JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.83.28

20.226.83.28 was found in our database!

This IP was reported 441 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.83.28

Whois 20.226.83.28

IP Abuse Reports for 20.226.83.28:

This IP address has been reported a total of 441 times from 356 distinct sources. 20.226.83.28 was first reported on August 29th 2023, and the most recent report was 51 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hchristo	2026-07-23 19:56:43 (51 seconds ago)	[Thu Jul 23 21:56:41.791685 2026] [proxy_fcgi:error] [pid 26729:tid 26817] [client 20.226.83.28:4707 ... show more [Thu Jul 23 21:56:41.791685 2026] [proxy_fcgi:error] [pid 26729:tid 26817] [client 20.226.83.28:47078] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:56:42.187114 2026] [proxy_fcgi:error] [pid 26729:tid 26789] [client 20.226.83.28:47078] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:56:42.582862 2026] [proxy_fcgi:error] [pid 26729:tid 26788] [client 20.226.83.28:47078] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:56:42.978553 2026] [proxy_fcgi:error] [pid 26729:tid 26794] [client 20.226.83.28:47078] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:56:43.374287 2026] [proxy_fcgi:error] [pid 26729:tid 26815] [client 20.226.83.28:47078] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-23 19:46:28 (11 minutes ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/uploads	Web App Attack
🇫🇮 6kilowatti	2026-07-23 19:44:12 (13 minutes ago)	20.226.83.28 - [23/Jul/2026:22:44:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php H ... show more 20.226.83.28 - [23/Jul/2026:22:44:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 14336 "-" "-" ... show less	Web App Attack
🇫🇷 Feelautom	2026-07-23 19:40:24 (17 minutes ago)	[FeelAutom Auto-Ban] SuspiciousExtension: /dZ3wP5.php (Score: 200)	Port Scan
🇩🇪 BiancaNL	2026-07-23 19:35:50 (21 minutes ago)	Fail2Ban: jail=nginx-exploit-probes on <fqdn> (port=<port>)	Hacking
🇩🇪 www.mammazone.it	2026-07-23 19:33:16 (24 minutes ago)	[Thu Jul 23 21:33:15.573097 2026] [proxy_fcgi:error] [pid 1639299] [client 20.226.83.28:9680] AH0107 ... show more [Thu Jul 23 21:33:15.573097 2026] [proxy_fcgi:error] [pid 1639299] [client 20.226.83.28:9680] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:33:15.983925 2026] [proxy_fcgi:error] [pid 1639299] [client 20.226.83.28:9680] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 simsung	2026-07-23 19:23:20 (34 minutes ago)	20.226.83.28 - - [23/Jul/2026:19:23:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.226.83.28 - - [23/Jul/2026:19:23:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.226.83.28 - - [23/Jul/2026:19:23:18 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 20.226.83.28 - - [23/Jul/2026:19:23:19 +0000] "GET /x.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇺🇸 slay3r9903	2026-07-23 19:22:09 (35 minutes ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇩🇪 David Ferneding	2026-07-23 19:22:07 (35 minutes ago)	Blocked by UFW (TCP on 80) Source port: 22413 TTL: 115 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 22413 TTL: 115 Packet length: 52 TOS: 0x00 This report (for 20.226.83.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇮🇪 AutosOnShow	2026-07-23 19:21:05 (36 minutes ago)	blocked for webapp attack \| path requested: /file1221.php \| seen at 2026-07-23 19:20:54.960 \|	Web App Attack
🇩🇪 KiekerJan	2026-07-23 19:14:47 (42 minutes ago)	20.226.83.28 - - [23/Jul/2026:21:14:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.226.83.28 - - [23/Jul/2026:21:14:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.226.83.28 - - [23/Jul/2026:21:14:46 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇫🇷 Jimbo67	2026-07-23 19:13:48 (43 minutes ago)	Cloudflare WAF: 3 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329 ... show more Cloudflare WAF: 3 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329c9d804134f3e89780d69bfd872dc \| URIs=//a.php,/aaa.php,/users.php \| confidence=0.82 show less	Bad Web Bot
🇫🇮 Christopher Hughes	2026-07-23 19:13:36 (43 minutes ago)	[Thu Jul 23 20:13:34.978571 2026] [proxy_fcgi:error] [pid 2127877:tid 139825445320256] [client 20.22 ... show more [Thu Jul 23 20:13:34.978571 2026] [proxy_fcgi:error] [pid 2127877:tid 139825445320256] [client 20.226.83.28:10459] AH01071: Got error 'Primary script unknown' [Thu Jul 23 20:13:35.401670 2026] [proxy_fcgi:error] [pid 2127877:tid 139825327887936] [client 20.226.83.28:10459] AH01071: Got error 'Primary script unknown' [Thu Jul 23 20:13:35.825203 2026] [proxy_fcgi:error] [pid 2127877:tid 139825478891072] [client 20.226.83.28:10459] AH01071: Got error 'Primary script unknown' [Thu Jul 23 20:13:36.252325 2026] [proxy_fcgi:error] [pid 2127877:tid 139825336280640] [client 20.226.83.28:10459] AH01071: Got error 'Primary script unknown' [Thu Jul 23 20:13:36.678254 2026] [proxy_fcgi:error] [pid 2127877:tid 139825453712960] [client 20.226.83.28:10459] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇹🇼 tye	2026-07-23 19:11:56 (45 minutes ago)	Wazuh Alert Evidence: 20.226.83.28 (20.226.83.28) - - [24/Jul/2026:03:11:55 +0800] "GET /media.php H ... show more Wazuh Alert Evidence: 20.226.83.28 (20.226.83.28) - - [24/Jul/2026:03:11:55 +0800] "GET /media.php HTTP/1.1" 404 437 "-" "-" show less	Web App Attack
🇫🇮 Daniel Baer	2026-07-23 19:10:02 (47 minutes ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 1634 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 1634 events: 11 created_at: 2026-07-23T19:08:20Z message: Ip 20.226.83.28 performed 'crowdsecurity/http-probing' (11 events over 4.217325324s) at 2026-07-23 19:08:20.104700739 +0000 UTC target_uri: ["/this_is_a_new_hello_world.php","/x.php","/mgrr.php","/stdin.php","/BDKR28.php","/001.php","/dZ3wP5.php","/yup.php","/X.php","/1polka.php","/gec.php"] method: ["GET"] status: ["404"] user_agent: ["-"] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 441 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.90

🇹🇼 198.235.24.66

🇦🇷 190.120.188.39

🇸🇦 188.53.170.149

🇭🇰 172.253.6.24

🇺🇸 162.216.149.250

🇺🇸 136.144.33.49

🇭🇰 43.132.150.89

🇬🇧 8.208.44.152

🇷🇴 193.46.255.86

🇮🇹 151.79.204.117

🇺🇸 136.144.33.47

🇺🇸 136.144.33.44

🇺🇸 136.144.33.43

🇧🇷 131.221.14.251

🇨🇳 113.240.110.90

🇲🇲 103.59.163.134

🇷🇴 89.32.41.21

🇫🇷 85.25.172.140

🇲🇽 69.6.207.207