65459 217.154.7.177 443 [01/Jun/2026:22:03:41 +0200] 178034422198.749584 20.220.194.176 65459 217.154.7.177 443 [01/Jun/2026:22:03:41 +0200] 178034422176.492854 20.220.194.176 65459 217.154.7.177 443 [01/Jun/2026:22:03:41 +0200] 178034422145.562767 20.220.194.176 65459 217.154.7.177 443 [01/Jun/2026:22:03:41 +0200] 178034422147.681387 20.220.194.176 65459 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 chrisj	2026-06-01 20:00:22 (2 days ago)	[Mon Jun 01 20:00:22.022761 2026] [proxy_fcgi:error] [pid 129685:tid 129685] [client 20.220.194.176: ... show more [Mon Jun 01 20:00:22.022761 2026] [proxy_fcgi:error] [pid 129685:tid 129685] [client 20.220.194.176:4653] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:00:22.118551 2026] [proxy_fcgi:error] [pid 129685:tid 129685] [client 20.220.194.176:4653] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:00:22.180989 2026] [proxy_fcgi:error] [pid 129685:tid 129685] [client 20.220.194.176:4653] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 LRob.fr	2026-06-01 20:00:12 (2 days ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇫🇮 Christopher Hughes	2026-06-01 19:55:49 (2 days ago)	[Mon Jun 01 20:45:36.642924 2026] [proxy_fcgi:error] [pid 305225:tid 139774786520640] [client 20.220 ... show more [Mon Jun 01 20:45:36.642924 2026] [proxy_fcgi:error] [pid 305225:tid 139774786520640] [client 20.220.194.176:15122] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:55:48.011345 2026] [proxy_fcgi:error] [pid 305225:tid 139774794913344] [client 20.220.194.176:15153] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:55:48.321419 2026] [proxy_fcgi:error] [pid 305225:tid 139775042401856] [client 20.220.194.176:15153] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:55:48.618761 2026] [proxy_fcgi:error] [pid 305225:tid 139775034009152] [client 20.220.194.176:15153] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:55:48.932265 2026] [proxy_fcgi:error] [pid 305225:tid 139774794913344] [client 20.220.194.176:15153] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 devsecops.cv	2026-06-01 19:45:08 (2 days ago)	Fail2Ban: plesk-scanner - 10 failures	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 SANYALnet Labs	2026-06-01 19:44:11 (2 days ago)	Jun 1 19:43:43 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01 ... show more Jun 1 19:43:43 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-" Jun 1 19:43:44 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:44 +0000] "GET /error.php HTTP/1.1" 404 341 "-" "-" Jun 1 19:43:44 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:44 +0000] "GET /wpo.php HTTP/1.1" 404 341 "-" "-" Jun 1 19:43:46 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:45 +0000] "GET /shellalfa.php HTTP/1.1" 404 341 "-" "-" Jun 1 19:43:54 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:54 +0000] "GET /simple.php HTTP/1.1" 404 341 "-" "-" Jun 1 19:43:55 hecnet-us-east-gw lighttpd[1017]: 20.220.194.176 hecnet-us-east-gw.duckdns.org - [01/Jun/2026:19:43:54 ... show less	Brute-Force
🇩🇪 HoneyPotFRI	2026-06-01 19:43:08 (2 days ago)	20.220.194.176 - - [01/Jun/2026:21:42:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.194.176 - - [01/Jun/2026:21:42:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.220.194.176 fri.dns.[redacted] (8075-MICROSOFT-CORP-MSN-AS-BLOCK Cana ... show less	Bad Web Bot Web App Attack
🇩🇪 KiekerJan	2026-06-01 19:38:26 (2 days ago)	20.220.194.176 - - [01/Jun/2026:21:38:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.194.176 - - [01/Jun/2026:21:38:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.220.194.176 - - [01/Jun/2026:21:38:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-06-01 19:35:24 (2 days ago)	[Mon Jun 01 20:35:22.773045 2026] [proxy_fcgi:error] [pid 305225:tid 139774023145024] [client 20.220 ... show more [Mon Jun 01 20:35:22.773045 2026] [proxy_fcgi:error] [pid 305225:tid 139774023145024] [client 20.220.194.176:30624] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:35:23.052508 2026] [proxy_fcgi:error] [pid 305225:tid 139774190933568] [client 20.220.194.176:30624] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:35:23.322572 2026] [proxy_fcgi:error] [pid 305225:tid 139774039930432] [client 20.220.194.176:30624] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:35:23.602487 2026] [proxy_fcgi:error] [pid 305225:tid 139774199326272] [client 20.220.194.176:30624] AH01071: Got error 'Primary script unknown' [Mon Jun 01 20:35:23.908885 2026] [proxy_fcgi:error] [pid 305225:tid 139774048323136] [client 20.220.194.176:30624] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-01 19:25:27 (2 days ago)	20.220.194.176 - - [01/Jun/2026:22:25:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.194.176 - - [01/Jun/2026:22:25:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 707 "-" "-" ... show less	Web App Attack
Anonymous	2026-06-01 19:22:05 (2 days ago)	(caddyscan) Scanner path probe from 20.220.194.176 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 20.220.194.176 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.220.194.176 - - [01/Jun/2026:19:19:28 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" [REDACTED] 200 2627 20.220.194.176 - - [01/Jun/2026:19:19:31 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" [REDACTED] 200 2627 20.220.194.176 - - [01/Jun/2026:19:21:59 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 20.220.194.176 - - [01/Jun/2026:19:22:02 +0000] "GET /wp-admin/css/ HTTP/1.1" [REDACTED] 200 2627 20.220.194.176 - - [01/Jun/2026:19:22:03 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" show less	Port Scan
🇫🇮 Some Body	2026-06-01 19:21:26 (2 days ago)	Aggressive web scan	Brute-Force Web App Attack
🇦🇺 CalmBrain	2026-06-01 19:09:26 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-06-01 19:09:13 (2 days ago)	Web App Attack	Brute-Force Web App Attack
Anonymous	2026-06-01 19:09:00 (2 days ago)	[Mon Jun 01 21:08:59.440220 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01 ... show more [Mon Jun 01 21:08:59.440220 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01630: client denied by server configuration: /var/www/html/default/vee.php [Mon Jun 01 21:08:59.622872 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01630: client denied by server configuration: /var/www/html/default/a2.php [Mon Jun 01 21:08:59.967496 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01630: client denied by server configuration: /var/www/html/default/xxa.php [Mon Jun 01 21:09:00.238337 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01630: client denied by server configuration: /var/www/html/default/mlex.php [Mon Jun 01 21:09:00.456457 2026] [authz_core:error] [pid 531385] [client 20.220.194.176:18074] AH01630: client denied by server configuration: /var/www/html/default/030.php ... show less	Web App Attack

Showing 31 to 45 of 238 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇩🇪 167.94.145.19

🇨🇳 42.180.132.32

🇸🇬 23.111.14.186

🇺🇸 18.220.16.149

🇭🇰 154.221.17.137

🇫🇮 147.185.133.114

🇻🇳 123.28.31.248

🇻🇳 113.182.32.199

🇳🇱 93.123.72.166

🇷🇺 91.149.69.6

🇧🇪 82.197.193.38

🇱🇹 81.30.98.62

🇺🇸 66.132.172.200

🇳🇱 64.89.162.55

🇹🇭 58.136.161.34

🇳🇱 45.87.249.200

🇬🇧 35.203.211.129

🇬🇧 5.181.124.131

🇪🇸 176.84.4.111