JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.226.66.230

20.226.66.230

Recent Activity

1,972 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇧🇷 Brazil

City

Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.226.66.230:

This IP address has been reported a total of 1,972 times from 686 distinct sources. 20.226.66.230 was first reported on July 12th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 444 reports; United States of America with 428 reports; France with 224 reports. The most common categories in these recent reports were: Web App Attack 1500 times; Brute-Force 551 times; Bad Web Bot 443 times; Hacking 420 times; Port Scan 197 times; Other 449 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 zXero	2026-09-05 07:16:33 (2 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-09-03 12:29:16 (4 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-09-01 13:15:58 (6 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-09-01 07:00:34 (6 days ago)	[Sun Jul 12 22:46:08.419495 2026] [authz_core:error] [pid 3799252:tid 124319582795456] [client 20.22 ... show more [Sun Jul 12 22:46:08.419495 2026] [authz_core:error] [pid 3799252:tid 124319582795456] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Jul 12 22:46:08.537641 2026] [authz_core:error] [pid 3799252:tid 124316008048320] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Jul 12 22:46:08.653643 2026] [authz_core:error] [pid 3799252:tid 124317526374080] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Sun Jul 12 22:46:08.768269 2026] [authz_core:error] [pid 3799252:tid 124315445999296] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/d62.php [Sun Jul 12 22:46:08.883201 2026] [authz_core:error] [pid 3799252:tid 124316586849984] [client 20.226.66.230:16742] AH01630: client denied ... show less	Brute-Force SSH
🇨🇦 zXero	2026-08-29 03:09:58 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 bogdanv	2026-08-27 17:55:51 (1 week ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇨🇦 zXero	2026-08-27 12:40:46 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-08-27 06:34:55 (1 week ago)	[Sun Jul 12 22:46:08.419495 2026] [authz_core:error] [pid 3799252:tid 124319582795456] [client 20.22 ... show more [Sun Jul 12 22:46:08.419495 2026] [authz_core:error] [pid 3799252:tid 124319582795456] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sun Jul 12 22:46:08.537641 2026] [authz_core:error] [pid 3799252:tid 124316008048320] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sun Jul 12 22:46:08.653643 2026] [authz_core:error] [pid 3799252:tid 124317526374080] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Sun Jul 12 22:46:08.768269 2026] [authz_core:error] [pid 3799252:tid 124315445999296] [client 20.226.66.230:16742] AH01630: client denied by server configuration: proxy:http://localhost:4000/d62.php [Sun Jul 12 22:46:08.883201 2026] [authz_core:error] [pid 3799252:tid 124316586849984] [client 20.226.66.230:16742] AH01630: client denied ... show less	Brute-Force SSH
🇬🇧 myintarweb	2026-08-14 23:56:52 (3 weeks ago)	20.226.66.230 - mail.madmick.co.uk [13/Jul/2026:10:22:02 +0100] 80 "GET /wp-content/plugins/hellopre ... show more 20.226.66.230 - mail.madmick.co.uk [13/Jul/2026:10:22:02 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1603 "-" "-" ... show less	Hacking Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-12 06:00:03 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇦 zXero	2026-08-11 12:51:34 (3 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇫🇷 Nicolas Devot	2026-08-11 06:03:25 (3 weeks ago)	20.226.66.230 - Recidivist IP still active after blacklisting. Reported from IIS access logs on 2026 ... show more 20.226.66.230 - Recidivist IP still active after blacklisting. Reported from IIS access logs on 2026-08-11. show less	Web App Attack Bad Web Bot
Anonymous	2026-08-08 15:57:04 (4 weeks ago)	IP banned by Fail2Ban	Brute-Force SSH
🇳🇱 tmiland	2026-08-05 19:59:27 (1 month ago)	Detected 161 connections from 20.226.66.230 last 15 minutes.; 20.226.66.230 is part of network 20.22 ... show more Detected 161 connections from 20.226.66.230 last 15 minutes.; 20.226.66.230 is part of network 20.226.0.0 with 7436 distributed connections; Logs: 20.226.66.230 - - [16/Jul/2026:18:39:23 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:24 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:24 +0200] "GET /x.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:24 +0200] "GET /mgrr.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:24 +0200] "GET /stdin.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:25 +0200] "GET /BDKR28.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:25 +0200] "GET /001.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:25 +0200] "GET /dZ3wP5.php HTTP/1.1" 200 78046 "-" "-" 20.226.66.230 - - [16/Jul/2026:18:39:25 +0200] show less	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-08-05 19:51:53 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force

Showing 1 to 15 of 1972 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.232

🇧🇷 192.140.116.186

🇺🇸 174.64.165.90

🇺🇸 172.233.200.191

🇮🇳 139.59.69.229

🇧🇪 34.53.208.149

🇯🇵 8.216.17.247

🇹🇷 217.131.81.9

🇧🇪 207.175.229.28

🇫🇷 194.24.161.172

🇳🇱 193.176.31.254

🇦🇷 186.22.17.80

🇻🇳 183.91.14.218

🇵🇱 176.53.159.196

🇭🇰 152.32.170.230

🇨🇳 125.208.17.80

🇧🇬 109.160.32.71

🇫🇷 91.231.89.68

🇨🇳 39.106.20.83

🇺🇸 20.83.166.39