JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.92.77.159

Recent Activity

Abuse confidence score ?

100% Critical

2,642 reports

849 reporters · latest 14 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.92.77.159

Export CSV

This IP address has been reported a total of 2,642 times from 849 distinct sources. 20.92.77.159 was first reported on October 3rd 2026, and the most recent report was 14 hours ago. In the last 60 days, the top reporter locations were: Germany with 654 reports; United States of America with 525 reports; France with 311 reports. The most common categories in these recent reports were: Web App Attack 2096 times; Bad Web Bot 707 times; Hacking 597 times; Brute-Force 562 times; Port Scan 266 times; Other 405 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-25 03:14:10 (14 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:5 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:59 -0300] "GET /admin.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-10-24 13:48:26 (1 day ago)	fail2ban jail apache-scanner: 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /admin.php HTTP/1.1 ... show more fail2ban jail apache-scanner: 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /admin.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /1index.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /adminfuns.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /wp-includes/fonts/ HTTP/1.1" 403 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /wp-content/admin.php HTTP/1.1" 40 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:53:30 (1 day ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 1cyb3rpunk	2026-10-23 18:42:49 (1 day ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_prob ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-23 18:19:56 (1 day ago)	Automated report by fail2ban (apache-php-scan jail): 1 matching events	Web App Attack Hacking
🇧🇷 Peregrine	2026-10-23 03:14:07 (2 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:5 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:59 -0300] "GET /admin.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇨🇱 Fernando Soto	2026-10-23 01:35:07 (2 days ago)	WAF propio vps1 (CL): abuseipdb_ext100 score 8 en 1h. actividad hostil.	Bad Web Bot
🇺🇸 printedwicked	2026-10-22 22:24:06 (2 days ago)	PW Sentinel on printedwicked.com: blocked (analyst). Automated report.	Port Scan
Anonymous	2026-10-22 19:53:06 (2 days ago)	fail2ban: apache-php-scan jail (1 hits in 2419200s) on skipper	Web App Attack Hacking
🇺🇸 Rayulcifer	2026-10-22 07:01:43 (3 days ago)	[Fri Oct 09 16:10:41.780199 2026] [authz_core:error] [pid 1108475:tid 140444910458560] [client 20.92 ... show more [Fri Oct 09 16:10:41.780199 2026] [authz_core:error] [pid 1108475:tid 140444910458560] [client 20.92.77.159:50766] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 09 16:10:41.978698 2026] [authz_core:error] [pid 1108475:tid 140445883553472] [client 20.92.77.159:50766] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 09 16:10:42.209701 2026] [authz_core:error] [pid 1108475:tid 140446789506752] [client 20.92.77.159:50766] AH01630: client denied by server configuration: proxy:http://localhost:4000/xc32tl6p1ockohrquxkroCfm.php [Fri Oct 09 16:10:42.409112 2026] [authz_core:error] [pid 1108475:tid 140446839862976] [client 20.92.77.159:50766] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-filemannger4h.php [Fri Oct 09 16:10:42.637186 2026] [authz_core:error] [pid 1108475:tid 140446965688000] [client 20.92.77.159 ... show less	Brute-Force SSH
Anonymous	2026-10-21 13:21:52 (4 days ago)	fail2ban jail apache-scanner: 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /admin.php HTTP/1.1 ... show more fail2ban jail apache-scanner: 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /admin.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:17 -0700] "GET /1index.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /adminfuns.php HTTP/1.1" 404 123711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /wp-includes/fonts/ HTTP/1.1" 403 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.92.77.159 - - [02/Oct/2026:23:30:18 -0700] "GET /wp-content/admin.php HTTP/1.1" 40 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:29:33 (4 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 ghostwarriors	2026-10-21 11:21:20 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-21 03:15:05 (4 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:5 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.92.77.159 104.22.127.70 - - [08/Oct/2026:15:29:59 -0300] "GET /admin.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-10-20 07:11:47 (5 days ago)	T: f2b 404 5x	Web App Attack

Showing 1 to 15 of 2642 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.49.68

🇺🇸 172.169.234.110

🇵🇱 54.38.52.18

🇸🇳 41.214.58.108

🇧🇷 170.247.41.196

🇧🇷 170.80.103.249

🇺🇸 146.190.175.10

🇩🇪 130.12.180.48

🇻🇳 103.38.237.19

🇸🇦 84.13.129.116

🇺🇸 52.180.140.29

🇺🇸 51.8.102.17

🇮🇱 46.210.94.61

🇧🇷 34.151.236.83

🇨🇦 34.19.156.98

🇦🇷 200.55.64.119

🇵🇱 176.53.159.197

🇳🇱 64.205.72.75

🇺🇸 20.150.195.29

🇦🇷 200.123.52.40