JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.230.47.94

20.230.47.94 was found in our database!

This IP was reported 353 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.230.47.94

Whois 20.230.47.94

IP Abuse Reports for 20.230.47.94:

This IP address has been reported a total of 353 times from 274 distinct sources. 20.230.47.94 was first reported on July 20th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-21 07:34:19 (2 hours ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇮🇳 evicky2002	2026-07-21 06:00:00 (4 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-07-21 05:14:07 (4 hours ago)	843 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php ... show more 843 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php HTTP/1.1 show less	Web App Attack
🇩🇪 SiyCah	2026-07-21 03:00:02 (7 hours ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇭🇺 DumaNet	2026-07-21 02:27:00 (7 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 20. 21:07:03 Source IP: 20.230.47.94 Portion of ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 20. 21:07:03 Source IP: 20.230.47.94 Portion of the log(s): 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /files/index.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /tes.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /wp-good.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:03 +0200] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:02 +0200] "GET /wp-includes/rest-api/ HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:02 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:02 +0200] "GET /index/function.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:21:07:02 show less	Web App Attack Hacking
🇭🇺 DumaNet	2026-07-21 02:01:00 (7 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 20. 20:56:32 Source IP: 20.230.47.94 Portion of ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 20. 20:56:32 Source IP: 20.230.47.94 Portion of the log(s): 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /adminfuns.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /wp-admin/images/admin.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /gelay.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 153 "-" "-" 20.230.47.94 - [20/Jul/2026:20:56:32 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 404 153 "-" "-" show less	Web App Attack Hacking
Anonymous	2026-07-21 01:24:36 (8 hours ago)	Aggressive web scan	Web App Attack
🇦🇺 artful	2026-07-21 01:15:00 (8 hours ago)	Excessive errors ~1.4k in recent hours	Web App Attack
🇬🇧 Greg Poulson	2026-07-21 01:10:05 (8 hours ago)	Our website was hit by this DDOS at a rate of 231 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇩🇪 pscriptos	2026-07-21 01:09:28 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 Mundo Bueno	2026-07-21 01:05:24 (8 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /backup.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10. ... show more [ISILIA Protection v2.1] Tentative d'accès: /backup.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇫🇮 Christopher Hughes	2026-07-21 01:02:08 (8 hours ago)	[Tue Jul 21 02:02:06.660179 2026] [proxy_fcgi:error] [pid 2001177:tid 139826502276672] [client 20.23 ... show more [Tue Jul 21 02:02:06.660179 2026] [proxy_fcgi:error] [pid 2001177:tid 139826502276672] [client 20.230.47.94:64410] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:02:06.775582 2026] [proxy_fcgi:error] [pid 2001177:tid 139825982191168] [client 20.230.47.94:64410] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:02:06.890198 2026] [proxy_fcgi:error] [pid 2001177:tid 139826015761984] [client 20.230.47.94:64410] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:02:07.462547 2026] [proxy_fcgi:error] [pid 2001177:tid 139825873151552] [client 20.230.47.94:64410] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:02:07.919502 2026] [proxy_fcgi:error] [pid 2001177:tid 139825864758848] [client 20.230.47.94:64410] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 larse99	2026-07-21 01:01:44 (8 hours ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇺🇸 entangled_mongoose	2026-07-21 01:01:26 (8 hours ago)	Probed /wp-content/plugins/hellopress/wp_filemanager.php.	Web App Attack
🇬🇧 andypiper	2026-07-21 01:01:15 (8 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 353 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:171:c9:f001:9999::176

🇳🇱 194.135.105.208

🇨🇳 117.89.254.46

🇮🇳 113.30.177.170

🇷🇺 78.36.13.133

🇳🇱 45.148.10.183

🇲🇽 201.103.128.88

🇧🇴 190.181.27.37

🇮🇳 125.19.218.50

🇧🇩 119.148.10.158

🇮🇳 103.178.142.89

🇭🇰 101.36.112.198

🇧🇬 79.124.56.238

🇫🇷 51.91.96.79

🇳🇱 20.67.123.236

🇧🇷 187.51.208.158

🇺🇸 170.187.165.242

🇭🇰 119.28.177.175

🇱🇹 77.90.185.21

🇬🇧 35.203.211.96