JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.220.9.73

20.220.9.73 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.220.9.73

Whois 20.220.9.73

IP Abuse Reports for 20.220.9.73:

This IP address has been reported a total of 204 times from 185 distinct sources. 20.220.9.73 was first reported on July 9th 2026, and the most recent report was 12 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-09 18:02:00 (12 seconds ago)	20.220.9.73 - - [09/Jul/2026:20:01:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.9.73 - - [09/Jul/2026:20:01:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.220.9.73 - - [09/Jul/2026:20:01:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" "X" 20.220.9.73 - - [09/Jul/2026:20:01:59 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.220.9.73 - - [09/Jul/2026:20:01:59 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" "-" "X" 20.220.9.73 - - [09/Jul/2026:20:02:00 +0200] "GET /bpsoe.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.220.9.73 - - [09/Jul/2026:20:02:00 +0200] "GET /bpsoe.php HTTP/1.1" 404 146 "-" "-" "-" "X" show less	Brute-Force
🇺🇸 Lee Daniel	2026-07-09 18:00:43 (1 minute ago)	20.220.9.73 - - [09/Jul/2026:14:00:42 -0400] "GET /bxodh.php HTTP/1.1" 404 29040 "-" "-" 20.220.9.73 ... show more 20.220.9.73 - - [09/Jul/2026:14:00:42 -0400] "GET /bxodh.php HTTP/1.1" 404 29040 "-" "-" 20.220.9.73 - - [09/Jul/2026:14:00:42 -0400] "GET /ojgup.php HTTP/1.1" 404 29040 "-" "-" 20.220.9.73 - - [09/Jul/2026:14:00:42 -0400] "GET /oocnp.php HTTP/1.1" 404 29040 "-" "-" 20.220.9.73 - - [09/Jul/2026:14:00:43 -0400] "GET /sletj.php HTTP/1.1" 404 29040 "-" "-" 20.220.9.73 - - [09/Jul/2026:14:00:43 -0400] "GET /sump1.php HTTP/1.1" 404 29040 "-" "-" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇹🇼 ip4.tw	2026-07-09 17:57:01 (5 minutes ago)	Malicious web scan	Hacking Web App Attack
🇩🇪 MarkGGN	2026-07-09 17:53:12 (9 minutes ago)	Web attack. 20.220.9.73 - - [09/Jul/2026:19:53:07 +0200] "GET /wp-info.php HTTP/1.1" 404 27 "-" "-" ... show more Web attack. 20.220.9.73 - - [09/Jul/2026:19:53:07 +0200] "GET /wp-info.php HTTP/1.1" 404 27 "-" "-" 20.220.9.73 - - [09/Jul/2026:19:53:11 +0200] "GET /public/css.php HTTP/1.1" 404 27 "-" "-" show less	Web App Attack
🇧🇷 Halux	2026-07-09 17:51:03 (11 minutes ago)	20.220.9.73 Probing protected path or service	Web App Attack
🇺🇸 Major Hostility	2026-07-09 17:41:31 (20 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world ... show more "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 "GET //ip.php HTTP/1.1" 404 "GET /fw/faiyy.php HTTP/1.1" 404 "GET /wp-temp.php HTTP/1.1" 404 "GET //wp-content/cong.php HTTP/1.1" 404 "GET /wp-includes/css/index.php HTTP/1.1" 404 "GET /jj.php HTTP/1.1" 404 "GET /x.php HTTP/1.1" 404 "GET /sym403.php HTTP/1.1" 404 "GET /zoro.php HTTP/1.1" 404 "GET /hoeig.php HTTP/1.1" 404 "GET /asd67.php HTTP/1.1" 404 "GET ///alls.php HTTP/1.1" 404 "GET /ops.php HTTP/1.1" 404 "GET /txets.php HTTP/1.1" 404 "GET /dex.php HTTP/1.1" 404 "GET /xpwer1.php HTTP/1.1" 404 "GET /flox.php HTTP/1.1" 404 "GET /popo.php HT show less	Web App Attack
🇺🇦 RatCommander	2026-07-09 17:29:34 (32 minutes ago)	CrowdSec: crowdsecurity/http-crawl-non_statics	Port Scan Web App Attack
🇮🇹 zenmorro	2026-07-09 17:28:49 (33 minutes ago)	Honeypot hit (imperocms:0) — [scan_404] Scanning rilevato: 10 richieste 404 in 2 minuti \| GET /sym40 ... show more Honeypot hit (imperocms:0) — [scan_404] Scanning rilevato: 10 richieste 404 in 2 minuti \| GET /sym403.php \| Ultima richiesta: /sym403.php. Automated report from honeypot infrastructure show less	Port Scan
🇩🇪 Interceptor_HQ	2026-07-09 17:26:15 (35 minutes ago)	request_uri: /wp-content/plugins/hellopress/wp_filemanager.php -- automatic report --	Brute-Force Hacking
🇳🇱 vaddilyin	2026-07-09 17:25:47 (36 minutes ago)	{"ClientAddr":"20.220.9.73:61489","ClientHost":"20.220.9.73","ClientPort":"61489","ClientUsername":" ... show more {"ClientAddr":"20.220.9.73:61489","ClientHost":"20.220.9.73","ClientPort":"61489","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":57963,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":57963,"RequestAddr":"d.vdkln.com","RequestContentSize":0,"RequestCount":123240,"RequestHost":"d.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-07-09T17:25:46.483540256Z","StartUTC":"2026-07-09T17:25:46.483540256Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-09T17:25:46Z"} {"ClientAddr":"20.220.9.73:61489","ClientHost":"20.220.9.73","ClientPort":"61489","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":91102,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginS ... show less	Web App Attack
🇬🇧 djboddington	2026-07-09 17:21:43 (40 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 Stefan Dreher	2026-07-09 17:20:31 (41 minutes ago)	20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET //ip.php HTTP/1.1" 404 153 "-" "-" 20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET /fw/faiyy.php HTTP/1.1" 404 153 "-" "-" 20.220.9.73 - - [09/Jul/2026:19:20:29 +0200] "GET /wp-temp.php HTTP/1.1" 404 153 "-" "-" ... show less	Hacking Brute-Force
🇳🇱 sernate	2026-07-09 17:16:31 (45 minutes ago)	(404blocker) 404 trigger 20.220.9.73 (CA/Canada/-): 80 in the last 3600 secs; Ports: ; Direction: i ... show more (404blocker) 404 trigger 20.220.9.73 (CA/Canada/-): 80 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force
🇳🇱 0xffffffff	2026-07-09 17:13:35 (48 minutes ago)	[2026-07-09 20:13:33.432868] [authz_core:error] [pid 11701:tid 124363873420992] [client 20.220.9.73: ... show more [2026-07-09 20:13:33.432868] [authz_core:error] [pid 11701:tid 124363873420992] [client 20.220.9.73:34802] AH01630: client denied by server configuration: /var/www/html/wp-content , error_notes:wrong-host , URI:'/wp-content/plugins/hellopress/wp_filemanager.php' [2026-07-09 20:13:33.520548] [authz_core:error] [pid 11701:tid 124363823064768] [client 20.220.9.73:34802] AH01630: client denied by server configuration: /var/www/html/this_is_a_new_hello_world.php , error_notes:wrong-host , URI:'/this_is_a_new_hello_world.php' [2026-07-09 20:13:33.622151] [authz_core:error] [pid 11701:tid 124363831457472] [client 20.220.9.73:34802] AH01630: client denied by server configuration: /var/www/html/ip.php , error_notes:wrong-host , URI:'/ip.php' [2026-07-09 20:13:33.710393] [authz_core:error] [pid 11701:tid 124363881813696] [client 20.220.9.73:34802] AH01630: client denied by server configuration: /var/www/html/fw , error_notes:wrong-host , URI:'/fw/faiyy.php' [2026-07-09 20:13:33.798052] [authz_core:error] [pid 11701:tid show less	Web App Attack Bad Web Bot
🇺🇸 Gabriel Camargo	2026-07-09 17:11:08 (51 minutes ago)	20.220.9.73 - - [09/Jul/2026:12:11:08 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.220.9.73 - - [09/Jul/2026:12:11:08 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" 20.220.9.73 - - [09/Jul/2026:12:11:08 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 162 "-" "-" 20.220.9.73 - - [09/Jul/2026:12:11:08 -0500] "GET /bpsoe.php HTTP/1.1" 404 162 "-" "-" ... show less	Brute-Force SSH

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.200.9.182

🇮🇩 202.72.196.75

🇺🇸 188.42.112.71

🇯🇵 124.45.39.194

🇺🇸 107.174.213.24

🇺🇸 107.172.95.94

🇷🇴 92.118.39.74

🇿🇦 82.23.235.192

🇸🇪 31.59.160.3

🇻🇪 190.97.238.210

🇺🇦 176.103.3.167

🇹🇳 165.50.113.253

🇺🇸 152.163.119.127

🇺🇸 136.124.34.150

🇸🇪 104.23.223.143

🇭🇰 101.36.121.72

🇫🇷 91.196.152.200

🇺🇸 50.116.50.73

🇺🇸 45.156.129.195

🇩🇪 45.135.141.12