JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.3.20

20.226.3.20 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.3.20

Whois 20.226.3.20

IP Abuse Reports for 20.226.3.20:

This IP address has been reported a total of 170 times from 129 distinct sources. 20.226.3.20 was first reported on July 27th 2022, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 AGEPCom	2026-06-22 22:10:12 (9 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇺🇸 Lee Daniel	2026-06-22 22:03:18 (16 minutes ago)	20.226.3.20 - - [22/Jun/2026:18:03:17 -0400] "GET /rip.php HTTP/1.1" 404 39069 "-" "Mozilla/5.0 (Win ... show more 20.226.3.20 - - [22/Jun/2026:18:03:17 -0400] "GET /rip.php HTTP/1.1" 404 39069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:18:03:17 -0400] "GET /admin.php HTTP/1.1" 404 39071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:18:03:17 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 404 39090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:18:03:18 -0400] "GET /cache.php HTTP/1.1" 404 39071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:18:03:18 -0400] "GET /themes.php HTTP/1.1" 404 39067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 macrob	2026-06-22 21:48:15 (31 minutes ago)	2026/06/22 21:48:11 [error] 3523262#3523262: 323686201 access forbidden by rule, client: 20.226.3.2 ... show more 2026/06/22 21:48:11 [error] 3523262#3523262: 323686201 access forbidden by rule, client: 20.226.3.20, server: binixo.lk, request: "GET /admin.php HTTP/2.0", host: "binixo.lk" 2026/06/22 21:48:12 [error] 3523262#3523262: 323686211 access forbidden by rule, client: 20.226.3.20, server: binixo.lk, request: "GET /wp-content/uploads/index.php HTTP/2.0", host: "binixo.lk" 2026/06/22 21:48:13 [error] 3523264#3523264: 323686247 access forbidden by rule, client: 20.226.3.20, server: binixo.lk, request: "GET /wp-admin/user.php HTTP/2.0", host: "binixo.lk" ... show less	Web App Attack
🇭🇺 IloGus	2026-06-22 21:43:21 (36 minutes ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/css/colors/ect ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/css/colors/ectoplasm/ via rule: /wp-admin show less	Web App Attack Brute-Force Port Scan
🇫🇷 tecnoacquisti.com	2026-06-22 20:21:43 (1 hour ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
🇲🇾 Rizzy	2026-06-22 20:18:11 (2 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 deskpass.com	2026-06-22 20:16:22 (2 hours ago)	GET /wp-content/themes/index.php	Web App Attack
Anonymous	2026-06-22 19:59:59 (2 hours ago)	Aggressive web scan	Web App Attack
🇫🇮 albionfreemarket.com	2026-06-22 19:59:04 (2 hours ago)	20.226.3.20 - - [22/Jun/2026:19:59:02 +0000] "GET /inputs.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Wi ... show more 20.226.3.20 - - [22/Jun/2026:19:59:02 +0000] "GET /inputs.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 0.000 "-" "BR" 20.226.3.20 - - [22/Jun/2026:19:59:02 +0000] "GET /ioxi-o.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 0.000 "-" "BR" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-22 19:41:43 (2 hours ago)	20.226.3.20 - - [22/Jun/2026:21:37:47 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 (W ... show more 20.226.3.20 - - [22/Jun/2026:21:37:47 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:21:37:48 +0200] "GET /ioxi-o.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:21:37:48 +0200] "GET /function/function.php HTTP/1.1" 404 573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:21:37:48 +0200] "GET /rip.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.3.20 - - [22/Jun/2026:21:37:49 +0200] "GET /admin.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 ... show less	DDoS Attack
🇩🇪 raph	2026-06-22 19:33:29 (2 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇳🇴 doofy	2026-06-22 19:31:38 (2 hours ago)	[Mon Jun 22 21:31:24.302936 2026] [access_compat:error] [pid 2605104:tid 2605170] [client 20.226.3.2 ... show more [Mon Jun 22 21:31:24.302936 2026] [access_compat:error] [pid 2605104:tid 2605170] [client 20.226.3.20:2796] AH01797: client denied by server configuration: /www/famjohnsen.no/wp-content/uploads/index.php [Mon Jun 22 21:31:37.491418 2026] [access_compat:error] [pid 2605104:tid 2605189] [client 20.226.3.20:2796] AH01797: client denied by server configuration: /www/famjohnsen.no/wp-content/uploads/index.php [Mon Jun 22 21:31:37.491418 2026] [access_compat:error] [pid 2605104:tid 2605189] [client 20.226.3.20:2796] AH01797: client denied by server configuration: /www/famjohnsen.no/wp-content/uploads/index.php [Mon Jun 22 21:31:37.702180 2026] [access_compat:error] [pid 2605104:tid 2605171] [client 20.226.3.20:2796] AH01797: client denied by server configuration: /www/famjohnsen.no/wp-content/themes/admin.php ... show less	Brute-Force Web App Attack
🇹🇭 thaizone.com	2026-06-22 19:27:01 (2 hours ago)	Hacking attempts against websites (D1) #3	Web App Attack Hacking
🇱🇻 garmtech.com	2026-06-22 19:21:09 (2 hours ago)	Attempted access to sensitive endpoint (/wp-content/uploads/index.php) detected. Automated scan or u ... show more Attempted access to sensitive endpoint (/wp-content/uploads/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇬🇧 consul.to	2026-06-22 19:18:09 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.42

🇧🇬 79.124.49.174

🇬🇧 35.203.211.216

🇺🇸 208.84.100.152

🇩🇪 167.94.146.55

🇺🇸 162.216.149.174

🇮🇩 103.102.152.72

🇻🇳 103.63.108.25

🇫🇷 82.64.200.144

🇳🇱 46.151.178.13

🇳🇱 45.156.87.253

🇳🇱 45.148.10.157

🇳🇱 192.42.116.48

🇨🇳 111.162.149.225

🇵🇱 109.196.81.9

🇵🇱 83.168.95.29

🇧🇬 45.150.111.52

🇨🇳 223.109.255.154

🇳🇱 172.94.9.74

🇺🇸 66.132.186.249