JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.211.172

20.220.211.172 was found in our database!

This IP was reported 662 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.211.172

Whois 20.220.211.172

IP Abuse Reports for 20.220.211.172:

This IP address has been reported a total of 662 times from 504 distinct sources. 20.220.211.172 was first reported on August 30th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dominioz	2026-08-31 22:58:37 (2 minutes ago)	2026-08-31 22:58:22 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.220.211.172 HTTP/1. ... show more 2026-08-31 22:58:22 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.220.211.172 HTTP/1.1 - - 404 5376 2026-08-31 22:58:22 GET /this_is_a_new_hello_world.php - - 20.220.211.172 HTTP/1.1 - - 404 5338 2026-08-31 22:58:23 GET /verox.php - - 20.220.211.172 HTTP/1.1 - - 404 5298 2026-08-31 22:58:23 GET /fling.php p=&p= - 20.220.211.172 HTTP/1.1 - - 404 5308 ... show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-08-31 22:57:57 (3 minutes ago)	2026-09-01 @ 00:57:56 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-09-01 @ 00:57:56 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 itsolon	2026-08-31 22:57:29 (3 minutes ago)	[01/Sep/2026:00:57:28 +0200] 178821704822.828819 20.220.211.172 18080 217.154.7.177 80 [01/Sep/2026: ... show more [01/Sep/2026:00:57:28 +0200] 178821704822.828819 20.220.211.172 18080 217.154.7.177 80 [01/Sep/2026:00:57:28 +0200] 178821704823.172541 20.220.211.172 18080 217.154.7.177 80 [01/Sep/2026:00:57:28 +0200] 17882170482.509727 20.220.211.172 18080 217.154.7.177 80 [01/Sep/2026:00:57:28 +0200] 17882170485.409740 20.220.211.172 18080 217.154.7.177 80 [01/Sep/2026:00:57:28 +0200] 178821704826.186384 20.220.211.172 18080 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇵🇱 mscode.pl	2026-08-31 22:56:18 (5 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE ASN: 8075 (Microsoft Corp ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Zone: www.mscode.pl Endpoint: /wp-admin/maint/index.php UA: Empty string show less	Bad Web Bot
🇨🇦 Blinker73	2026-08-31 22:50:50 (10 minutes ago)	20.220.211.172 - - [31/Aug/2026:18:50:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.211.172 - - [31/Aug/2026:18:50:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" show less	Bad Web Bot Web App Attack
🇬🇧 AvonleaConsulting	2026-08-31 22:50:03 (11 minutes ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
Anonymous	2026-08-31 22:41:27 (19 minutes ago)	[Mon Aug 31 22:41:27.096429 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/v ... show more [Mon Aug 31 22:41:27.096429 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/var/www/vhosts/mcdermit.org/BOISD/this_is_a_new_hello_world.php' not found or unable to stat [Mon Aug 31 22:41:27.122668 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/var/www/vhosts/mcdermit.org/BOISD/verox.php' not found or unable to stat [Mon Aug 31 22:41:27.148977 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/var/www/vhosts/mcdermit.org/BOISD/fling.php' not found or unable to stat [Mon Aug 31 22:41:27.175248 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/var/www/vhosts/mcdermit.org/BOISD/ba.php' not found or unable to stat [Mon Aug 31 22:41:27.201512 2026] [php:error] [pid 4033617] [client 20.220.211.172:19650] script '/var/www/vhosts/mcdermit.org/BOISD/site.php' not found or unable to stat ... show less	Brute-Force
🇨🇦 Not Fake	2026-08-31 22:38:41 (22 minutes ago)	$f2bV_matches	Web App Attack
🇳🇱 i-turnradio.nl	2026-08-31 22:33:53 (27 minutes ago)	2026-09-01 @ 00:33:53 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-09-01 @ 00:33:53 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 mravb	2026-08-31 22:30:47 (30 minutes ago)	20.220.211.172 - - [01/Sep/2026:01:30:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.211.172 - - [01/Sep/2026:01:30:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 172 "-" "-" ... show less	Web App Attack Hacking
🇳🇱 prinsbert	2026-08-31 22:22:03 (39 minutes ago)	Hit honeypot route /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇺🇸 peaceharbor	2026-08-31 22:20:13 (41 minutes ago)	Swatter: score=81 intel=abuseipdb:confidence100(100) rule=scanner_profile recidivism=3/30d	Web App Attack Port Scan
🇫🇷 SpaceHost-Server	2026-08-31 22:18:42 (42 minutes ago)		Brute-Force Web App Attack
🇷🇺 Mga Admin	2026-08-31 22:17:28 (43 minutes ago)	20.220.211.172 - - [01/Sep/2026:05:17:27 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.211.172 - - [01/Sep/2026:05:17:27 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" ... show less	Web App Attack
🇸🇪 sweplox.se	2026-08-31 22:07:12 (54 minutes ago)	Ip 20.220.211.172 performed 'crowdsecurity/http-probing' (11 events over 1.626869003s) at 2026-08-31 ... show more Ip 20.220.211.172 performed 'crowdsecurity/http-probing' (11 events over 1.626869003s) at 2026-08-31 22:07:11.642098722 +0000 UTC show less	Web App Attack

Showing 1 to 15 of 662 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.245.252.130

🇺🇸 148.153.56.174

🇲🇾 49.124.152.227

🇲🇦 45.219.3.122

🇨🇴 181.79.81.79

🇸🇬 165.154.200.214

🇻🇳 118.69.186.1

🇨🇳 110.42.211.235

🇫🇷 85.217.140.41

🇦🇺 14.201.151.159

🇫🇷 2400:cb00:538:1000:2015:fd7f:e962:c54d

🇲🇽 187.246.103.157

🇯🇵 139.162.70.53

🇨🇳 124.222.61.85

🇺🇸 92.204.138.51

🇱🇻 62.60.130.242

🇹🇼 35.221.166.86

🇷🇼 197.243.14.52

🇳🇱 176.65.148.84

🇺🇸 144.172.103.248