This IP address has been reported a total of
365
times from
296 distinct
sources.
20.104.200.136 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.104.200.136 (CA/Canada/-): 2 in ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.104.200.136 (CA/Canada/-): 2 in the last 3600 secs
show less
[fail2ban Auto Report] {"time":"2026-05-29T03:26:12.187465812-04:00","level":"INFO","source":{"funct ...
show more[fail2ban Auto Report] {"time":"2026-05-29T03:26:12.187465812-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/wp-content/plugins/hellopress/wp_filemanager.php","user_agent":"","accept_language":"","priority":"","x-forwarded-for":"20.104.200.136","x-real-ip":"20.104.200.136","host":"searxng.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":0}}
...
show less
(ScanningForFiles) Scanning for files triggerd 20.104.200.136 (CA/Canada/-): 10 in the last 600 secs ...
show more(ScanningForFiles) Scanning for files triggerd 20.104.200.136 (CA/Canada/-): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
{"level":"info","ts":1780037704.8958774,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1780037704.8958774,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"20.104.200.136","remote_port":"10660","client_ip":"20.104.200.136","proto":"HTTP/1.1","method":"GET","host":"status.sniper.cat","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000067228,"size":0,"status":308,"resp_headers":{"Location":["https://status.sniper.cat/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1780037705.8910828,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"20.104.200.136","remote_port":"10643","client_ip":"20.104.200.136","proto":"HTTP/1.1","method":"GET","host":"status.sniper.cat","uri":"/bnn_.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000047631,"size":0,"status":308,"resp_headers":{"Location":["https://status.sniper.cat/bnn_.php"],"Content-Type":[],"S
...
show less
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ...
show moreAttempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing.
show less