JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.197.26.46

Recent Activity

Abuse confidence score ?

100% Critical

2,549 reports

833 reporters · latest 3 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.197.26.46

Export CSV

This IP address has been reported a total of 2,549 times from 833 distinct sources. 20.197.26.46 was first reported on October 2nd 2026, and the most recent report was 3 hours ago. In the last 60 days, the top reporter locations were: Germany with 598 reports; United States of America with 478 reports; France with 303 reports. The most common categories in these recent reports were: Web App Attack 2004 times; Bad Web Bot 672 times; Brute-Force 576 times; Hacking 531 times; Port Scan 227 times; Other 403 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 13:46:14 (3 hours ago)	fail2ban jail apache-scanner: 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /edit.php HTTP/1.1" ... show more fail2ban jail apache-scanner: 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /edit.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /elp.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /666.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:03 -0700] "GET /wp-admin/ HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:03 -0700] "GET /ws54.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:51:53 (4 hours ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇸🇦 BenTahily	2026-10-24 07:01:04 (10 hours ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-23 03:13:47 (1 day ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.197.26.46 172.69.178.92 - - [09/Oct/2026:05:15:1 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.197.26.46 172.69.178.92 - - [09/Oct/2026:05:15:16 -0300] "GET /admin.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇨🇱 Fernando Soto	2026-10-23 01:35:08 (1 day ago)	WAF propio vps1 (CL): abuseipdb_ext100 score 8 en 1h. actividad hostil.	Bad Web Bot
🇺🇸 printedwicked	2026-10-22 22:25:02 (1 day ago)	PW Sentinel on printedwicked.com: blocked (analyst). Automated report.	Hacking Web App Attack
🇪🇸 Yoeph	2026-10-22 17:41:13 (1 day ago)	Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControl ... show more Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControlPro VPS) show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-22 07:01:14 (2 days ago)	[Thu Oct 08 14:28:50.029495 2026] [authz_core:error] [pid 4114134:tid 140446940509888] [client 20.19 ... show more [Thu Oct 08 14:28:50.029495 2026] [authz_core:error] [pid 4114134:tid 140446940509888] [client 20.197.26.46:41253] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Oct 08 14:28:50.311323 2026] [authz_core:error] [pid 4114134:tid 140444801418944] [client 20.197.26.46:41253] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Oct 08 14:28:50.826319 2026] [authz_core:error] [pid 4114134:tid 140446948902592] [client 20.197.26.46:41253] AH01630: client denied by server configuration: proxy:http://localhost:4000/admin.php [Thu Oct 08 14:28:51.104933 2026] [authz_core:error] [pid 4114134:tid 140447185249984] [client 20.197.26.46:41253] AH01630: client denied by server configuration: proxy:http://localhost:4000/goods.php [Thu Oct 08 14:28:51.383560 2026] [authz_core:error] [pid 4114134:tid 140443148875456] [client 20.197.26.46:41253] AH01630: client denied ... show less	Brute-Force SSH
🇸🇦 BenTahily	2026-10-22 07:01:05 (2 days ago)	Malicious activity against marketblitzer.com (BLITZER Trading Platform)	Bad Web Bot Web App Attack
Anonymous	2026-10-21 13:19:51 (3 days ago)	fail2ban jail apache-scanner: 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /edit.php HTTP/1.1" ... show more fail2ban jail apache-scanner: 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /edit.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /elp.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:02 -0700] "GET /666.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:03 -0700] "GET /wp-admin/ HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.26.46 - - [03/Oct/2026:03:48:03 -0700] "GET /ws54.php HTTP/1.1" 404 58513 "-" "Mozilla/5.0 (Windows show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:28:10 (3 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 ghostwarriors	2026-10-21 11:21:14 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Yoeph	2026-10-21 06:58:32 (3 days ago)	Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControl ... show more Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControlPro VPS) show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-21 03:10:27 (3 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.197.26.46 172.70.219.248 - - [03/Oct/2026:12:52:38 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.197.26.46 172.70.219.248 - - [03/Oct/2026:12:52:38 -0300] "GET /inputs.php HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-10-20 07:10:52 (4 days ago)	T: f2b 404 5x	Web App Attack

Showing 1 to 15 of 2549 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.49.121

🇯🇵 194.5.48.157

🇪🇨 181.188.232.16

🇷🇺 95.27.79.113

🇬🇧 86.38.187.129

🇧🇬 78.128.112.30

🇫🇷 51.254.103.32

🇬🇧 45.82.76.111

🇵🇱 37.26.192.217

🇬🇧 35.203.211.193

🇳🇱 31.42.188.122

🇧🇷 201.81.235.7

🇦🇷 181.25.141.14

🇭🇰 152.32.189.128

🇺🇸 142.202.48.214

🇹🇼 125.227.90.20

🇧🇩 103.77.253.105

🇮🇹 101.57.194.43

🇬🇧 77.67.26.60

🇺🇸 64.136.230.47