JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.44.183.200

20.44.183.200 was found in our database!

This IP was reported 275 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.44.183.200

Whois 20.44.183.200

IP Abuse Reports for 20.44.183.200:

This IP address has been reported a total of 275 times from 229 distinct sources. 20.44.183.200 was first reported on July 8th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ACE-INFORMATIQUE.NC	2026-07-09 19:00:04 (5 hours ago)	Bad Web Bot + Web App Attack blocked by Fail2ban	Bad Web Bot Web App Attack
Anonymous	2026-07-09 13:04:06 (11 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-07-09 09:35:32 (15 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 candc	2026-07-09 06:19:42 (18 hours ago)	Observed suspicious activity over last 24h. Requests: 127; security events: 63. Top path: /yjdit.php ... show more Observed suspicious activity over last 24h. Requests: 127; security events: 63. Top path: /yjdit.php (2 hits). show less	Web App Attack Brute-Force
🇬🇧 openstrike.co.uk	2026-07-09 05:16:35 (19 hours ago)	213 attacks on PHP URLs: GET /R57.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-07-09 04:21:08 (20 hours ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇧🇷 Peregrine	2026-07-09 03:09:01 (21 hours ago)	Fail2Ban Jail: tomcat-404 \| Evidence: 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:22 -0300] "GE ... show more Fail2Ban Jail: tomcat-404 \| Evidence: 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:22 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.37 - - [08/Jul/2026:14:10:23 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:28 -0300] "GET /bpsoe.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:28 -0300] "GET /bxodh.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:29 -0300] "GET /ojgup.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:29 -0300] "GET /oocnp.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:29 -0300] "GET /sletj.php HTTP/1.1" 404 414 20.44.183.200 172.71.8.59 - - [08/Jul/2026:14:10:30 -0300] "GET /sump1.php HTTP/1.1" 404 414 show less	Bad Web Bot Web App Attack
🇩🇪 SiyCah	2026-07-09 03:00:01 (21 hours ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇺🇸 infra-monitor	2026-07-09 00:00:15 (1 day ago)	Automated ban via infra-monitor: webshell-high-confidence, wp-sensitive-paths	Hacking Web App Attack
🇩🇪 mondor.ro	2026-07-08 23:58:03 (1 day ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 20.44.183.200, Rea ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 20.44.183.200, Reason:[20.44.183.200 (JP/Japan/-), more than 60 Apache 404 hits in the last 3600 secs]; Ports: 80,443; Direction: in; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇺🇸 helios.live	2026-07-08 23:51:44 (1 day ago)	20.44.183.200 - - [08/Jul/2026:23:51:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.44.183.200 - - [08/Jul/2026:23:51:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-" 2026/07/08 23:51:43 [error] 3707515#3707515: 1243392 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.44.183.200, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 2026/07/08 23:51:43 [error] 3707515#3707515: 1243392 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.44.183.200, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 20.44.183.200 - - [08/Jul/2026:23:51:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-" 2026/07/08 23:51:44 [error] 3707515#3707515: ... show less	Web App Attack
🇩🇪 Dominik Lysiak	2026-07-08 23:46:34 (1 day ago)	20.44.183.200 - - [09/Jul/2026:01:46:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.44.183.200 - - [09/Jul/2026:01:46:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" 20.44.183.200 - - [09/Jul/2026:01:46:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" 20.44.183.200 - - [09/Jul/2026:01:46:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" ... show less	Web App Attack
🇺🇸 chrisj	2026-07-08 23:44:08 (1 day ago)	[Wed Jul 08 23:44:07.632459 2026] [proxy_fcgi:error] [pid 1277:tid 1321] [client 20.44.183.200:44981 ... show more [Wed Jul 08 23:44:07.632459 2026] [proxy_fcgi:error] [pid 1277:tid 1321] [client 20.44.183.200:44981] AH01071: Got error 'Primary script unknown' [Wed Jul 08 23:44:07.940148 2026] [proxy_fcgi:error] [pid 1277:tid 1348] [client 20.44.183.200:44981] AH01071: Got error 'Primary script unknown' [Wed Jul 08 23:44:08.274332 2026] [proxy_fcgi:error] [pid 1277:tid 1344] [client 20.44.183.200:44981] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 Joop	2026-07-08 23:40:28 (1 day ago)	2026-07-09 01:40:27 +0200 s17 /this_is_a_new_hello_world.php	Web App Attack
🇩🇪 webanyone	2026-07-08 23:30:47 (1 day ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack

Showing 1 to 15 of 275 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.185.122.186

🇮🇳 122.162.150.216

🇳🇱 195.178.110.227

🇺🇸 172.245.102.77

🇺🇸 165.154.255.63

🇺🇸 162.216.150.98

🇸🇪 155.4.244.169

🇱🇰 124.43.65.60

🇺🇸 66.132.224.19

🇳🇱 45.153.34.186

🇩🇪 45.3.45.12

🇲🇽 38.22.170.10

🇬🇾 190.80.90.73

🇦🇷 179.36.99.105

🇨🇲 154.70.102.114

🇵🇹 148.71.135.107

🇸🇬 139.162.48.91

🇨🇳 106.12.148.154

🇲🇾 47.254.234.201

🇳🇱 45.148.10.141