20.197.226.217
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇧🇷 Brazil
- City
- Campinas, Sao Paulo
Abuse Reports
Total reports
1,102 from
197 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 neron |
CrowdSec blocked: http:scan detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host Web App Attack | |
| 🇺🇸 nationaleventpros.com |
vulnerability scan
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host Web App Attack | |
| 🇺🇸 1cyb3rpunk |
|
Exploited Host Hacking | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Web App Attack Brute-Force Bad Web Bot | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇫🇷 masterguru |
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
|
Hacking | |
| 🇫🇷 ✨ |
|
Web App Attack | |
| 🇺🇸 ambor |
Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36. Method: POST
|
Web App Attack | |
| 🇲🇹 Malta |
20.197.226.217 - - [12/Oct/2026:21:36:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
|
Hacking Web App Attack | |
| 🇦🇺 A.i.D.A.N.N |
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
|
Web App Attack | |
| 🇺🇸 dtorrer |
Brute-force general attack.
|
Brute-Force | |
| 🇫🇷 LRob |
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0 | 2026-10-12 17:58 UTC
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown