JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.204.42.226

20.204.42.226 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.204.42.226

Whois 20.204.42.226

IP Abuse Reports for 20.204.42.226:

This IP address has been reported a total of 137 times from 121 distinct sources. 20.204.42.226 was first reported on July 1st 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Philister11	2026-07-02 01:18:42 (11 minutes ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (IN/AS8075)	Web App Attack Hacking
Anonymous	2026-07-02 01:13:43 (16 minutes ago)	20.204.42.226 - - [02/Jul/2026:03:13:42 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 402 805 ... show more 20.204.42.226 - - [02/Jul/2026:03:13:42 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 402 805 "-" "Mozilla/5.0" ... show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-02 00:30:50 (59 minutes ago)	(upload_shell) srv101 Shell upload 20.204.42.226 (IN/India/-): 1 in the last 3600 secs; Ports: ; Di ... show more (upload_shell) srv101 Shell upload 20.204.42.226 (IN/India/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 LRob.fr	2026-07-02 00:30:37 (59 minutes ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇺🇸 Charlesiv	2026-07-02 00:26:16 (1 hour ago)	Triggered Cloudflare WAF (botFight) from IN. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from IN. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /cgi-bin/ Timestamp: 2026-07-01T22:54:49Z Ray ID: a148fea6d99d3bb0 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Philister11	2026-07-02 00:21:11 (1 hour ago)	CrowdSec: crowdsecurity/http-probing (IN/AS8075)	Web App Attack Hacking
🇨🇱 n33	2026-07-02 00:03:09 (1 hour ago)	Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.	Hacking Web App Attack
🇩🇪 LRob.fr	2026-07-02 00:00:58 (1 hour ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇵🇱 nakordoni.eu	2026-07-02 00:00:13 (1 hour ago)	Blocked by nakordoni.eu automated security: vulnerability scanner / probe attack. Jail: nakordoni-se ... show more Blocked by nakordoni.eu automated security: vulnerability scanner / probe attack. Jail: nakordoni-security-probe, 3 matches. ISP: Microsoft Corporation (IN), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-01 23:49:26 (1 hour ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.204.42.226 (IN/India/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.204.42.226 (IN/India/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 convos	2026-07-01 23:16:15 (2 hours ago)	HONEYPOT TRIGGERED [HP-MR2P2JUR-U0LJK9]: GET /wp-content/plugins/fix/up.php on hq.it-solutionsusa.co ... show more HONEYPOT TRIGGERED [HP-MR2P2JUR-U0LJK9]: GET /wp-content/plugins/fix/up.php on hq.it-solutionsusa.com \| UA: Mozilla/5.0 \| TS: 2026-07-01T23:16:14.979Z show less	Port Scan Web App Attack
🇫🇮 Christopher Hughes	2026-07-01 23:05:57 (2 hours ago)	[Thu Jul 02 00:05:55.209540 2026] [proxy_fcgi:error] [pid 1385660:tid 139821771118144] [client 20.20 ... show more [Thu Jul 02 00:05:55.209540 2026] [proxy_fcgi:error] [pid 1385660:tid 139821771118144] [client 20.204.42.226:21258] AH01071: Got error 'Primary script unknown' [Thu Jul 02 00:05:55.358773 2026] [proxy_fcgi:error] [pid 1385660:tid 139822635140672] [client 20.204.42.226:21258] AH01071: Got error 'Primary script unknown' [Thu Jul 02 00:05:55.659397 2026] [proxy_fcgi:error] [pid 1385660:tid 139821787903552] [client 20.204.42.226:21258] AH01071: Got error 'Primary script unknown' [Thu Jul 02 00:05:55.925010 2026] [proxy_fcgi:error] [pid 1385660:tid 139821175531072] [client 20.204.42.226:21258] AH01071: Got error 'Primary script unknown' [Thu Jul 02 00:05:56.219838 2026] [proxy_fcgi:error] [pid 1385660:tid 139822618355264] [client 20.204.42.226:21258] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-01 22:52:49 (2 hours ago)	[01-Jul-2026 18:52:48 America/New_York] Page Not Found: inputs.php [20.204.42.226] [01-Jul-2026 18:5 ... show more [01-Jul-2026 18:52:48 America/New_York] Page Not Found: inputs.php [20.204.42.226] [01-Jul-2026 18:52:48 America/New_York] Page Not Found: ioxi-o.php [20.204.42.226] ... show less	Brute-Force
🇬🇧 Buster	2026-07-01 22:24:00 (3 hours ago)	Taking part in daily distributed attack attempts from Perm Blocked ASN and country	Open Proxy Brute-Force Web App Attack
🇺🇸 rsa	2026-07-01 22:15:00 (3 hours ago)	GET /wp-admin/user/index.php HTTP/1.1	DDoS Attack Brute-Force Exploited Host Web App Attack Hacking

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.226.196.24

🇺🇸 167.253.16.192

🇮🇳 103.181.160.119

🇺🇸 71.6.233.232

🇺🇸 57.141.6.62

🇩🇪 43.228.157.183

🇮🇪 2a05:d018:10df:d400:f84b:6ca0:adc8:87d8

🇺🇸 2602:80d:100a::2:f

🇩🇪 213.209.159.66

🇨🇭 209.99.185.195

🇳🇱 204.76.203.206

🇧🇪 198.235.24.233

🇺🇸 162.216.149.134

🇳🇵 157.10.100.12

🇩🇪 139.19.117.197

🇨🇳 112.126.62.31

🇨🇳 106.111.16.47

🇧🇩 103.25.249.85

🇳🇱 91.92.40.200

🇫🇷 84.247.134.22