JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.62.78

20.220.62.78 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.62.78

Whois 20.220.62.78

IP Abuse Reports for 20.220.62.78:

This IP address has been reported a total of 159 times from 143 distinct sources. 20.220.62.78 was first reported on July 16th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Gabriel Camargo	2026-07-16 22:39:21 (2 minutes ago)	20.220.62.78 - - [16/Jul/2026:17:39:15 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.62.78 - - [16/Jul/2026:17:39:15 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.220.62.78 - - [16/Jul/2026:17:39:18 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.220.62.78 - - [16/Jul/2026:17:39:20 -0500] "GET //ip.php HTTP/1.1" 301 178 "-" "-" ... show less	Brute-Force SSH
🇨🇭 beatsnet.com	2026-07-16 22:33:32 (8 minutes ago)	[Fri Jul 17 00:33:30.816655 2026] [proxy_fcgi:error] [pid 14306:tid 2490613985296] [client 20.220.62 ... show more [Fri Jul 17 00:33:30.816655 2026] [proxy_fcgi:error] [pid 14306:tid 2490613985296] [client 20.220.62.78:40217] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:33:30.918444 2026] [proxy_fcgi:error] [pid 14306:tid 2490613985296] [client 20.220.62.78:40217] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:33:31.020178 2026] [proxy_fcgi:error] [pid 14306:tid 2490613985296] [client 20.220.62.78:40217] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:33:31.123213 2026] [proxy_fcgi:error] [pid 14306:tid 2490613985296] [client 20.220.62.78:40217] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 Viveronese	2026-07-16 22:33:14 (8 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇪🇸 yvoictra	2026-07-16 22:33:02 (8 minutes ago)	20.220.62.78 - - [17/Jul/2026:00:33:01 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.62.78 - - [17/Jul/2026:00:33:01 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 19 "-" "-" 20.220.62.78 - - [17/Jul/2026:00:33:01 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 19 "-" "-" 20.220.62.78 - - [17/Jul/2026:00:33:01 +0200] "GET /bpsoe.php HTTP/1.1" 404 19 "-" "-" 20.220.62.78 - - [17/Jul/2026:00:33:02 +0200] "GET /bxodh.php HTTP/1.1" 404 19 "-" "-" 20.220.62.78 - - [17/Jul/2026:00:33:02 +0200] "GET /ojgup.php HTTP/1.1" 404 19 "-" "-" ... show less	Brute-Force Web App Attack
🇩🇰 RhQM	2026-07-16 22:31:48 (9 minutes ago)		Bad Web Bot Exploited Host Web App Attack
🇩🇪 Holger	2026-07-16 22:30:08 (11 minutes ago)	WordPress WebAttack	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-07-16 22:29:44 (11 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇺🇸 lavnet.net	2026-07-16 22:29:37 (12 minutes ago)	20.220.62.78 - - [16/Jul/2026:22:29:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.62.78 - - [16/Jul/2026:22:29:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6074 "-" "-" 20.220.62.78 - - [16/Jul/2026:22:29:36 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2050 "-" "-" 20.220.62.78 - - [16/Jul/2026:22:29:37 +0000] "GET /bpsoe.php HTTP/1.1" 404 2050 "-" "-" 20.220.62.78 - - [16/Jul/2026:22:29:37 +0000] "GET /bxodh.php HTTP/1.1" 404 2050 "-" "-" 20.220.62.78 - - [16/Jul/2026:22:29:37 +0000] "GET /ojgup.php HTTP/1.1" 404 2050 "-" "-" 20.220.62.78 - - [16/Jul/2026:22:29:37 +0000] "GET /oocnp.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
🇦🇹 penguin-solutions.at	2026-07-16 22:29:21 (12 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇦 RatCommander	2026-07-16 22:26:45 (14 minutes ago)	CrowdSec: crowdsecurity/http-probing	Port Scan Web App Attack
🇵🇹 rncbc	2026-07-16 22:26:06 (15 minutes ago)	[Thu Jul 16 23:26:05.955271 2026] [authz_core:error] [pid 1309488:tid 1309488] [client 20.220.62.78: ... show more [Thu Jul 16 23:26:05.955271 2026] [authz_core:error] [pid 1309488:tid 1309488] [client 20.220.62.78:16381] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/wp-content [Thu Jul 16 23:26:06.070842 2026] [authz_core:error] [pid 1309488:tid 1309488] [client 20.220.62.78:16381] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/this_is_a_new_hello_world.php [Thu Jul 16 23:26:06.199499 2026] [authz_core:error] [pid 1309488:tid 1309488] [client 20.220.62.78:16381] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/bpsoe.php ... show less	Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 WellSpring	2026-07-16 22:24:35 (17 minutes ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/p ... show more Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/plugins/hellopress/wp_filemanager.php. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-20-220-62-78 show less	Web App Attack
🇸🇪 nekopavel	2026-07-16 22:23:23 (18 minutes ago)	20.220.62.78 - - [17/Jul/2026:00:23:14 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.62.78 - - [17/Jul/2026:00:23:14 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" visualization.neko.chat "-""0.000" "-""Toronto" "CA" 20.220.62.78 - - [17/Jul/2026:00:23:19 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 19"-" visualization.neko.chat "-""0.004" "0.003""Toronto" "CA" 20.220.62.78 - - [17/Jul/2026:00:23:22 +0200]"GET /wp-temp.php HTTP/1.1" 301 162"-" visualization.neko.chat "-""0.000" "-""Toronto" "CA" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 VanKoh	2026-07-16 22:21:42 (19 minutes ago)	20.220.62.78 (CA/Canada/Ontario/Toronto/-), more than 150 Apache 404 hits in the last 3600 secs; IP: ... show more 20.220.62.78 (CA/Canada/Ontario/Toronto/-), more than 150 Apache 404 hits in the last 3600 secs; IP: 20.220.62.78; Ports: 80,443; Direction: 1; Trigger: LF_APACHE_404; Logs: show less	Brute-Force
🇩🇪 ghostwarriors	2026-07-16 22:20:07 (21 minutes ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇮🇳 122.168.197.245

🇨🇳 114.219.157.97

🇭🇰 223.197.186.7

🇨🇳 222.176.201.172

🇧🇷 136.248.121.226

🇨🇳 120.39.36.234

🇨🇳 61.147.209.31

🇺🇸 45.194.67.28

🇳🇱 45.156.87.93

🇵🇰 39.35.197.193

🇳🇱 2.59.20.39

🇨🇭 2605:6400:30:f858:2704:73e1:7085:12ef

🇧🇷 187.16.96.250

🇲🇾 183.171.49.161

🇺🇸 147.185.132.76

🇨🇳 106.75.175.50

🇺🇸 20.169.104.239

🇺🇸 172.172.180.124

🇺🇸 162.217.103.68