JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.112.14

20.226.112.14 was found in our database!

This IP was reported 1,665 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.226.112.14

Whois 20.226.112.14

IP Abuse Reports for 20.226.112.14:

This IP address has been reported a total of 1,665 times from 662 distinct sources. 20.226.112.14 was first reported on July 25th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-08-22 03:15:23 (4 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.226.112.14 172.69.138.190 - - [19/Aug/2026:17:04 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.226.112.14 172.69.138.190 - - [19/Aug/2026:17:04:26 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇹🇷 oalver	2026-08-22 03:11:36 (4 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_rate_flood ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_rate_flood, nginx_404_flood, nginx_path_signature. Sources: nginx. Details: 404_flood: 10 requests to /wto.php (HTTP 404) within 60s; path_signature: request to /shell.php (HTTP 301); path_signature: request to /shell.php (HTTP 404). First seen: 2026-08-14. Risk score: 100/100. show less	Web App Attack
🇩🇪 SiyCah	2026-08-22 03:00:03 (4 hours ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
Anonymous	2026-08-22 02:04:49 (5 hours ago)	Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: probe_path. Example re ... show more Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: probe_path. Example request: /wp-admin/includes/install.php on cyber-copy.com show less	Web App Attack Bad Web Bot
🇹🇷 eryilmaz	2026-08-22 02:00:19 (5 hours ago)	Automated attack blocked by eryilmaz WAF/fail2ban: 4 event(s) [waf.autoban,waf.block] in the last 1 ... show more Automated attack blocked by eryilmaz WAF/fail2ban: 4 event(s) [waf.autoban,waf.block] in the last 1 days, e.g. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack Hacking
🇩🇪 Philister11	2026-08-22 01:20:10 (6 hours ago)	CrowdSec: crowdsecurity/http-wordpress-scan (BR/AS8075)	Web App Attack
🇪🇸 librebit	2026-08-22 01:07:54 (6 hours ago)	Brute force	Brute-Force
🇬🇧 andypiper	2026-08-22 01:00:31 (6 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 mravb	2026-08-22 01:00:27 (6 hours ago)	20.226.112.14 - - [22/Aug/2026:04:00:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.112.14 - - [22/Aug/2026:04:00:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack Hacking
🇫🇷 largo-it.net	2026-08-22 00:51:55 (6 hours ago)	Aug 22 02:51:45 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40262 [22/Aug/2026:02:51:45.522] www_fr ... show more Aug 22 02:51:45 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40262 [22/Aug/2026:02:51:45.522] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/295/306 404 3151 - - ---- 59/11/1/1/0 0/0 "GET /wp-content/file.php HTTP/1.1" Aug 22 02:51:46 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40262 [22/Aug/2026:02:51:46.244] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/294/305 404 3151 - - ---- 59/11/0/0/0 0/0 "GET /buy.php HTTP/1.1" Aug 22 02:51:48 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40262 [22/Aug/2026:02:51:47.861] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/319/330 404 3151 - - ---- 58/10/0/0/0 0/0 "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" Aug 22 02:51:51 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40262 [22/Aug/2026:02:51:50.688] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/328/339 404 3151 - - ---- 58/10/0/0/0 0/0 "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" Aug 22 02:51:51 vps-9f3cdc33 haproxy[3127394]: ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 largo-it.net	2026-08-22 00:31:24 (7 hours ago)	Aug 22 02:31:14 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40276 [22/Aug/2026:02:31:14.571] www_fr ... show more Aug 22 02:31:14 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40276 [22/Aug/2026:02:31:14.571] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/333/344 404 3252 - - ---- 53/5/1/1/0 0/0 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" Aug 22 02:31:16 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40276 [22/Aug/2026:02:31:15.757] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/296/307 404 3151 - - ---- 53/5/0/0/0 0/0 "GET /wp-content/plugins/index.php HTTP/1.1" Aug 22 02:31:16 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40276 [22/Aug/2026:02:31:16.471] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/313/324 404 3151 - - ---- 53/5/0/0/0 0/0 "GET /wp-content/themes/index.php HTTP/1.1" Aug 22 02:31:17 vps-9f3cdc33 haproxy[3127394]: 20.226.112.14:40276 [22/Aug/2026:02:31:17.202] www_frontend~ finance_cluster/finance1_test1_https 0/0/10/331/341 404 3151 - - ---- 53/5/0/0/0 0/0 "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" Aug 22 02:31:18 vps-9 ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-08-22 00:30:34 (7 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: BR \| UA:	Hacking Web App Attack
🇩🇪 Philister11	2026-08-22 00:24:37 (7 hours ago)	CrowdSec: crowdsecurity/http-probing (BR/AS8075)	Web App Attack Hacking
Anonymous	2026-08-22 00:16:04 (7 hours ago)	20.226.112.14 - - [22/Aug/2026:02:15:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.226.112.14 - - [22/Aug/2026:02:15:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.226.112.14 - - [22/Aug/2026:02:15:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 400 230 "-" "-" "-" "X" 20.226.112.14 - - [22/Aug/2026:02:15:58 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.226.112.14 - - [22/Aug/2026:02:16:03 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 400 230 "-" "-" "-" "X" 20.226.112.14 - - [22/Aug/2026:02:16:03 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" "-" "X" 20.226.112.14 - - [22/Aug/2026:02:16:04 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 400 230 "-" "-" "-" "X" show less	Brute-Force
🇩🇪 raph	2026-08-22 00:14:17 (7 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack

Showing 1 to 15 of 1665 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 78.188.228.73

🇻🇳 45.118.145.73

🇬🇧 2.57.17.3

🇫🇷 213.32.77.104

🇧🇴 189.28.76.139

🇫🇷 169.58.209.154

🇺🇸 134.122.126.211

🇰🇷 112.217.188.122

🇫🇷 88.169.59.120

🇺🇸 64.62.156.228

🇩🇪 46.101.127.225

🇧🇷 20.226.56.190

🇺🇸 17.22.237.229

🇩🇪 8.209.89.108

🇬🇧 2.57.17.244

🇬🇧 2.57.17.243

🇬🇧 2.57.17.219

🇺🇸 216.25.89.150

🇺🇸 209.205.206.247

🇭🇰 199.45.154.177