JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.62.152

20.220.62.152 was found in our database!

This IP was reported 222 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.62.152

Whois 20.220.62.152

IP Abuse Reports for 20.220.62.152:

This IP address has been reported a total of 222 times from 189 distinct sources. 20.220.62.152 was first reported on July 2nd 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 mgarofano80	2026-07-02 18:46:16 (4 minutes ago)		Brute-Force Web App Attack
🇺🇸 chronos	2026-07-02 14:31:48 (4 hours ago)	[AUTORAVALT][[02/07/2026 - 11:31:47 -03:00 UTC] Attack from [Microsoft Corporation] [20.220.62.152] ... show more [AUTORAVALT][[02/07/2026 - 11:31:47 -03:00 UTC] Attack from [Microsoft Corporation] [20.220.62.152] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software ] ... show less	Hacking Web App Attack
🇺🇸 almazick	2026-07-02 14:31:21 (4 hours ago)	Fail2Ban jail window on srv1.windowrepair.us banned 20.220.62.152 after 1 attempts	Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-07-02 14:30:42 (4 hours ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/p ... show more Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/plugins/hellopress/wp_filemanager.php. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-20-220-62-152 show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-02 14:19:51 (4 hours ago)	[Thu Jul 02 15:19:51.049299 2026] [proxy_fcgi:error] [pid 1406891:tid 139821670438464] [client 20.22 ... show more [Thu Jul 02 15:19:51.049299 2026] [proxy_fcgi:error] [pid 1406891:tid 139821670438464] [client 20.220.62.152:57816] AH01071: Got error 'Primary script unknown' [Thu Jul 02 15:19:51.162678 2026] [proxy_fcgi:error] [pid 1406891:tid 139821167138368] [client 20.220.62.152:57816] AH01071: Got error 'Primary script unknown' [Thu Jul 02 15:19:51.277208 2026] [proxy_fcgi:error] [pid 1406891:tid 139822784255552] [client 20.220.62.152:57816] AH01071: Got error 'Primary script unknown' [Thu Jul 02 15:19:51.392029 2026] [proxy_fcgi:error] [pid 1406891:tid 139822759077440] [client 20.220.62.152:57816] AH01071: Got error 'Primary script unknown' [Thu Jul 02 15:19:51.506724 2026] [proxy_fcgi:error] [pid 1406891:tid 139821158745664] [client 20.220.62.152:57816] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 markawes	2026-07-02 14:15:22 (4 hours ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 20.220.62.152 - - [02/Jul/2026:15:15:21 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 431 "-" "-" 20.220.62.152 - - [02/Jul/2026:15:15:21 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 404 431 "-" "-" 20.220.62.152 - - [02/Jul/2026:15:15:21 +0100] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 404 431 "-" "-" show less	Port Scan Hacking Web App Attack
🇬🇧 cybersteve99	2026-07-02 14:14:15 (4 hours ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇦🇺 Lazarus	2026-07-02 14:06:38 (4 hours ago)	HTTP probe.	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-02 14:06:06 (4 hours ago)	2026-07-02 @ 16:06:06 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-02 @ 16:06:06 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇺🇸 brantknudson.org	2026-07-02 14:02:25 (4 hours ago)	Request path 'GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1'	Web App Attack Hacking
🇩🇪 webko.si	2026-07-02 13:59:39 (4 hours ago)	DKK: Bruteforce web app access, URI detail: '/wp-content/plugins/hellopress/wp_filemanager.php'.	Web App Attack
Anonymous	2026-07-02 13:59:23 (4 hours ago)	20.220.62.152 - - [02/Jul/2026:13:59:23 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.62.152 - - [02/Jul/2026:13:59:23 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 381 "-" "-" ... show less	Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-07-02 13:57:13 (4 hours ago)	20.220.62.152 - - [02/Jul/2026:23:57:12 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.220.62.152 - - [02/Jul/2026:23:57:12 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 999 "-" "-" 20.220.62.152 - - [02/Jul/2026:23:57:12 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.220.62.152 - - [02/Jul/2026:23:57:12 +1000] "GET /x.php HTTP/1.1" 404 16 "-" "-" 20.220.62.152 - - [02/Jul/2026:23:57:12 +1000] "GET /nari.php HTTP/1.1" 404 16 "-" "-" 20.220.62.152 - - [02/Jul/2026:23:57:13 +1000] "GET /colay.php HTTP/1.1" 404 16 "-" "-" 20.220.62.152 - - [02/Jul/2026:23:57:13 +1000] "GET /u30.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇪🇸 Francisco Vallejo	2026-07-02 13:55:50 (4 hours ago)	[Thu Jul 02 15:55:48.907413 2026] [core:info] [pid 1080275:tid 127201345263296] [client 20.220.62.15 ... show more [Thu Jul 02 15:55:48.907413 2026] [core:info] [pid 1080275:tid 127201345263296] [client 20.220.62.152:24530] AH00128: File does not exist: /var/www/franvallejo/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 15:55:49.115168 2026] [core:info] [pid 1080275:tid 127201211045568] [client 20.220.62.152:24530] AH00128: File does not exist: /var/www/franvallejo/this_is_a_new_hello_world.php [Thu Jul 02 15:55:49.311913 2026] [core:info] [pid 1080275:tid 127201847346880] [client 20.220.62.152:24530] AH00128: File does not exist: /var/www/franvallejo/x.php [Thu Jul 02 15:55:49.518936 2026] [core:info] [pid 1080275:tid 127201328477888] [client 20.220.62.152:24530] AH00128: File does not exist: /var/www/franvallejo/nari.php [Thu Jul 02 15:55:49.750688 2026] [core:info] [pid 1080275:tid 127200414131904] [client 20.220.62.152:24530] AH00128: File does not exist: /var/www/franvallejo/colay.php ... show less	Brute-Force SSH
🇦🇹 René Hickersberger	2026-07-02 13:52:21 (4 hours ago)	malicious bot detected: violations="hit-honeypot"; user_agent=""	Web App Attack

Showing 1 to 15 of 222 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 146.88.241.60

🇰🇷 146.56.164.20

🇺🇸 104.207.32.3

🇳🇱 52.233.193.61

🇻🇳 42.96.19.37

🇲🇾 203.121.40.210

🇹🇼 198.235.24.74

🇧🇴 181.115.172.115

🇨🇦 167.114.139.67

🇬🇧 134.209.186.182

🇻🇳 103.176.20.115

🇺🇸 52.159.243.17

🇳🇱 45.156.87.50

🇺🇸 34.187.185.208

🇷🇴 2.57.121.112

🇪🇹 196.188.37.175

🇳🇱 193.176.31.207

🇸🇬 165.154.236.104

🇺🇸 146.88.241.162

🇺🇸 91.230.168.202