JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.85.77

20.226.85.77 was found in our database!

This IP was reported 571 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.85.77

Whois 20.226.85.77

IP Abuse Reports for 20.226.85.77:

This IP address has been reported a total of 571 times from 411 distinct sources. 20.226.85.77 was first reported on June 30th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-07-01 19:44:28 (3 minutes ago)	[Wed Jul 01 20:34:21.189522 2026] [proxy_fcgi:error] [pid 1378298:tid 139821158745664] [client 20.22 ... show more [Wed Jul 01 20:34:21.189522 2026] [proxy_fcgi:error] [pid 1378298:tid 139821158745664] [client 20.226.85.77:45535] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:34:21.419434 2026] [proxy_fcgi:error] [pid 1378298:tid 139822767470144] [client 20.226.85.77:45535] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:44:27.537693 2026] [proxy_fcgi:error] [pid 1378298:tid 139821695616576] [client 20.226.85.77:45508] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:44:27.755984 2026] [proxy_fcgi:error] [pid 1378298:tid 139822224094784] [client 20.226.85.77:45508] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:44:28.192102 2026] [proxy_fcgi:error] [pid 1378298:tid 139821720794688] [client 20.226.85.77:45508] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 pscriptos	2026-07-01 19:36:47 (10 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇷🇴 SpamStopper	2026-07-01 19:30:03 (17 minutes ago)	Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers	Hacking Brute-Force Bad Web Bot Web App Attack
🇸🇬 ipidentify	2026-07-01 19:26:20 (21 minutes ago)	2026-07-01T19:26:20Z GET /wp-admin/includes/admin.php 2026-07-01T19:26:34Z GET /wp-admin/doc.php	Web App Attack
🇫🇮 Christopher Hughes	2026-07-01 19:24:14 (23 minutes ago)	[Wed Jul 01 20:24:13.141963 2026] [proxy_fcgi:error] [pid 1378298:tid 139822742292032] [client 20.22 ... show more [Wed Jul 01 20:24:13.141963 2026] [proxy_fcgi:error] [pid 1378298:tid 139822742292032] [client 20.226.85.77:45455] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:24:13.367272 2026] [proxy_fcgi:error] [pid 1378298:tid 139822750684736] [client 20.226.85.77:45455] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:24:13.599149 2026] [proxy_fcgi:error] [pid 1378298:tid 139821695616576] [client 20.226.85.77:45455] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:24:13.839308 2026] [proxy_fcgi:error] [pid 1378298:tid 139822249272896] [client 20.226.85.77:45455] AH01071: Got error 'Primary script unknown' [Wed Jul 01 20:24:14.057103 2026] [proxy_fcgi:error] [pid 1378298:tid 139822775862848] [client 20.226.85.77:45455] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇨🇿 ddw	2026-07-01 19:11:11 (36 minutes ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇫🇷 mouafiq	2026-07-01 19:06:40 (41 minutes ago)	2026-07-01 19:06:37,091 20460 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:37] "GET /wp-cont ... show more 2026-07-01 19:06:37,091 20460 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:37] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 - 1 0.002 0.012 2026-07-01 19:06:37,538 20460 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:37] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 - 1 0.002 0.005 2026-07-01 19:06:37,990 20460 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:37] "GET /min.php HTTP/1.0" 404 - 1 0.002 0.004 2026-07-01 19:06:39,980 24154 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:39] "GET /p-blog.php HTTP/1.0" 404 - 1 0.003 0.009 2026-07-01 19:06:40,425 20460 INFO ? werkzeug: 20.226.85.77 - - [01/Jul/2026 19:06:40] "GET /file3.php HTTP/1.0" 404 - 1 0.003 0.006 show less	Brute-Force SSH
🇫🇷 ACE-INFORMATIQUE.NC	2026-07-01 19:00:06 (47 minutes ago)	Bad Web Bot + Web App Attack blocked by Fail2ban	Bad Web Bot Web App Attack
🇬🇧 elleray	2026-07-01 18:50:03 (57 minutes ago)	Apache noscript intrusion Banned by Fail2Ban	Brute-Force Web App Attack Hacking
🇩🇪 Enno	2026-07-01 18:46:55 (1 hour ago)	P04::Fail2Ban: automated bot scanning / credential probing detected.	Web App Attack Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-01 18:34:59 (1 hour ago)	20.226.85.77 - - [01/Jul/2026:19:34:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.226.85.77 - - [01/Jul/2026:19:34:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.226.85.77 - - [01/Jul/2026:19:34:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 4984 "-" "-" 20.226.85.77 - - [01/Jul/2026:19:34:50 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 Rip	2026-07-01 18:26:43 (1 hour ago)	Unauthorized access attempts across vhosts probing for web-shells and backdoors.	Web App Attack
🇧🇬 HighWay	2026-07-01 18:18:29 (1 hour ago)	20.226.85.77 - - [01/Jul/2026:18:18:25 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.226.85.77 - - [01/Jul/2026:18:18:25 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 67140 "-" "-" 20.226.85.77 - - [01/Jul/2026:18:18:27 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 64163 "-" "-" 20.226.85.77 - - [01/Jul/2026:18:18:27 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 64163 "-" "-" 20.226.85.77 - - [01/Jul/2026:18:18:28 +0000] "GET /min.php HTTP/1.1" 404 60327 "-" "-" ... show less	Port Scan Bad Web Bot
🇺🇸 Charlesiv	2026-07-01 18:02:08 (1 hour ago)	Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from BR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /sql.php Timestamp: 2026-07-01T17:06:10Z Ray ID: a146ffef5ec7635c UA: Empty string show less	Bad Web Bot
🇩🇪 roki.ovh	2026-07-01 17:57:56 (1 hour ago)	[Wed Jul 01 19:57:50.697284 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/ ... show more [Wed Jul 01 19:57:50.697284 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 01 19:57:50.914703 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/min.php' not found or unable to stat [Wed Jul 01 19:57:51.155709 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/xozx.php' not found or unable to stat [Wed Jul 01 19:57:51.392003 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/p-blog.php' not found or unable to stat [Wed Jul 01 19:57:51.613190 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/file3.php' not found or unable to stat [Wed Jul 01 19:57:51.900536 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/mmrp.php' not found or unable to stat [Wed Jul 01 19:57:52.152859 2026] [:error] [pid 20857] [client 20.226.85.77:46736] script '/var/www/html/harvestry.php' ... show less	Hacking Web App Attack

Showing 1 to 15 of 571 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.163.198.83

🇻🇳 171.231.197.6

🇫🇷 167.86.87.193

🇺🇸 147.185.132.64

🇮🇳 103.205.142.244

🇱🇹 45.227.254.170

🇷🇴 2.57.122.168

🇲🇽 187.189.215.143

🇧🇷 177.40.206.54

🇺🇸 162.0.226.2

🇨🇳 115.204.159.126

🇮🇳 106.219.156.130

🇰🇼 78.89.154.59

🇺🇸 66.132.172.203

🇮🇳 66.116.205.19

🇺🇸 64.83.70.58

🇳🇱 45.156.128.56

🇮🇩 157.10.182.14

🇱🇹 81.30.98.144

🇳🇱 45.156.128.58