JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.114.112

20.226.114.112 was found in our database!

This IP was reported 96 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.114.112

Whois 20.226.114.112

IP Abuse Reports for 20.226.114.112:

This IP address has been reported a total of 96 times from 67 distinct sources. 20.226.114.112 was first reported on July 3rd 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-17 22:31:25 (35 minutes ago)		Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-17 21:45:01 (1 hour ago)	Malware host detected by rbl.malware.expert. RBL lookup of 112.114.226.20.rbl.malware.expert succeed ... show more Malware host detected by rbl.malware.expert. RBL lookup of 112.114.226.20.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1) show less	Hacking
🇩🇪 LRob	2026-07-17 20:53:42 (2 hours ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: //xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show more CrowdSec: lrob/wp-xmlrpc-bf \| req: //xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-17 19:08:10 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇱 Dolphi	2026-07-17 18:32:16 (4 hours ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇩🇪 Admin-Gito	2026-07-17 16:19:10 (6 hours ago)	20.226.114.112 - - [17/Jul/2026:18:17:45 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5. ... show more 20.226.114.112 - - [17/Jul/2026:18:17:45 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.226.114.112 - - [17/Jul/2026:18:17:46 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4388 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.226.114.112 - - [17/Jul/2026:18:17:48 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-17 06:05:57 (17 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 macrob	2026-07-17 05:31:46 (17 hours ago)	2026/07/17 05:31:43 [error] 3984186#3984186: 382896918 access forbidden by rule, client: 20.226.114 ... show more 2026/07/17 05:31:43 [error] 3984186#3984186: 382896918 access forbidden by rule, client: 20.226.114.112, server: 100fs.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org" 2026/07/17 05:31:44 [error] 3984186#3984186: 382896947 access forbidden by rule, client: 20.226.114.112, server: 100fs.org, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org" 2026/07/17 05:31:45 [error] 3984186#3984186: 382896952 access forbidden by rule, client: 20.226.114.112, server: 100fs.org, request: "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org" ... show less	Web App Attack
🇩🇪 ketovoila.pl	2026-07-17 03:38:12 (19 hours ago)	ketovoila.pl WordPress reconnaissance scan: hits=7; unique_paths=7; sample_paths=/sito/wp-includes/w ... show more ketovoila.pl WordPress reconnaissance scan: hits=7; unique_paths=7; sample_paths=/sito/wp-includes/wlwmanifest.xml,/website/wp-includes/wlwmanifest.xml,/wordpress/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"; window=2026-07-17T03:38:12Z..2026-07-17T03:38:12Z show less	Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-07-17 02:56:37 (20 hours ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/wlwmanifest.xml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇪 vaia.cloud	2026-07-17 00:27:01 (22 hours ago)	trying wp-login.php/xmlrpc.php 34 times in 1 minutes	Brute-Force Web App Attack
🇳🇿 realstuffie	2026-07-16 22:33:00 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇫🇷 SpaceHost-Server	2026-07-16 22:28:44 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-07-16 17:05:36 (1 day ago)	(PERMBLOCK) 20.226.114.112 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; IP: ... show more (PERMBLOCK) 20.226.114.112 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; IP: 20.226.114.112; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
🇺🇸 ipblock.com	2026-07-16 14:19:00 (1 day ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.168

🇳🇱 45.156.128.49

🇬🇧 35.203.211.39

🇫🇮 147.185.133.132

🇬🇧 104.28.159.196

🇸🇬 84.75.155.110

🇧🇪 45.128.133.242

🇳🇱 185.242.226.11

🇳🇱 77.239.124.235

🇺🇸 76.145.10.140

🇵🇱 74.248.124.144

🇺🇸 71.6.233.133

🇳🇱 62.238.195.91

🇩🇪 31.56.39.205

🇨🇳 116.234.69.160

🇩🇪 104.248.142.195

🇷🇺 94.190.15.13

🇬🇭 80.87.83.229

🇺🇸 40.77.167.144

🇫🇷 173.212.224.194