JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.211.36.82

Recent Activity

Abuse confidence score ?

100% Critical

702 reports

408 reporters · latest 56 seconds ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.211.36.82

Export CSV

This IP address has been reported a total of 702 times from 408 distinct sources. 20.211.36.82 was first reported on October 16th 2026, and the most recent report was 56 seconds ago. In the last 60 days, the top reporter locations were: Germany with 174 reports; United States of America with 125 reports; France with 66 reports. The most common categories in these recent reports were: Web App Attack 544 times; Bad Web Bot 199 times; Brute-Force 162 times; Hacking 137 times; Port Scan 46 times; Other 111 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-19 10:56:16 (56 seconds ago)	Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-probing	Brute-Force
🇩🇪 macrob	2026-10-19 10:49:40 (7 minutes ago)	2026/10/19 10:49:35 [error] 2056017#2056017: 14380987 access forbidden by rule, client: 20.211.36.8 ... show more 2026/10/19 10:49:35 [error] 2056017#2056017: 14380987 access forbidden by rule, client: 20.211.36.82, server: antzfund.com, request: "GET ///admin.php HTTP/1.1", host: "antzfund.com" 2026/10/19 10:49:38 [error] 2056017#2056017: 14380994 access forbidden by rule, client: 20.211.36.82, server: antzfund.com, request: "GET //admin.php HTTP/1.1", host: "antzfund.com" 2026/10/19 10:49:39 [error] 2056017#2056017: 14381139 access forbidden by rule, client: 20.211.36.82, server: antzfund.com, request: "GET //adminfuns.php HTTP/1.1", host: "antzfund.com" ... show less	Web App Attack
🇩🇪 Phenix Info	2026-10-19 10:33:45 (23 minutes ago)	SmallGuard.fr - Empty User Agent	Web App Attack
🇮🇹 ciccio diddo	2026-10-19 10:30:00 (27 minutes ago)	URL Scanner multiple 30X port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 jbouwh	2026-10-19 10:07:13 (49 minutes ago)	[Mon Oct 19 12:07:06.232500 2026] [access_compat:error] [pid 192393:tid 192441] [client 20.211.36.82 ... show more [Mon Oct 19 12:07:06.232500 2026] [access_compat:error] [pid 192393:tid 192441] [client 20.211.36.82:52602] AH01797: client denied by server configuration: /data/srv/[redacted]/wp-admin/includes/class-wp-site-list.php [Mon Oct 19 12:07:12.336042 2026] [access_compat:error] [pid 192393:tid 192446] [client 20.211.36.82:52602] AH01797: client denied by server configuration: /data/srv/[redacted]/wp-admin/css/colors/modern/ [Mon Oct 19 12:07:13.445191 2026] [access_compat:error] [pid 192393:tid 192448] [client 20.211.36.82:52602] AH01797: client denied by server configuration: /data/srv/[redacted]/wp-admin/js/index.php show less	Web App Attack
🇳🇱 Alt255	2026-10-19 09:59:56 (57 minutes ago)	[cb-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 20.211.36.82 - - [19/Oct/2026:11:59:54 +0200] "GET /adminer.php HTTP/1.1" 301 461 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇰 donkzquixote	2026-10-19 09:19:42 (1 hour ago)	Scan for exploitable WordPress files/information, or other brute force attempts.	Web App Attack Brute-Force
🇺🇸 Epimetheus	2026-10-19 09:06:24 (1 hour ago)	Unauthorized access attempts: [GET] /manas.php [GET] /opsh.php [GET] /wp-admin/includes/class-wp-si ... show more Unauthorized access attempts: [GET] /manas.php [GET] /opsh.php [GET] /wp-admin/includes/class-wp-site-list.php [GET] /wp-includes/ID3/about.php [GET] /wp_blog_footer.php [GET] /alfa.php [GET] /als.php [GET] /chosen.php [GET] /1.php [GET] /222.php [GET] /h02ugyh.php [GET] /alls.php [GET] /wp-logis.php [GET] /40341.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php UA: Unknown show less	Web App Attack
🇫🇷 ELYAZ	2026-10-19 09:02:49 (1 hour ago)	(y3) Failed access -byebye- from 20.211.36.82 (AU/Australia/-): (CF_ENABLE)	Hacking
🇩🇪 eposs-it.de	2026-10-19 08:50:18 (2 hours ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80	Port Scan Hacking
🇩🇪 raph	2026-10-19 08:45:31 (2 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-10-19 08:40:45 (2 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇳🇱 Site.eu	2026-10-19 08:32:25 (2 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 hchristo	2026-10-19 08:18:51 (2 hours ago)	[Mon Oct 19 10:18:48.609075 2026] [proxy_fcgi:error] [pid 64937:tid 65001] [client 20.211.36.82:1395 ... show more [Mon Oct 19 10:18:48.609075 2026] [proxy_fcgi:error] [pid 64937:tid 65001] [client 20.211.36.82:13954] AH01071: Got error 'Primary script unknown' [Mon Oct 19 10:18:49.192352 2026] [proxy_fcgi:error] [pid 64937:tid 65030] [client 20.211.36.82:13954] AH01071: Got error 'Primary script unknown' [Mon Oct 19 10:18:49.808236 2026] [proxy_fcgi:error] [pid 64937:tid 64989] [client 20.211.36.82:13954] AH01071: Got error 'Primary script unknown' [Mon Oct 19 10:18:50.456099 2026] [proxy_fcgi:error] [pid 64937:tid 64996] [client 20.211.36.82:13954] AH01071: Got error 'Primary script unknown' [Mon Oct 19 10:18:51.036956 2026] [proxy_fcgi:error] [pid 64937:tid 65008] [client 20.211.36.82:13954] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-10-19 08:12:17 (2 hours ago)	20.211.36.82 - - [19/Oct/2026:10:11:48 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.211.36.82 - - [19/Oct/2026:10:11:48 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:48 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:48 +0200] "GET /init-notica.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:48 +0200] "GET /index/function.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:49 +0200] "GET /wp-trbacks.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:49 +0200] "GET /543f.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:49 +0200] "GET /go.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:50 +0200] "GET /1ac.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:50 +0200] "GET /40341.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:50 +0200] "GET /aa.php HTTP/1.1" 404 492 "-" "-" 20.211.36.82 - - [19/Oct/2026:10:11:50 +0200] "GET ... show less	DDoS Attack

Showing 1 to 15 of 702 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 34.65.3.86

🇺🇸 3.83.245.221

🇺🇸 2604:a880:400:d1:0:5:35b4:9001

🇧🇷 187.87.105.0

🇺🇸 172.59.68.215

🇨🇦 142.167.119.12

🇨🇳 116.198.37.149

🇨🇳 115.190.235.8

🇮🇷 109.122.246.67

🇬🇧 86.38.187.178

🇺🇸 85.254.114.203

🇫🇷 85.217.140.16

🇬🇧 81.19.219.248

🇺🇸 65.49.1.222

🇩🇪 64.225.106.68

🇰🇷 20.196.199.78

🇮🇷 2.182.57.196

🇺🇸 2a13:f40:c029:c1cb:9f8d:6ca8:6f6d:e402

🇲🇿 197.249.133.65

🇻🇳 171.231.176.10