JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.118.49

20.226.118.49 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.118.49

Whois 20.226.118.49

IP Abuse Reports for 20.226.118.49:

This IP address has been reported a total of 143 times from 119 distinct sources. 20.226.118.49 was first reported on June 15th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 NotACaptcha	2026-06-15 21:49:16 (2 minutes ago)	webserver:80 [16/Jun/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 491 ... show more webserver:80 [16/Jun/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 491 webserver:443 [16/Jun/2026] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5669 show less	Web App Attack
Anonymous	2026-06-15 21:37:29 (14 minutes ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇦 TechnoSolutions CL	2026-06-15 21:29:26 (22 minutes ago)	20.226.118.49 - - [15/Jun/2026:21:23:35 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.118.49 - - [15/Jun/2026:21:23:35 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 405 150 "-" "-" 20.226.118.49 - - [15/Jun/2026:21:29:25 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 405 150 "-" "-" 20.226.118.49 - - [15/Jun/2026:21:29:25 +0000] "GET /wp-admin/js/ HTTP/1.1" 405 150 "-" "-" 20.226.118.49 - - [15/Jun/2026:21:29:26 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 yvoictra	2026-06-15 21:27:38 (23 minutes ago)	20.226.118.49 - - [15/Jun/2026:23:26:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.118.49 - - [15/Jun/2026:23:26:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 104538 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:33 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 107312 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:34 +0200] "GET /jj.php HTTP/1.1" 404 107205 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:35 +0200] "GET /click.php HTTP/1.1" 404 107212 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:36 +0200] "GET /222.php HTTP/1.1" 404 107202 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:38 +0200] "GET /z60.php HTTP/1.1" 404 107210 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:39 +0200] "GET /xml.php HTTP/1.1" 404 107210 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:40 +0200] "GET /acp.php HTTP/1.1" 404 107210 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:42 +0200] "GET /wp-home.php HTTP/1.1" 404 107222 "-" "-" 20.226.118.49 - - [15/Jun/2026:23:26:43 +0200] "GET /t.php HTTP/1.1" 404 107200 "-" "-" 20.226.118.49 - - [15/Jun/2026:23: ... show less	Brute-Force Web App Attack
Anonymous	2026-06-15 21:26:40 (24 minutes ago)	vulnerabilities scan	Port Scan Hacking Web App Attack
🇩🇪 gamingkante.xyz	2026-06-15 21:25:27 (26 minutes ago)	[Mon Jun 15 23:25:24.778675 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] ... show more [Mon Jun 15 23:25:24.778675 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/a1.php' not found or unable to stat [Mon Jun 15 23:25:25.506336 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/bal.php' not found or unable to stat [Mon Jun 15 23:25:25.902331 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/gettest.php' not found or unable to stat [Mon Jun 15 23:25:26.500511 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/simple.php' not found or unable to stat [Mon Jun 15 23:25:26.698472 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/kj.php' not found or unable to stat [Mon Jun 15 23:25:26.897483 2026] [php:error] [pid 2509720:tid 2509720] [client 20.226.118.49:41937] script '/var/www/html/web/xxx.php' not found or unable to stat ... show less	Web App Attack
🇲🇹 neilcaruana	2026-06-15 21:24:51 (26 minutes ago)	Sentinel detected an attack on port [80]	Hacking
🇷🇴 INTEQ	2026-06-15 21:22:19 (29 minutes ago)	Web attack from 20.226.118.49	Web App Attack
Anonymous	2026-06-15 21:10:20 (41 minutes ago)	[Mon Jun 15 23:10:18.331318 2026] [proxy_fcgi:error] [pid 51597:tid 51679] [client 20.226.118.49:497 ... show more [Mon Jun 15 23:10:18.331318 2026] [proxy_fcgi:error] [pid 51597:tid 51679] [client 20.226.118.49:49736] AH01071: Got error 'Primary script unknown' [Mon Jun 15 23:10:19.243388 2026] [proxy_fcgi:error] [pid 51597:tid 51724] [client 20.226.118.49:49736] AH01071: Got error 'Primary script unknown' [Mon Jun 15 23:10:19.243388 2026] [proxy_fcgi:error] [pid 51597:tid 51724] [client 20.226.118.49:49736] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 gamingkante.xyz	2026-06-15 21:05:17 (46 minutes ago)	[Mon Jun 15 23:05:15.701654 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] ... show more [Mon Jun 15 23:05:15.701654 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/this_is_a_new_hello_world.php' not found or unable to stat [Mon Jun 15 23:05:15.902567 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/x.php' not found or unable to stat [Mon Jun 15 23:05:16.109741 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/wpconf.php' not found or unable to stat [Mon Jun 15 23:05:16.308236 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/aaf.php' not found or unable to stat [Mon Jun 15 23:05:16.504313 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/tw0.php' not found or unable to stat [Mon Jun 15 23:05:16.700350 2026] [php:error] [pid 2509769:tid 2509769] [client 20.226.118.49:41516] script '/var/www/html/web/htt.php' not found or unable t ... show less	Web App Attack
🇫🇷 Lunix	2026-06-15 21:05:11 (46 minutes ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 21:04:31 (46 minutes ago)	(mod_security) mod_security (id:210492) triggered by 20.226.118.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.226.118.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 17:04:24.244317 2026] [security2:error] [pid 7779:tid 7779] [client 20.226.118.49:63022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelgardner.com"] [uri "/consultantx/wp-config.php"] [unique_id "ajBo2DFg6ayxf27Mi2IHtQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 20:51:20 (1 hour ago)	20.226.118.49 - - [15/Jun/2026:23:51:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.118.49 - - [15/Jun/2026:23:51:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 722 "-" "-" ... show less	Web App Attack
🇨🇭 Cybercat	2026-06-15 20:43:28 (1 hour ago)	CrowdSec detection: phnag/http-empty-ua	Hacking
🇨🇭 ca	2026-06-15 20:24:29 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.185.227.77

🇺🇸 173.255.221.22

🇺🇸 162.217.162.250

🇹🇭 118.193.57.59

🇻🇳 113.161.222.150

🇰🇿 92.47.46.174

🇧🇷 45.5.102.93

🇨🇳 36.35.166.177

🇮🇳 182.95.230.142

🇳🇱 176.65.140.201

🇺🇸 173.255.243.63

🇺🇸 134.122.125.153

🇷🇺 84.47.160.26

🇬🇧 51.68.200.137

🇩🇪 45.131.108.251

🇨🇳 120.207.175.197

🇨🇳 111.31.165.144

🇧🇬 62.133.47.13

🇰🇷 34.50.18.202

🇮🇹 209.227.237.29