JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.225.223

20.220.225.223 was found in our database!

This IP was reported 556 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.225.223

Whois 20.220.225.223

IP Abuse Reports for 20.220.225.223:

This IP address has been reported a total of 556 times from 364 distinct sources. 20.220.225.223 was first reported on July 15th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 RhQM	2026-07-17 17:50:23 (4 minutes ago)		Bad Web Bot Exploited Host Web App Attack
🇬🇧 Artelis	2026-07-17 17:47:07 (8 minutes ago)	20.220.225.223 - - [17/Jul/2026:17:47:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.225.223 - - [17/Jul/2026:17:47:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇧🇷 chronos	2026-07-17 17:46:03 (9 minutes ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: Canada, ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: Canada, Toronto show less	Exploited Host Web App Attack Hacking
🇵🇱 dzpk	2026-07-17 17:45:15 (10 minutes ago)	[17/Jul/2026:19:45:14 +0200] 178431031464.951609 20.220.225.223 65209 HOST 80 [17/Jul/2026:19:45:14 ... show more [17/Jul/2026:19:45:14 +0200] 178431031464.951609 20.220.225.223 65209 HOST 80 [17/Jul/2026:19:45:14 +0200] 178431031499.348178 20.220.225.223 65209 HOST 80 [17/Jul/2026:19:45:15 +0200] 178431031545.440153 20.220.225.223 65209 HOST 80 show less	Web App Attack
🇮🇹 eliosbrocchi	2026-07-17 17:44:23 (10 minutes ago)	[Fri Jul 17 19:44:20.583225 2026] [proxy_fcgi:error] [pid 2279492:tid 2279532] [client 20.220.225.22 ... show more [Fri Jul 17 19:44:20.583225 2026] [proxy_fcgi:error] [pid 2279492:tid 2279532] [client 20.220.225.223:4013] AH01071: Got error 'Primary script unknown' [Fri Jul 17 19:44:21.054227 2026] [proxy_fcgi:error] [pid 2279492:tid 2279539] [client 20.220.225.223:4013] AH01071: Got error 'Primary script unknown' [Fri Jul 17 19:44:21.322435 2026] [proxy_fcgi:error] [pid 2279492:tid 2279536] [client 20.220.225.223:4013] AH01071: Got error 'Primary script unknown' [Fri Jul 17 19:44:21.573821 2026] [proxy_fcgi:error] [pid 2279492:tid 2279522] [client 20.220.225.223:4013] AH01071: Got error 'Primary script unknown' [Fri Jul 17 19:44:22.340330 2026] [proxy_fcgi:error] [pid 2279492:tid 2279542] [client 20.220.225.223:4013] AH01071: Got error 'Primary script unknown' ... show less	VPN IP
Anonymous	2026-07-17 17:40:36 (14 minutes ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇵🇱 miriks	2026-07-17 17:40:23 (14 minutes ago)	Automated scan detected: GET /baxa1.phP8	Port Scan Web App Attack
🇬🇧 djboddington	2026-07-17 17:37:29 (17 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇹🇼 tye	2026-07-17 17:36:43 (18 minutes ago)	Wazuh Alert Evidence: 20.220.225.223 (20.220.225.223) - - [18/Jul/2026:01:36:40 +0800] "GET /wp-cont ... show more Wazuh Alert Evidence: 20.220.225.223 (20.220.225.223) - - [18/Jul/2026:01:36:40 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 455 "-" "-" show less	Web App Attack
🇩🇪 Trueforce Threat Report	2026-07-17 17:36:36 (18 minutes ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇫🇷 Entalpi.net	2026-07-17 17:35:26 (19 minutes ago)	Repeated requests against sensitive web endpoints	Web App Attack
Anonymous	2026-07-17 17:29:10 (26 minutes ago)	Banned by Fail2Ban on server	Web App Attack
Anonymous	2026-07-17 17:28:58 (26 minutes ago)	20.220.225.223 - - [17/Jul/2026:19:28:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.220.225.223 - - [17/Jul/2026:19:28:54 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5615 20.220.225.223 - - [17/Jul/2026:19:28:54 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5615 20.220.225.223 - - [17/Jul/2026:19:28:54 +0200] "GET /wp-file.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /karma_d2a8.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /karma_fb76.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /k.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /2ops.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /adobe.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /mac.php HTTP/1.1" 404 578 20.220.225.223 - - [17/Jul/2026:19:28:55 +0200] "GET /HLA-dd.php HTTP/1.1" 404 578 ... show less	Web Spam Web App Attack
🇩🇪 lightaffaire	2026-07-17 17:17:35 (37 minutes ago)	Jul 17 19:17:34 www-dev.lightaffaire.com 20.220.225.223 - - [17/Jul/2026:19:17:34 +0200] "GET /wp-co ... show more Jul 17 19:17:34 www-dev.lightaffaire.com 20.220.225.223 - - [17/Jul/2026:19:17:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 0 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇰 SaltySoftworks	2026-07-17 17:11:15 (44 minutes ago)	User agent spoofing Excessive requests	Spoofing Bad Web Bot

Showing 1 to 15 of 556 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 45.135.141.17

🇯🇵 8.211.168.73

🇩🇪 2a09:bac1:1e00:60::3a0:75

🇯🇵 2406:da14:1e89:b700:a13b:749c:d82e:606b

🇦🇷 186.122.177.140

🇺🇸 66.132.172.112

🇺🇸 20.106.49.209

🇦🇷 190.184.229.61

🇧🇷 177.75.145.18

🇺🇸 162.216.149.231

🇨🇳 140.143.235.234

🇫🇮 65.108.103.105

🇵🇰 192.140.151.185

🇬🇧 35.203.210.165

🇺🇸 34.204.47.168

🇬🇧 185.247.137.187

🇧🇷 179.191.34.137

🇺🇸 154.92.23.249

🇨🇳 123.191.134.152

🇻🇳 112.137.143.2