JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.249.33

20.226.249.33 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.249.33

Whois 20.226.249.33

IP Abuse Reports for 20.226.249.33:

This IP address has been reported a total of 197 times from 161 distinct sources. 20.226.249.33 was first reported on May 26th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 00:20:09 (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 mw	2026-05-27 00:00:58 (1 week ago)	GET /wp-admin/css/colors/blue/ HTTP/1.1	Web App Attack
🇮🇩 sockominfo	2026-05-27 00:00:11 (1 week ago)	Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKo ... show more Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇫🇮 Christopher Hughes	2026-05-26 23:50:38 (1 week ago)	[Wed May 27 00:50:35.831067 2026] [proxy_fcgi:error] [pid 60799:tid 139774794913344] [client 20.226. ... show more [Wed May 27 00:50:35.831067 2026] [proxy_fcgi:error] [pid 60799:tid 139774794913344] [client 20.226.249.33:43264] AH01071: Got error 'Primary script unknown' [Wed May 27 00:50:36.054963 2026] [proxy_fcgi:error] [pid 60799:tid 139774341936704] [client 20.226.249.33:43264] AH01071: Got error 'Primary script unknown' [Wed May 27 00:50:36.306001 2026] [proxy_fcgi:error] [pid 60799:tid 139775042401856] [client 20.226.249.33:43264] AH01071: Got error 'Primary script unknown' [Wed May 27 00:50:37.226728 2026] [proxy_fcgi:error] [pid 60799:tid 139774811698752] [client 20.226.249.33:43264] AH01071: Got error 'Primary script unknown' [Wed May 27 00:50:37.677337 2026] [proxy_fcgi:error] [pid 60799:tid 139775050794560] [client 20.226.249.33:43264] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇵🇱 itsvic.dev	2026-05-26 23:37:05 (1 week ago)	20.226.249.33 - - [26/May/2026:23:37:04 +0000] "GET /login?returnUrl=%2Fwp-content%2Fplugins%2Fhello ... show more 20.226.249.33 - - [26/May/2026:23:37:04 +0000] "GET /login?returnUrl=%2Fwp-content%2Fplugins%2Fhellopress%2Fwp_filemanager.php HTTP/1.1" 200 9670 "-" "-" 20.226.249.33 - - [26/May/2026:23:37:04 +0000] "GET /login?returnUrl=%2Faaa.php HTTP/1.1" 200 9670 "-" "-" 20.226.249.33 - - [26/May/2026:23:37:05 +0000] "GET /login?returnUrl=%2Fadmin.php HTTP/1.1" 200 9670 "-" "-" ... show less	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-05-26 23:30:23 (1 week ago)	[Wed May 27 00:30:21.576000 2026] [proxy_fcgi:error] [pid 60799:tid 139774308365888] [client 20.226. ... show more [Wed May 27 00:30:21.576000 2026] [proxy_fcgi:error] [pid 60799:tid 139774308365888] [client 20.226.249.33:37671] AH01071: Got error 'Primary script unknown' [Wed May 27 00:30:22.043483 2026] [proxy_fcgi:error] [pid 60799:tid 139775050794560] [client 20.226.249.33:37671] AH01071: Got error 'Primary script unknown' [Wed May 27 00:30:22.267072 2026] [proxy_fcgi:error] [pid 60799:tid 139773637277248] [client 20.226.249.33:37671] AH01071: Got error 'Primary script unknown' [Wed May 27 00:30:22.753293 2026] [proxy_fcgi:error] [pid 60799:tid 139774803306048] [client 20.226.249.33:37671] AH01071: Got error 'Primary script unknown' [Wed May 27 00:30:23.199435 2026] [proxy_fcgi:error] [pid 60799:tid 139775042401856] [client 20.226.249.33:37671] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇧🇷 Halux	2026-05-26 23:26:28 (1 week ago)	20.226.249.33 Probing protected path or service	Web App Attack
🇺🇸 gamabe	2026-05-26 23:25:02 (1 week ago)	Detected crowdsecurity/http-wordpress-scan attack pattern. Reported by CrowdSec IDS.	Web App Attack
Anonymous	2026-05-26 23:13:30 (1 week ago)	PSCSERV WPSCAN 20.226.249.33	Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-05-26 23:10:17 (1 week ago)	[Wed May 27 00:10:15.137468 2026] [proxy_fcgi:error] [pid 60800:tid 139774778127936] [client 20.226. ... show more [Wed May 27 00:10:15.137468 2026] [proxy_fcgi:error] [pid 60800:tid 139774778127936] [client 20.226.249.33:13082] AH01071: Got error 'Primary script unknown' [Wed May 27 00:10:15.367305 2026] [proxy_fcgi:error] [pid 60800:tid 139775050794560] [client 20.226.249.33:13082] AH01071: Got error 'Primary script unknown' [Wed May 27 00:10:15.872140 2026] [proxy_fcgi:error] [pid 60800:tid 139774786520640] [client 20.226.249.33:13082] AH01071: Got error 'Primary script unknown' [Wed May 27 00:10:16.130475 2026] [proxy_fcgi:error] [pid 60800:tid 139774316758592] [client 20.226.249.33:13082] AH01071: Got error 'Primary script unknown' [Wed May 27 00:10:17.147237 2026] [proxy_fcgi:error] [pid 60800:tid 139775034009152] [client 20.226.249.33:13082] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-26 23:00:45 (1 week ago)	20.226.249.33 - - [27/May/2026:02:00:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.249.33 - - [27/May/2026:02:00:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 727 "-" "-" ... show less	Web App Attack
🇩🇰 Leif Neland	2026-05-26 23:00:05 (1 week ago)	Detected by CrowdSec on slim	Brute-Force
🇩🇪 ardexter	2026-05-26 22:35:45 (1 week ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇩🇪 leryon	2026-05-26 22:30:11 (1 week ago)	IP: 20.226.249.33 sends in the last 24 hours 10 invalid requests over 80	Hacking Web Spam
🇩🇪 NewGastroline	2026-05-26 22:22:59 (1 week ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack

Showing 16 to 30 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.56

🇸🇬 172.70.189.62

🇻🇳 171.244.199.107

🇩🇪 167.94.145.17

🇩🇪 130.12.181.101

🇮🇩 103.26.188.26

🇺🇸 66.132.186.239

🇺🇸 18.204.210.134

🇺🇸 12.172.84.74

🇬🇧 193.163.125.154

🇹🇷 78.163.141.85

🇧🇪 34.77.202.172

🇺🇸 16.148.63.178

🇩🇪 217.250.207.159

🇺🇸 198.98.56.205

🇺🇸 198.46.199.45

🇺🇦 176.103.3.217

🇺🇸 172.203.234.251

🇺🇸 172.69.58.219

🇸🇬 162.158.108.79