JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.204.110.107

Recent Activity

Abuse Confidence Score

100% Critical

1,978 reports

751 reporters · latest 2 days ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇳 India
City: Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,978 from 751 distinct reporters

First reported

September 23rd 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 536 🇺🇸 United States of America 328 🇫🇷 France 232

Most common categories Web App Attack 1,436 Brute-Force 560 Bad Web Bot 520 Hacking 415 Port Scan 210

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-11-02 15:20:22 (2 days ago)	[Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep ... show more [Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep 24 23:17:31.338144 2026] [authz_core:error] [pid 2653331:tid 136042770306752] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Sep 24 23:17:31.522001 2026] [authz_core:error] [pid 2653331:tid 136040622823104] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Thu Sep 24 23:17:31.706034 2026] [authz_core:error] [pid 2653331:tid 136041721743040] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Thu Sep 24 23:17:31.899733 2026] [authz_core:error] [pid 2653331:tid 136041184872128] [client 20.204.110.107:42051] AH01630: client ... show less	Brute-Force SSH
🇺🇸 1cyb3rpunk	2026-10-28 04:48:00 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-27 21:52:24 (1 week ago)	[Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep ... show more [Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep 24 23:17:31.338144 2026] [authz_core:error] [pid 2653331:tid 136042770306752] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Sep 24 23:17:31.522001 2026] [authz_core:error] [pid 2653331:tid 136040622823104] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Thu Sep 24 23:17:31.706034 2026] [authz_core:error] [pid 2653331:tid 136041721743040] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Thu Sep 24 23:17:31.899733 2026] [authz_core:error] [pid 2653331:tid 136041184872128] [client 20.204.110.107:42051] AH01630: client ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-10-26 21:22:36 (1 week ago)	[Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep ... show more [Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep 24 23:17:31.338144 2026] [authz_core:error] [pid 2653331:tid 136042770306752] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Sep 24 23:17:31.522001 2026] [authz_core:error] [pid 2653331:tid 136040622823104] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Thu Sep 24 23:17:31.706034 2026] [authz_core:error] [pid 2653331:tid 136041721743040] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Thu Sep 24 23:17:31.899733 2026] [authz_core:error] [pid 2653331:tid 136041184872128] [client 20.204.110.107:42051] AH01630: client ... show less	Brute-Force SSH
Anonymous	2026-10-24 13:46:28 (1 week ago)	fail2ban jail apache-scanner: 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /yich.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /wp-blink.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21: ... show more fail2ban jail apache-scanner: 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /yich.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /wp-blink.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:55 -0700] "GET /wp-logis.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:55 -0700] "GET /wsxedc.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:56 -0700] "GET /idolet.php?p= HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:56 -0700] "GET /weem.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:57 -0700] "GET /vitellose.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:58 -0700] "GET /carcassed.php?p= HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:58 -0700] "GET /esc.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:59 -0700] "GET /2.php HTTP/1.1" 40 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:52:05 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 1cyb3rpunk	2026-10-23 18:42:58 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-22 07:01:17 (1 week ago)	[Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep ... show more [Thu Sep 24 23:17:31.146573 2026] [authz_core:error] [pid 2653331:tid 136042267006656] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Sep 24 23:17:31.338144 2026] [authz_core:error] [pid 2653331:tid 136042770306752] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Sep 24 23:17:31.522001 2026] [authz_core:error] [pid 2653331:tid 136040622823104] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/1ac.php [Thu Sep 24 23:17:31.706034 2026] [authz_core:error] [pid 2653331:tid 136041721743040] [client 20.204.110.107:42051] AH01630: client denied by server configuration: proxy:http://localhost:4000/flm.php [Thu Sep 24 23:17:31.899733 2026] [authz_core:error] [pid 2653331:tid 136041184872128] [client 20.204.110.107:42051] AH01630: client ... show less	Brute-Force SSH
Anonymous	2026-10-21 13:20:03 (2 weeks ago)	fail2ban jail apache-scanner: 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /yich.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /wp-blink.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21: ... show more fail2ban jail apache-scanner: 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /yich.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:54 -0700] "GET /wp-blink.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:55 -0700] "GET /wp-logis.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:55 -0700] "GET /wsxedc.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:56 -0700] "GET /idolet.php?p= HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:56 -0700] "GET /weem.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:57 -0700] "GET /vitellose.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:58 -0700] "GET /carcassed.php?p= HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:58 -0700] "GET /esc.php HTTP/1.1" 403 471 "-" "-" 20.204.110.107 - - [23/Sep/2026:20:21:59 -0700] "GET /2.php HTTP/1.1" 40 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:28:20 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-20 07:11:02 (2 weeks ago)	T: f2b 404 5x	Web App Attack
Anonymous	2026-10-20 06:55:23 (2 weeks ago)	B: f2b 404 5x	Web App Attack
🇦🇺 Klaverstyn	2026-10-17 04:56:32 (2 weeks ago)	Persistent attacker, repeat offender	Hacking
🇨🇦 zXero	2026-10-17 00:29:46 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-10-15 12:14:53 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack

Showing 1 to 15 of 1978 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.158.13.202

🇵🇱 176.53.159.198

🇺🇸 73.21.224.229

🇸🇬 47.82.13.48

🇩🇪 46.101.126.212

🇷🇴 2.57.121.25

🇸🇬 209.97.175.79

🇺🇦 188.163.5.36

🇪🇸 158.158.46.109

🇬🇧 92.207.11.26

🇺🇸 50.6.194.220

🇰🇷 43.131.249.17

🇧🇷 200.165.204.46

🇺🇸 187.40.235.168

🇩🇪 172.69.109.158

🇺🇸 136.234.241.153

🇵🇱 81.162.213.16

🇳🇱 45.156.87.72

🇸🇬 34.87.76.119

🇺🇸 34.58.238.172