JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.81.217

20.226.81.217 was found in our database!

This IP was reported 412 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.81.217

Whois 20.226.81.217

IP Abuse Reports for 20.226.81.217:

This IP address has been reported a total of 412 times from 319 distinct sources. 20.226.81.217 was first reported on May 16th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ano_Nym	2026-05-17 03:16:53 (2 weeks ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-admin-interface-probing	Web App Attack
🇺🇸 Mundo Bueno	2026-05-17 03:16:24 (2 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: BR \| UA:	Hacking Web App Attack
🇹🇭 thaizone.com	2026-05-17 03:15:12 (2 weeks ago)	Brute Force Attack on a Web Resources (repeated 404) #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇳🇱 devsecops.cv	2026-05-17 03:11:22 (2 weeks ago)	20.226.81.217 - - [17/May/2026:03:11:20 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 404 440 "-" ... show more 20.226.81.217 - - [17/May/2026:03:11:20 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 404 440 "-" "-" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2026-05-17 03:11:07 (2 weeks ago)	[Sat May 16 22:11:03.598692 2026] [proxy_fcgi:error] [pid 3959675:tid 3959675] [client 20.226.81.217 ... show more [Sat May 16 22:11:03.598692 2026] [proxy_fcgi:error] [pid 3959675:tid 3959675] [client 20.226.81.217:1553] AH01071: Got error 'Primary script unknown' [Sat May 16 22:11:03.710433 2026] [proxy_fcgi:error] [pid 3959675:tid 3959675] [client 20.226.81.217:1553] AH01071: Got error 'Primary script unknown' [Sat May 16 22:11:03.934448 2026] [proxy_fcgi:error] [pid 3959675:tid 3959675] [client 20.226.81.217:1553] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇪🇸 antivoid.xyz	2026-05-17 03:08:23 (2 weeks ago)		Brute-Force Web App Attack
🇦🇹 Pingger Shikkoken	2026-05-17 03:08:23 (2 weeks ago)	2026-05-17T03:08:23+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-17T03:08:23+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.226.81.217 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=35553 DF PROTO=TCP SPT=40674 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-17T03:08:24+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.226.81.217 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=35554 DF PROTO=TCP SPT=40674 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-17T03:08:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=20.226.81.217 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=35555 DF PROTO=TCP SPT=40674 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇧🇷 vfAcceloReporter	2026-05-17 03:06:25 (2 weeks ago)	20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /admin.php HTTP/1.1" 404 153 "-" "-" 20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /goods.php HTTP/1.1" 404 153 "-" "-" 20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /public/css.php HTTP/1.1" 404 153 "-" "-" 20.226.81.217 - - [17/May/2026:00:06:22 -0300] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇩🇪 itsolon	2026-05-17 03:02:21 (2 weeks ago)	[17/May/2026:05:02:16 +0200] 177898693632.903253 20.226.81.217 21350 217.154.7.177 443 [17/May/2026: ... show more [17/May/2026:05:02:16 +0200] 177898693632.903253 20.226.81.217 21350 217.154.7.177 443 [17/May/2026:05:02:17 +0200] 177898693779.865993 20.226.81.217 21338 217.154.7.177 80 [17/May/2026:05:02:17 +0200] 177898693773.717167 20.226.81.217 21350 217.154.7.177 443 [17/May/2026:05:02:19 +0200] 177898693990.542007 20.226.81.217 21338 217.154.7.177 80 [17/May/2026:05:02:19 +0200] 177898693986.714029 20.226.81.217 21350 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇦🇺 Lazarus	2026-05-17 03:00:28 (2 weeks ago)	HTTP probe.	Web App Attack
🇫🇮 NoaQT	2026-05-17 02:56:36 (2 weeks ago)	2026-05-17T02:56:36.060065+00:00 ingress-1 haproxy[8151]: 20.226.81.217:40684 [17/May/2026:02:56:36. ... show more 2026-05-17T02:56:36.060065+00:00 ingress-1 haproxy[8151]: 20.226.81.217:40684 [17/May/2026:02:56:36.059] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 26/26/0/0/0 0/0 "GET /adminfuns.php HTTP/1.1" 2026-05-17T02:56:36.275252+00:00 ingress-1 haproxy[8151]: 20.226.81.217:40684 [17/May/2026:02:56:36.274] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 26/26/0/0/0 0/0 "GET /wp-admin/css/ HTTP/1.1" 2026-05-17T02:56:36.490698+00:00 ingress-1 haproxy[8151]: 20.226.81.217:40684 [17/May/2026:02:56:36.490] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 26/26/0/0/0 0/0 "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" ... show less	DDoS Attack
🇬🇧 Apache	2026-05-17 02:54:25 (2 weeks ago)	(mod_security) mod_security (id:20000010) triggered by 20.226.81.217 (BR/Brazil/-): 5 in the last 30 ... show more (mod_security) mod_security (id:20000010) triggered by 20.226.81.217 (BR/Brazil/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇳🇱 CryptoYakari	2026-05-17 02:47:50 (2 weeks ago)	[Sun May 17 05:47:46.358009 2026] [proxy_fcgi:error] [pid 3446678:tid 3446704] [client 20.226.81.217 ... show more [Sun May 17 05:47:46.358009 2026] [proxy_fcgi:error] [pid 3446678:tid 3446704] [client 20.226.81.217:0] AH01071: Got error 'Primary script unknown' [Sun May 17 05:47:46.542152 2026] [proxy_fcgi:error] [pid 3446679:tid 3446722] [client 20.226.81.217:0] AH01071: Got error 'Primary script unknown' [Sun May 17 05:47:46.908380 2026] [proxy_fcgi:error] [pid 3446679:tid 3446734] [client 20.226.81.217:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇩🇪 Phenix Info	2026-05-17 02:42:55 (2 weeks ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇩🇪 [email protected]	2026-05-17 02:41:12 (2 weeks ago)	Brute force 77 attempts	DDoS Attack SQL Injection Brute-Force SSH

Showing 136 to 150 of 412 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.134

🇩🇪 167.94.145.27

🇩🇪 139.19.117.130

🇧🇷 138.94.69.30

🇺🇸 66.132.172.245

🇨🇳 61.53.72.75

🇩🇪 46.202.156.21

🇳🇱 45.156.87.254

🇺🇸 44.126.182.225

🇲🇼 41.75.114.30

🇺🇸 192.252.215.125

🇲🇽 186.96.145.241

🇳🇱 178.16.54.22

🇫🇮 147.185.133.255

🇺🇸 64.62.156.93

🇰🇷 59.24.133.197

🇺🇸 44.177.122.234

🇨🇳 42.122.152.26

🇧🇷 37.148.134.123

🇺🇸 35.223.121.113