JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.233.65

20.220.233.65 was found in our database!

This IP was reported 3,393 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.233.65

Whois 20.220.233.65

IP Abuse Reports for 20.220.233.65:

This IP address has been reported a total of 3,393 times from 650 distinct sources. 20.220.233.65 was first reported on April 26th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-04-26 21:09:23 (1 month ago)	20.220.233.65 - - [27/Apr/2026:00:09:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.233.65 - - [27/Apr/2026:00:09:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3294 "-" "-" ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-04-26 21:08:01 (1 month ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]	Hacking Bad Web Bot
🇬🇧 Oakley	2026-04-26 21:04:12 (1 month ago)	(antiscrape_rule) Web application abuse detected 20.220.233.65 (CA/Canada/-): 5 in the last 900 secs	Hacking
🇫🇷 Campus France	2026-04-26 21:01:04 (1 month ago)	[Sun Apr 26 21:52:25.013744 2026] [php:error] [pid 776913] [client 20.220.233.65:27601] script '/var ... show more [Sun Apr 26 21:52:25.013744 2026] [php:error] [pid 776913] [client 20.220.233.65:27601] script '/var/www/html/ayk.php' not found or unable to stat [Sun Apr 26 21:52:25.106132 2026] [php:error] [pid 776913] [client 20.220.233.65:27601] script '/var/www/html/kcs.php' not found or unable to stat [Sun Apr 26 21:52:25.196236 2026] [php:error] [pid 776913] [client 20.220.233.65:27601] script '/var/www/html/setup.php' not found or unable to stat [Sun Apr 26 23:01:04.154949 2026] [php:error] [pid 808543] [client 20.220.233.65:53392] script '/var/www/html/desk.radio-campus.org/desk/www/file2.php' not found or unable to stat [Sun Apr 26 23:01:04.154949 2026] [php:error] [pid 808543] [client 20.220.233.65:53392] script '/var/www/html/desk.radio-campus.org/desk/www/file2.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 betternews.app	2026-04-26 21:00:37 (1 month ago)	"a web request contained keyword "wp-content"; Suspicious URL: /wp-content/plugins/hellopress/wp_fil ... show more "a web request contained keyword "wp-content"; Suspicious URL: /wp-content/plugins/hellopress/wp_filemanager.php" show less	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2026-04-26 20:58:35 (1 month ago)	20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4699 "-" "-" 20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /file2.php HTTP/1.1" 404 2050 "-" "-" 20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /file2.php HTTP/1.1" 404 2050 "-" "-" 20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /asus.php HTTP/1.1" 404 2050 "-" "-" 20.220.233.65 - - [26/Apr/2026:20:58:34 +0000] "GET /asus.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
🇺🇸 ph	2026-04-26 20:57:08 (1 month ago)	Bad web bot attempting to run wp-content on non-WP site	Hacking Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-04-26 20:55:18 (1 month ago)	20.220.233.65 - - [26/Apr/2026:20:55:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.233.65 - - [26/Apr/2026:20:55:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 579 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Guardian	2026-04-26 20:54:21 (1 month ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 20.220.233.65 [26/Apr/2026:20:54:21] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.220.233.65 [26/Apr/2026:20:54:21] "GET /file2.php HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 on-com	2026-04-26 20:53:13 (1 month ago)	URL scan	Brute-Force Web App Attack
🇹🇼 ip4.tw	2026-04-26 20:50:45 (1 month ago)	Malicious web scan	Hacking Web App Attack
Anonymous	2026-04-26 20:49:55 (1 month ago)	[Sun Apr 26 20:49:54.942877 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/va ... show more [Sun Apr 26 20:49:54.942877 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/var/www/vhosts/mcdermit.org/BOISD/file2.php' not found or unable to stat [Sun Apr 26 20:49:54.970603 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/var/www/vhosts/mcdermit.org/BOISD/asus.php' not found or unable to stat [Sun Apr 26 20:49:54.996956 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/var/www/vhosts/mcdermit.org/BOISD/environment.php' not found or unable to stat [Sun Apr 26 20:49:55.023313 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/var/www/vhosts/mcdermit.org/BOISD/pinfo.php' not found or unable to stat [Sun Apr 26 20:49:55.049617 2026] [php:error] [pid 1365750] [client 20.220.233.65:61064] script '/var/www/vhosts/mcdermit.org/BOISD/aws.php' not found or unable to stat ... show less	Brute-Force
🇩🇪 Hazzard	2026-04-26 20:48:46 (1 month ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking
🇩🇪 SCHAPPY	2026-04-26 20:47:03 (1 month ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇩🇪 Holger	2026-04-26 20:40:28 (1 month ago)	WordPress WebAttack	Brute-Force Web App Attack

Showing 3286 to 3300 of 3393 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.109

🇦🇲 195.250.79.2

🇬🇧 195.206.182.213

🇺🇸 195.184.76.117

🇺🇸 191.101.33.115

🇫🇷 163.5.241.42

🇨🇮 160.154.84.190

🇭🇰 118.26.36.18

🇩🇪 46.101.170.228

🇳🇱 185.223.235.44

🇰🇷 101.36.114.198

🇳🇱 81.19.216.100

🇧🇬 79.124.62.230

🇺🇸 66.132.195.101

🇹🇿 41.59.200.166

🇩🇪 213.209.159.56

🇳🇱 185.223.235.27

🇧🇪 185.132.187.116

🇺🇸 142.93.59.58

🇮🇩 125.163.59.109