JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.2.52

20.226.2.52 was found in our database!

This IP was reported 238 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.2.52

Whois 20.226.2.52

IP Abuse Reports for 20.226.2.52:

This IP address has been reported a total of 238 times from 192 distinct sources. 20.226.2.52 was first reported on May 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 deskpass.com	2026-05-27 21:13:17 (1 week ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-27 21:07:30 (1 week ago)	20.226.2.52 - - [28/May/2026:00:07:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.226.2.52 - - [28/May/2026:00:07:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 710 "-" "-" ... show less	Web App Attack
🇮🇩 sockominfo	2026-05-27 21:00:47 (1 week ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇩🇪 patrisei	2026-05-27 20:55:42 (1 week ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-wordpress-sca ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-wordpress-scan show less	Port Scan Web App Attack
🇫🇷 AGEPCom	2026-05-27 20:37:18 (1 week ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇮🇪 Jim Keir	2026-05-27 20:23:37 (1 week ago)	2026-05-27 20:23:36 20.226.2.52 File scanning, blocking 20.226.2.52 for 5 minutes	Web App Attack
🇩🇪 pltcldvlpr	2026-05-27 20:19:47 (1 week ago)	CMS/framework probe: 20.226.2.52 - - [27/May/2026:22:19:46 +0200] "GET /wp-content/plugins/hellopres ... show more CMS/framework probe: 20.226.2.52 - - [27/May/2026:22:19:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" asn=8075 org="Microsoft Corporation" country=BR ... show less	Web App Attack
🇫🇷 LRNP	2026-05-27 20:19:19 (1 week ago)	_:80 20.226.2.52 - - [27/May/2026:20:19:16 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 146 ... show more _:80 20.226.2.52 - - [27/May/2026:20:19:16 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:17 +0000] "GET /new4.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:17 +0000] "GET /images/images/about.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:17 +0000] "GET /defaults.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:17 +0000] "GET /wp-file.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:18 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:18 +0000] "GET /403.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:18 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:18 +0000] "GET /404.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:20:19:18 +0000] "GET /wp-2019.php HTTP/1.1" 404 146 "-" "-" ... show less	Bad Web Bot Web App Attack
🇨🇦 Roper123	2026-05-27 20:17:06 (1 week ago)	Web exploits	Hacking Web App Attack
🇧🇪 Saec	2026-05-27 20:15:05 (1 week ago)	Cloudflare WAF blocked 38 requests in 1h from BR. Top paths probed: /, /sitemap.xml.gz, /wp-admin/cs ... show more Cloudflare WAF blocked 38 requests in 1h from BR. Top paths probed: /, /sitemap.xml.gz, /wp-admin/css/admin.php. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor. show less	Brute-Force Web App Attack
🇺🇸 gamabe	2026-05-27 20:07:26 (1 week ago)	Detected crowdsecurity/http-wordpress-scan attack pattern. Reported by CrowdSec IDS.	Web App Attack
🇩🇪 BlueWire Hosting	2026-05-27 20:04:40 (1 week ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇫🇷 LRNP	2026-05-27 19:59:07 (1 week ago)	_:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager ... show more _:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /aaa.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:04 +0000] "GET /aa.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:05 +0000] "GET /server.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:05 +0000] "GET /wp-includes/index.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:05 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:05 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 146 "-" "-" _:80 20.226.2.52 - - [27/May/2026:19:59:07 +0000] "GET /f.php HTTP ... show less	Bad Web Bot Web App Attack
🇺🇸 Vianpyro	2026-05-27 19:58:08 (1 week ago)	Honeypot: 273 request(s) in 0 min. Paths: /wp-content/plugins/hellopress/wp_filemanager.php, /aaa.ph ... show more Honeypot: 273 request(s) in 0 min. Paths: /wp-content/plugins/hellopress/wp_filemanager.php, /aaa.php, /admin.php, /wp-includes/Text/Diff/index.php, /aa.php. Method(s): GET. ASN: 8075 (Microsoft Corporation). URL-encoding WAF evasion detected. show less	Web App Attack Bad Web Bot Brute-Force Hacking
Anonymous	2026-05-27 19:54:06 (1 week ago)	(PERMBLOCK) 20.226.2.52 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Ports: ... show more (PERMBLOCK) 20.226.2.52 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan

Showing 46 to 60 of 238 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 151.237.79.243

🇺🇸 147.185.132.73

🇨🇳 111.225.148.170

🇺🇸 74.115.172.118

🇨🇳 14.103.127.2

🇺🇸 2607:f8b0:4004:c23::12e

🇲🇦 196.92.7.246

🇫🇷 185.177.72.13

🇮🇩 182.253.156.173

🇦🇷 181.116.220.140

🇨🇳 117.72.64.105

🇮🇩 114.10.47.235

🇨🇳 111.225.149.221

🇨🇳 111.225.149.88

🇨🇳 111.225.149.54

🇩🇪 69.5.169.235

🇺🇸 63.42.245.167

🇺🇸 35.148.173.29

🇺🇾 186.54.211.17

🇺🇸 185.149.26.71