JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.227.7

20.220.227.7 was found in our database!

This IP was reported 868 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.227.7

Whois 20.220.227.7

IP Abuse Reports for 20.220.227.7:

This IP address has been reported a total of 868 times from 502 distinct sources. 20.220.227.7 was first reported on August 25th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2026-08-27 21:15:00 (7 minutes ago)	20.220.227.7 - - [26/Aug/2026:20:26:06 +0300] "GET /secure.php HTTP/1.1" 404 456 "-" "-" 20.220.227 ... show more 20.220.227.7 - - [26/Aug/2026:20:26:06 +0300] "GET /secure.php HTTP/1.1" 404 456 "-" "-" 20.220.227.7 - - [26/Aug/2026:20:26:06 +0300] "GET /mac.php HTTP/1.1" 404 456 "-" "-" ... show less	Web App Attack
🇺🇸 deskpass.com	2026-08-27 21:14:32 (7 minutes ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇫🇷 largo-it.net	2026-08-27 21:14:01 (8 minutes ago)	[27/Aug/2026:23:13:59.955] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [27/Aug/ ... show more [27/Aug/2026:23:13:59.955] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [27/Aug/2026:23:14:00.178] HTTP 404 - GET /this_is_a_new_hello_world.php [27/Aug/2026:23:14:00.381] HTTP 404 - GET /secure.php [27/Aug/2026:23:14:00.598] HTTP 404 - GET /mac.php [27/Aug/2026:23:14:00.800] HTTP 404 - GET /cache.php [27/Aug/2026:23:14:01.010] HTTP 404 - GET /filemanager.php [27/Aug/2026:23:14:01.223] HTTP 404 - GET /wp-content/admin.php [27/Aug/2026:23:14:01.424] HTTP 404 - GET /wp-mail.php show less	Hacking Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-08-27 21:00:53 (21 minutes ago)	Active Response: IP 20.220.227.7 Blocked via Firewall Drop. Threat Score: 3.7/10 (LOW). Confidence: ... show more Active Response: IP 20.220.227.7 Blocked via Firewall Drop. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 Nevermind	2026-08-27 20:52:41 (29 minutes ago)	20.220.227.7 - - [27/Aug/2026:22:52:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.227.7 - - [27/Aug/2026:22:52:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.220.227.7 - - [27/Aug/2026:22:52:40 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 20.220.227.7 - - [27/Aug/2026:22:52:40 +0200] "GET /secure.php HTTP/1.1" 404 146 "-" "-" 20.220.227.7 - - [27/Aug/2026:22:52:41 +0200] "GET /mac.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
Anonymous	2026-08-27 20:51:31 (30 minutes ago)	[Thu Aug 27 20:51:31.362079 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var ... show more [Thu Aug 27 20:51:31.362079 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var/www/vhosts/mcdermit.org/BOISD/this_is_a_new_hello_world.php' not found or unable to stat [Thu Aug 27 20:51:31.404495 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var/www/vhosts/mcdermit.org/BOISD/secure.php' not found or unable to stat [Thu Aug 27 20:51:31.439077 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var/www/vhosts/mcdermit.org/BOISD/mac.php' not found or unable to stat [Thu Aug 27 20:51:31.472520 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var/www/vhosts/mcdermit.org/BOISD/cache.php' not found or unable to stat [Thu Aug 27 20:51:31.503699 2026] [php:error] [pid 3163776] [client 20.220.227.7:65411] script '/var/www/vhosts/mcdermit.org/BOISD/filemanager.php' not found or unable to stat ... show less	Brute-Force
🇩🇪 ghostwarriors	2026-08-27 20:50:36 (31 minutes ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-27 20:50:08 (32 minutes ago)	Aggressive web scan	Bad Web Bot Web App Attack
Anonymous	2026-08-27 20:48:29 (33 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-08-27 20:46:58 (35 minutes ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇩🇪 hchristo	2026-08-27 20:36:32 (45 minutes ago)	[Thu Aug 27 22:36:31.251583 2026] [proxy_fcgi:error] [pid 21846:tid 21914] [client 20.220.227.7:3820 ... show more [Thu Aug 27 22:36:31.251583 2026] [proxy_fcgi:error] [pid 21846:tid 21914] [client 20.220.227.7:38206] AH01071: Got error 'Primary script unknown' [Thu Aug 27 22:36:31.472218 2026] [proxy_fcgi:error] [pid 21846:tid 21939] [client 20.220.227.7:38206] AH01071: Got error 'Primary script unknown' [Thu Aug 27 22:36:31.684797 2026] [proxy_fcgi:error] [pid 21846:tid 21925] [client 20.220.227.7:38206] AH01071: Got error 'Primary script unknown' [Thu Aug 27 22:36:31.902902 2026] [proxy_fcgi:error] [pid 21846:tid 21947] [client 20.220.227.7:38206] AH01071: Got error 'Primary script unknown' [Thu Aug 27 22:36:32.105739 2026] [proxy_fcgi:error] [pid 21846:tid 21903] [client 20.220.227.7:38206] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇸🇪 vaia.cloud	2026-08-27 20:25:03 (57 minutes ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇫🇷 zulzeen	2026-08-27 20:21:28 (1 hour ago)	[incypit-web] Banned by Fail2ban (Jail: nginx-scanner)	Hacking Web App Attack Bad Web Bot Port Scan
🇮🇪 AutosOnShow	2026-08-27 20:11:04 (1 hour ago)	blocked for webapp attack \| path requested: /002.php \| seen at 2026-08-27 20:10:46.067 \|	Web App Attack
Anonymous	2026-08-27 20:04:49 (1 hour ago)	20.220.227.7 detected and blocked by apache-noscript after 2 try	Brute-Force Bad Web Bot Hacking

Showing 1 to 15 of 868 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.77.208.12

🇵🇰 103.152.101.204

🇺🇸 136.107.92.85

🇻🇳 103.159.51.70

🇰🇷 43.108.39.62

🇱🇹 194.165.16.162

🇧🇷 189.90.33.195

🇳🇱 172.111.246.251

🇫🇷 169.58.161.169

🇺🇸 164.92.123.144

🇫🇮 150.241.71.157

🇺🇸 147.185.132.54

🇻🇳 116.96.61.141

🇷🇴 80.94.92.55

🇧🇷 205.210.31.236

🇬🇧 193.32.209.244

🇷🇴 193.32.162.84

🇫🇷 169.58.186.199

🇺🇸 148.153.188.246

🇺🇸 147.185.132.163