JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.9.199

20.220.9.199 was found in our database!

This IP was reported 863 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.9.199

Whois 20.220.9.199

IP Abuse Reports for 20.220.9.199:

This IP address has been reported a total of 863 times from 544 distinct sources. 20.220.9.199 was first reported on July 12th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-07-14 20:36:18 (4 minutes ago)	[Tue Jul 14 21:36:17.126559 2026] [proxy_fcgi:error] [pid 1797457:tid 139826535847488] [client 20.22 ... show more [Tue Jul 14 21:36:17.126559 2026] [proxy_fcgi:error] [pid 1797457:tid 139826535847488] [client 20.220.9.199:32854] AH01071: Got error 'Primary script unknown' [Tue Jul 14 21:36:17.353446 2026] [proxy_fcgi:error] [pid 1797457:tid 139825445320256] [client 20.220.9.199:32854] AH01071: Got error 'Primary script unknown' [Tue Jul 14 21:36:17.581499 2026] [proxy_fcgi:error] [pid 1797457:tid 139826544240192] [client 20.220.9.199:32854] AH01071: Got error 'Primary script unknown' [Tue Jul 14 21:36:17.826696 2026] [proxy_fcgi:error] [pid 1797457:tid 139825478891072] [client 20.220.9.199:32854] AH01071: Got error 'Primary script unknown' [Tue Jul 14 21:36:18.142918 2026] [proxy_fcgi:error] [pid 1797457:tid 139826510669376] [client 20.220.9.199:32854] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇲🇾 Rizzy	2026-07-14 20:29:02 (11 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇦 ISPLtd	2026-07-14 20:04:02 (36 minutes ago)	20.220.9.199 - - [14/Jul/2026:17:03:59 -0300] "GET /error_log.php 20.220.9.199 - - [14/Jul/2026:17:0 ... show more 20.220.9.199 - - [14/Jul/2026:17:03:59 -0300] "GET /error_log.php 20.220.9.199 - - [14/Jul/2026:17:04:02 -0300] "GET /adminer.php ... show less	Hacking Web App Attack
🇩🇪 AetherFox	2026-07-14 19:33:37 (1 hour ago)	AetherFox VoidGuard detected: [Tue Jul 14 19:33:37.258485 2026] [authz_core:error] [pid 903351:tid 9 ... show more AetherFox VoidGuard detected: [Tue Jul 14 19:33:37.258485 2026] [authz_core:error] [pid 903351:tid 903387] [client 20.220.9.199:34503] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-content/plugins/hellopress/wp_filemanager.php [Tue Jul 14 19:33:37.258547 2026] [authz_core:error] [pid 903351:tid 903387] [client 20.220.9.199:34503] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Tue Jul 14 19:33:37.359539 2026] [authz_core:error] [pid 903351:tid 903381] [client 20.220.9.199:34503] AH01630: client denied by server configuration: proxy:http://[MASKED]/this_is_a_new_hello_world.php [Tue Jul 14 19:33:37.359623 2026] [authz_core:error] [pid 903351:tid 903381] [client 20.220.9.199:34503] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Tue Jul 14 19:33:37.460998 2026] [authz_core:error] [pid 903351:tid 903397] [client 20.220.9.199:34503] AH01630: client denied by server con ... show less	Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-14 19:16:39 (1 hour ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇺🇸 brightenfield	2026-07-14 18:58:27 (1 hour ago)	Web App Attack	Web App Attack
🇩🇪 Viveronese	2026-07-14 17:17:32 (3 hours ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-14 15:48:28 (4 hours ago)	Blocked by YFC Security on https://1904.brixzly.com — type: rapid_scan_attempts	Web App Attack
Anonymous	2026-07-14 15:30:00 (5 hours ago)	Web App Attack	Brute-Force Web App Attack
🇺🇸 mc4bbs	2026-07-14 15:10:44 (5 hours ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404 UA=""; GET /wp-si.php -> 404 UA=""; GET /wp-ws68.php?p= -> 404 UA=""; GET /wp-includes/sodium_compat/ -> 404 UA=""; GET /wp-admin/css/colors/coffee/wp-adochan.php -> 404 UA="" show less	Web App Attack Hacking
Anonymous	2026-07-14 15:10:06 (5 hours ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80	Port Scan Hacking
Anonymous	2026-07-14 15:01:10 (5 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 20.220.9.199 (CA/Canada/-)	SQL Injection
🇫🇷 Catalin Negru	2026-07-14 14:59:23 (5 hours ago)	2026-07-14 17:09:22,561 fail2ban.actions [722]: NOTICE [apache-404] Ban 20.220.9.199 2026-07 ... show more 2026-07-14 17:09:22,561 fail2ban.actions [722]: NOTICE [apache-404] Ban 20.220.9.199 2026-07-14 17:09:22,644 fail2ban.actions [722]: NOTICE [web-scanner] Ban 20.220.9.199 2026-07-14 17:09:22,705 fail2ban.actions [722]: NOTICE [apache-security] Ban 20.220.9.199 2026-07-14 17:09:22,848 fail2ban.actions [722]: NOTICE [apache-scan] Ban 20.220.9.199 2026-07-14 17:59:23,021 fail2ban.actions [722]: NOTICE [wordpress] Ban 20.220.9.199 ... show less	Brute-Force Web App Attack
🇪🇸 netfactotum	2026-07-14 14:58:59 (5 hours ago)		Hacking Web App Attack
🇮🇹 mgarofano80	2026-07-14 14:56:39 (5 hours ago)		Brute-Force Web App Attack

Showing 1 to 15 of 863 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.176.200.170

🇳🇱 213.21.248.43

🇲🇽 189.190.244.176

🇨🇴 181.59.2.53

🇩🇪 172.238.119.169

🇨🇳 116.179.37.153

🇲🇲 103.59.163.135

🇺🇸 71.6.199.87

🇻🇳 58.186.22.1

🇪🇪 196.196.253.20

🇨🇦 138.197.164.175

🇮🇩 103.189.119.87

🇺🇸 91.230.168.43

🇬🇧 87.236.176.130

🇷🇴 82.79.141.139

🇺🇸 2001:550:9005:2000::1a

🇩🇪 216.106.187.112

🇨🇴 186.146.235.58

🇩🇪 178.27.90.142

🇺🇸 172.172.180.124