JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.211.36.82

Recent Activity

Abuse confidence score ?

100% Critical

990 reports

503 reporters · latest 13 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.211.36.82

Export CSV

This IP address has been reported a total of 990 times from 503 distinct sources. 20.211.36.82 was first reported on October 16th 2026, and the most recent report was 13 hours ago. In the last 60 days, the top reporter locations were: Germany with 241 reports; United States of America with 182 reports; France with 99 reports. The most common categories in these recent reports were: Web App Attack 759 times; Bad Web Bot 286 times; Brute-Force 233 times; Hacking 199 times; Port Scan 77 times; Other 145 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-10-27 21:52:28 (13 hours ago)	[Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.21 ... show more [Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 16 08:48:08.962244 2026] [authz_core:error] [pid 2056200:tid 134150719780544] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 16 08:48:09.184708 2026] [authz_core:error] [pid 2056200:tid 134150350698176] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Fri Oct 16 08:48:09.395721 2026] [authz_core:error] [pid 2056200:tid 134150702995136] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/index/function.php [Fri Oct 16 08:48:09.605726 2026] [authz_core:error] [pid 2056200:tid 134154489136832] [client 20.211.36.82:65244] AH01630 ... show less	Brute-Force SSH
🇪🇸 Gem	2026-10-27 13:07:52 (22 hours ago)	Unauthorized web scan.	Web App Attack
🇩🇪 ghostwarriors	2026-10-27 00:22:01 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-26 21:22:40 (1 day ago)	[Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.21 ... show more [Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 16 08:48:08.962244 2026] [authz_core:error] [pid 2056200:tid 134150719780544] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 16 08:48:09.184708 2026] [authz_core:error] [pid 2056200:tid 134150350698176] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Fri Oct 16 08:48:09.395721 2026] [authz_core:error] [pid 2056200:tid 134150702995136] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/index/function.php [Fri Oct 16 08:48:09.605726 2026] [authz_core:error] [pid 2056200:tid 134154489136832] [client 20.211.36.82:65244] AH01630 ... show less	Brute-Force SSH
Anonymous	2026-10-25 19:47:27 (2 days ago)	$f2bV_matches	Brute-Force
🇳🇱 Alt255	2026-10-25 13:51:00 (2 days ago)	[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 20.211.36.82 - - \[16/Oct/2026:10:51:57 +0200\] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2027 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:51:58 +0200\] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 222 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:51:58 +0200\] "GET /init-notica.php HTTP/1.1" 404 222 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:51:58 +0200\] "GET /index/function.php HTTP/1.1" 404 2027 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:51:59 +0200\] "GET /wp-trbacks.php HTTP/1.1" 404 222 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:51:59 +0200\] "GET /wp-123.php HTTP/1.1" 404 222 "-" "-" 20.211.36.82 - - \[16/Oct/2026:10:52:00 +0200\] "GET /wp-abcd.php HTTP/1.1" 404 222 "-" ... show less	Bad Web Bot Web App Attack
🇦🇺 CalmBrain	2026-10-24 16:00:22 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
Anonymous	2026-10-24 13:46:57 (3 days ago)	fail2ban jail apache-scanner: 20.211.36.82 - - [16/Oct/2026:08:08:46 -0700] "GET /40341.php HTTP/1.1 ... show more fail2ban jail apache-scanner: 20.211.36.82 - - [16/Oct/2026:08:08:46 -0700] "GET /40341.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:46 -0700] "GET /aa.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:47 -0700] "GET /yich.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:48 -0700] "GET /kk00.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:48 -0700] "GET /wp-logis.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:49 -0700] "GET /g1.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:50 -0700] "GET /2.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:51 -0700] "GET /robots.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:51 -0700] "GET /k.php HTTP/1.1" 404 58458 "-" "-" 20.211.36.82 - - [16/Oct/2026:08:08:52 -0700] "GET /w.php HTTP/1.1" 404 58458 "-" "-" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:52:15 (3 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇬🇧 sc user	2026-10-23 05:51:10 (5 days ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇨🇱 Fernando Soto	2026-10-23 03:05:53 (5 days ago)	WAF propio vps1 (CL): abuseipdb_ext100 score 8 en 1h. actividad hostil.	Bad Web Bot
🇩🇪 Alfafoxtrot	2026-10-23 00:44:02 (5 days ago)	Reason: malware \| src-ip: 20.211.36.82 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 2	Exploited Host
🇺🇸 printedwicked	2026-10-22 22:39:40 (5 days ago)	PW Sentinel on printedwicked.com: blocked (analyst). Automated report.	Port Scan
🇫🇷 cydit.eu	2026-10-22 14:14:34 (5 days ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇺🇸 Rayulcifer	2026-10-22 07:01:21 (6 days ago)	[Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.21 ... show more [Fri Oct 16 08:48:08.761059 2026] [authz_core:error] [pid 2056200:tid 134152934373056] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 16 08:48:08.962244 2026] [authz_core:error] [pid 2056200:tid 134150719780544] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 16 08:48:09.184708 2026] [authz_core:error] [pid 2056200:tid 134150350698176] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Fri Oct 16 08:48:09.395721 2026] [authz_core:error] [pid 2056200:tid 134150702995136] [client 20.211.36.82:65244] AH01630: client denied by server configuration: proxy:http://localhost:4000/index/function.php [Fri Oct 16 08:48:09.605726 2026] [authz_core:error] [pid 2056200:tid 134154489136832] [client 20.211.36.82:65244] AH01630 ... show less	Brute-Force SSH

Showing 1 to 15 of 990 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇧🇷 181.214.221.78

🇨🇳 101.89.182.189

🇳🇱 45.149.175.10

🇫🇷 45.80.27.169

🇺🇸 216.24.219.14

🇹🇷 203.202.232.130

🇲🇽 189.219.182.85

🇸🇾 185.225.41.237

🇫🇮 172.83.255.53

🇺🇸 172.56.107.252

🇫🇷 141.95.162.162

🇫🇷 79.127.138.69

🇳🇱 77.91.71.91

🇰🇷 59.11.37.168

🇳🇱 45.148.10.240

🇺🇦 31.202.189.150

🇦🇷 200.26.226.206

🇫🇷 194.34.232.225

🇬🇧 188.240.59.53