JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.18.4

20.104.18.4 was found in our database!

This IP was reported 769 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.18.4

Whois 20.104.18.4

IP Abuse Reports for 20.104.18.4:

This IP address has been reported a total of 769 times from 481 distinct sources. 20.104.18.4 was first reported on April 11th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-11 20:35:24 (1 month ago)	$f2bV_matches	Brute-Force Web App Attack
🇨🇿 sajmon0011	2026-04-11 20:35:19 (1 month ago)	20.104.18.4 - - [11/Apr/2026:22:35:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.18.4 - - [11/Apr/2026:22:35:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇬🇧 blik2108	2026-04-11 20:34:51 (1 month ago)	blacknellsatsea.co.uk:80 20.104.18.4 - - [11/Apr/2026:21:34:48 +0100] "GET /config-backup.php HTTP/1 ... show more blacknellsatsea.co.uk:80 20.104.18.4 - - [11/Apr/2026:21:34:48 +0100] "GET /config-backup.php HTTP/1.1" 301 618 "-" "-" blog.blacknellsatsea.co.uk:80 20.104.18.4 - - [11/Apr/2026:21:34:48 +0100] "GET /config-backup.php HTTP/1.1" 301 625 "-" "-" blog.blacknellsatsea.co.uk:443 20.104.18.4 - - [11/Apr/2026:21:34:49 +0100] "GET /config-backup.php HTTP/1.1" 301 503 "-" "-" blacknellsatsea.co.uk:80 20.104.18.4 - - [11/Apr/2026:21:34:50 +0100] "GET /config.php HTTP/1.1" 301 604 "-" "-" blog.blacknellsatsea.co.uk:80 20.104.18.4 - - [11/Apr/2026:21:34:51 +0100] "GET /config.php HTTP/1.1" 301 611 "-" "-" ... show less	Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-04-11 20:34:40 (1 month ago)	20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 983 "-" "-" 20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /index/chosen.php HTTP/1.1" 404 983 "-" "-" 20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /about/chosen.php HTTP/1.1" 404 983 "-" "-" 20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /as/chosen.php HTTP/1.1" 404 983 "-" "-" 20.104.18.4 - - [12/Apr/2026:06:34:39 +1000] "GET /file/chosen.php HTTP/1.1" 404 983 "-" "-" 20.104.18.4 - - [12/Apr/2026:06:34:40 +1000] "GET /chosen/chosen.php HTTP/1.1" 404 983 "-" "-" ... show less	Bad Web Bot
🇸🇬 ipidentify	2026-04-11 20:34:18 (1 month ago)	2026-04-11T20:34:47Z GET /wp-admin/maint/index.php 2026-04-11T20:34:54Z GET /wp-admin/alfacgiapi/per ... show more 2026-04-11T20:34:47Z GET /wp-admin/maint/index.php 2026-04-11T20:34:54Z GET /wp-admin/alfacgiapi/perl.alfa 2026-04-11T20:34:56Z GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa 2026-04-11T20:34:59Z GET /wp-admin/images/pomo.php 2026-04-11T20:34:59Z GET /wp-admin/includes/pomo.php 2026-04-11T20:34:59Z GET /wp-admin/js/widgets/pomo.php 2026-04-11T20:34:59Z GET /wp-admin/js/pomo.php 2026-04-11T20:35:00Z GET /wp-admin/maint/pomo.php 2026-04-11T20:35:00Z GET /wp-admin/network/pomo.php 2026-04-11T20:35:01Z GET /wp-admin/user/pomo.php show less	Web App Attack
🇨🇦 polycoda	2026-04-11 20:33:03 (1 month ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇩🇪 leryon	2026-04-11 20:30:20 (1 month ago)	IP: 20.104.18.4 sends in the last 24 hours 10 invalid requests over 80	Hacking Web Spam
🇩🇪 Hary74656	2026-04-11 20:29:58 (1 month ago)	[Sat Apr 11 22:29:47.892500 2026] [core:info] [pid 419980:tid 420096] [client 20.104.18.4:23498] AH0 ... show more [Sat Apr 11 22:29:47.892500 2026] [core:info] [pid 419980:tid 420096] [client 20.104.18.4:23498] AH00128: File does not exist: /home/harald/www/wp-admin/network/admin.php ... show less	Bad Web Bot
🇩🇪 Ba-Yu	2026-04-11 20:27:55 (1 month ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-04-11 20:26:23 (1 month ago)	20.104.18.4 - - [11/Apr/2026:23:26:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.18.4 - - [11/Apr/2026:23:26:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 717 "-" "-" 20.104.18.4 - - [11/Apr/2026:23:26:22 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 404 628 "-" "-" ... show less	Web App Attack
🇩🇪 paissangroup	2026-04-11 20:24:29 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Hazzard	2026-04-11 20:21:50 (1 month ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking
🇩🇪 Viveronese	2026-04-11 20:20:18 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 big-cloud.nl	2026-04-11 20:19:55 (1 month ago)	Try to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇫🇷 Guardian	2026-04-11 20:18:25 (1 month ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning 20.104.18.4 [11/Apr/2026:20:18:24] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.104.18.4 [11/Apr/2026:20:18:24] "GET /index/chosen.php HTTP/1.1" show less	Port Scan Web App Attack

Showing 691 to 705 of 769 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.194.140.170

🇳🇱 176.65.149.212

🇭🇰 199.45.155.73

🇮🇳 135.13.28.35

🇳🇿 121.73.163.27

🇨🇳 116.255.208.96

🇫🇷 91.196.152.18

🇸🇦 82.167.182.120

🇳🇱 45.148.10.151

🇭🇰 43.255.118.11

🇧🇪 35.189.196.224

🇺🇸 2604:a940:300:5b6:0:12::

🇧🇷 187.8.120.90

🇧🇷 179.222.190.59

🇳🇱 176.65.148.29

🇺🇸 172.253.7.30

🇺🇸 172.238.160.104

🇹🇬 156.38.73.89

🇿🇦 147.136.67.52

🇨🇳 120.133.60.156