JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.196.130

20.220.196.130 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.196.130

Whois 20.220.196.130

IP Abuse Reports for 20.220.196.130:

This IP address has been reported a total of 169 times from 150 distinct sources. 20.220.196.130 was first reported on July 16th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-18 04:26:01 (2 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-17 23:05:40 (7 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇪🇸 Gem	2026-07-17 22:17:42 (8 hours ago)	Unauthorized web scan.	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-17 22:05:54 (8 hours ago)	Auto-ban: 262 malicious requests on 2026-07-16 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 262 malicious requests on 2026-07-16 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇳🇱 oisecnet	2026-07-17 21:02:39 (9 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-17. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-17. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
🇳🇱 JCB	2026-07-17 20:47:00 (9 hours ago)	20.220.196.130 - - [17/Jul/2026:08:51:55 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 45 ... show more 20.220.196.130 - - [17/Jul/2026:08:51:55 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 456 "-" "-" 20.220.196.130 - - [17/Jul/2026:08:51:55 +0300] "GET /ip.php HTTP/1.1" 404 456 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-17 20:08:05 (10 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇫🇷 mail.avx.gr	2026-07-17 13:19:53 (17 hours ago)	Plesk Fail2Ban jail: recidive-abuseipdb. Evidence: 2026-07-17 02:08:09,975 fail2ban.actions [662955] ... show more Plesk Fail2Ban jail: recidive-abuseipdb. Evidence: 2026-07-17 02:08:09,975 fail2ban.actions [662955]: NOTICE [Plesk-Web404] Ban 20.220.196.130 2026-07-17 05:01:24,452 fail2ban.actions [662955]: NOTICE [Plesk-Web404] Ban 20.220.196.130 2026-07-17 06:57:36,339 fail2ban.actions [662955]: NOTICE [Plesk-Web-Exploits] Ban 20.220.196.130 2026-07-17 06:57:36,724 fail2ban.actions [662955]: NOTICE [recidive-unknown] Ban 20.220.196.130 show less	Hacking
🇳🇱 thedreamer.nl	2026-07-17 06:18:06 (1 day ago)	20.220.196.130 - - [17/Jul/2026:08:17:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.196.130 - - [17/Jul/2026:08:17:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.220.196.130 - - [17/Jul/2026:08:17:37 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.220.196.130 - - [17/Jul/2026:08:17:37 +0200] "GET //ip.php HTTP/1.1" 404 27 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" 20.220.196.130 - - [17/Jul/2026:08:17:38 +0200] "GET /fw/faiyy.php HTTP/1.1" 404 27 "-" "-" "CA" "Toronto" "43.70900" "-79.40570" ... show less	Brute-Force Bad Web Bot
🇧🇷 vfAcceloReporter	2026-07-17 06:10:07 (1 day ago)	20.220.196.130 - - [17/Jul/2026:03:10:00 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 500 17 ... show more 20.220.196.130 - - [17/Jul/2026:03:10:00 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 500 177 "-" "-" 20.220.196.130 - - [17/Jul/2026:03:10:03 -0300] "GET //ip.php HTTP/1.1" 500 177 "-" "-" 20.220.196.130 - - [17/Jul/2026:03:10:04 -0300] "GET /fw/faiyy.php HTTP/1.1" 500 177 "-" "-" 20.220.196.130 - - [17/Jul/2026:03:10:05 -0300] "GET /wp-temp.php HTTP/1.1" 500 177 "-" "-" 20.220.196.130 - - [17/Jul/2026:03:10:06 -0300] "GET //wp-content/cong.php HTTP/1.1" 500 177 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇺🇸 masterguru	2026-07-17 06:03:37 (1 day ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-128)	Hacking
🇳🇨 ACE-INFORMATIQUE.NC	2026-07-17 06:00:07 (1 day ago)	Malicious CGI/web attack blocked by Fail2ban	Web App Attack
🇮🇳 evicky2002	2026-07-17 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇺 aranguren.org	2026-07-17 05:31:55 (1 day ago)	20.220.196.130 - - [17/Jul/2026:15:31:53 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.196.130 - - [17/Jul/2026:15:31:53 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 999 "-" "-" 20.220.196.130 - - [17/Jul/2026:15:31:53 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.220.196.130 - - [17/Jul/2026:15:31:54 +1000] "GET /bpsoe.php HTTP/1.1" 404 16 "-" "-" 20.220.196.130 - - [17/Jul/2026:15:31:54 +1000] "GET /bxodh.php HTTP/1.1" 404 16 "-" "-" 20.220.196.130 - - [17/Jul/2026:15:31:54 +1000] "GET /ojgup.php HTTP/1.1" 404 16 "-" "-" 20.220.196.130 - - [17/Jul/2026:15:31:54 +1000] "GET /oocnp.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-07-17 05:25:25 (1 day ago)	2026-07-17T05:25:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-17T05:25:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=20.220.196.130 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=102 ID=24970 DF PROTO=TCP SPT=57270 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-17T05:25:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=20.220.196.130 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=102 ID=24971 DF PROTO=TCP SPT=57270 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-17T05:25:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=20.220.196.130 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=102 ID=24972 DF PROTO=TCP SPT=57270 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.81.251

🇬🇧 213.166.84.41

🇧🇷 205.210.31.151

🇷🇺 178.176.87.193

🇵🇱 104.164.171.230

🇧🇬 91.92.47.90

🇰🇿 46.255.234.75

🇳🇱 45.156.87.253

🇺🇸 216.244.66.232

🇹🇼 211.22.131.70

🇦🇴 193.163.125.101

🇷🇺 188.242.3.190

🇩🇪 130.12.180.134

🇨🇳 117.50.130.195

🇫🇷 85.217.140.51

🇨🇳 59.174.248.10

🇻🇳 58.186.8.60

🇺🇸 45.194.67.27

🇲🇩 45.15.226.187

🇧🇪 34.14.86.81