JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.82.21

20.226.82.21 was found in our database!

This IP was reported 190 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.82.21

Whois 20.226.82.21

IP Abuse Reports for 20.226.82.21:

This IP address has been reported a total of 190 times from 116 distinct sources. 20.226.82.21 was first reported on July 1st 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 adaml1324	2026-07-03 06:15:40 (21 minutes ago)	Web application exploit probing From server logs: 2026-07-02 06:16:02 [domain] GET /wp-admin/ HTT ... show more Web application exploit probing From server logs: 2026-07-02 06:16:02 [domain] GET /wp-admin/ HTTP/1.1 [444 Blockerad] UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 2026-07-02 06:16:02 [domain] GET /wp-admin/ HTTP/1.1 [444 Blockerad] UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 2026-07-02 06:16:03 [domain] GET /wp-admin/ HTTP/1.1 [444 Blockerad] show less	Web App Attack
🇨🇭 4server	2026-07-03 06:07:08 (30 minutes ago)	[FriJul0308:07:02.7576242026][security2:error][pid757510:tid757743][client20.226.82.21:0]ModSecurity ... show more [FriJul0308:07:02.7576242026][security2:error][pid757510:tid757743][client20.226.82.21:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"528\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/wp-content/uploads/index.php\"][unique_id\"akdRhkSwlcU9liU_eVIixQAAARQ\"] show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-07-03 05:15:30 (1 hour ago)	182 attacks on PHP URLs: GET /php.php HTTP/1.1	Web App Attack
🇺🇸 deskpass.com	2026-07-03 04:42:18 (1 hour ago)	GET /p.php	Web App Attack
Anonymous	2026-07-03 04:34:37 (2 hours ago)	Aggressive web scan	Web App Attack
🇫🇷 solution.it	2026-07-03 04:15:43 (2 hours ago)	[Fri Jul 03 06:15:43.157456 2026] [php7:error] [pid 597087:tid 597087] [client 20.226.82.21:5228] sc ... show more [Fri Jul 03 06:15:43.157456 2026] [php7:error] [pid 597087:tid 597087] [client 20.226.82.21:5228] script '/var/www/html/blog.solution.it/inputs.php' not found or unable to stat show less	Web App Attack
🇩🇪 Viveronese	2026-07-03 03:25:27 (3 hours ago)	HTTP vulnerability scanning	Web App Attack
🇫🇮 Christopher Hughes	2026-07-03 02:57:49 (3 hours ago)	[Fri Jul 03 03:57:48.672937 2026] [proxy_fcgi:error] [pid 1423552:tid 139822767470144] [client 20.22 ... show more [Fri Jul 03 03:57:48.672937 2026] [proxy_fcgi:error] [pid 1423552:tid 139822767470144] [client 20.226.82.21:1882] AH01071: Got error 'Primary script unknown' [Fri Jul 03 03:57:48.884830 2026] [proxy_fcgi:error] [pid 1423552:tid 139822257665600] [client 20.226.82.21:1882] AH01071: Got error 'Primary script unknown' [Fri Jul 03 03:57:49.096657 2026] [proxy_fcgi:error] [pid 1423552:tid 139821183923776] [client 20.226.82.21:1882] AH01071: Got error 'Primary script unknown' [Fri Jul 03 03:57:49.307666 2026] [proxy_fcgi:error] [pid 1423552:tid 139822115055168] [client 20.226.82.21:1882] AH01071: Got error 'Primary script unknown' [Fri Jul 03 03:57:49.519542 2026] [proxy_fcgi:error] [pid 1423552:tid 139822073091648] [client 20.226.82.21:1882] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇹🇭 thaizone.com	2026-07-03 02:14:21 (4 hours ago)	Hacking attempts against websites (D1) #3	Web App Attack Hacking
🇩🇪 neckaralb-admin.de	2026-07-03 01:58:12 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇩 soc-yk	2026-07-03 01:54:11 (4 hours ago)	Type: web_scanning Risk: 100 Events: 1420 Evidence: - Automated hostile web probing detected - Repe ... show more Type: web_scanning Risk: 100 Events: 1420 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
Anonymous	2026-07-03 01:43:49 (4 hours ago)	wp admin page access attempt ...	Hacking Web App Attack
🇫🇷 HerrWolf	2026-07-03 01:30:05 (5 hours ago)	CrowdSec Detection: crowdsecurity/http-wordpress-scan	Port Scan
🇫🇮 JLKnoch.com	2026-07-03 01:29:48 (5 hours ago)	CrowdSec crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇩🇰 HostingGroup	2026-07-03 01:21:53 (5 hours ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 4. First blocked: 2026-07-03. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.149

🇮🇩 180.247.63.92

🇺🇸 162.216.150.181

🇦🇴 154.116.254.157

🇬🇧 87.236.176.219

🇳🇴 85.19.195.12

🇺🇸 66.228.41.19

🇺🇸 47.157.243.169

🇭🇰 47.83.215.78

🇩🇪 46.225.18.6

🇬🇧 35.203.210.231

🇺🇸 13.89.125.23

🇺🇸 198.188.2.26

🇺🇸 152.32.149.118

🇸🇬 151.246.98.15

🇺🇸 134.122.125.153

🇰🇿 91.201.216.61

🇫🇷 86.194.254.17

🇱🇹 62.60.130.219

🇺🇸 54.235.131.61