JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.218.124

20.104.218.124 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.218.124

Whois 20.104.218.124

IP Abuse Reports for 20.104.218.124:

This IP address has been reported a total of 206 times from 176 distinct sources. 20.104.218.124 was first reported on July 7th 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-07-08 03:00:01 (15 minutes ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇬🇧 andypiper	2026-07-08 01:00:42 (2 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 mrcrassi	2026-07-08 00:22:22 (2 hours ago)	Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /file46.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-08 00:20:09 (2 hours ago)	WordPress/Woo probe	Web App Attack
🇩🇪 Philister11	2026-07-08 00:15:55 (2 hours ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (CA/AS8075)	Web App Attack Hacking
🇺🇸 nasset	2026-07-08 00:14:55 (3 hours ago)	20.104.218.124 - - [07/Jul/2026:17:14:53 -0700] "GET /FAQ.php?p= HTTP/1.1" 403 584 "-" "-" 20.104.21 ... show more 20.104.218.124 - - [07/Jul/2026:17:14:53 -0700] "GET /FAQ.php?p= HTTP/1.1" 403 584 "-" "-" 20.104.218.124 - - [07/Jul/2026:17:14:53 -0700] "GET /coffexium.php HTTP/1.1" 403 584 "-" "-" 20.104.218.124 - - [07/Jul/2026:17:14:54 -0700] "GET /red.php HTTP/1.1" 403 584 "-" "-" 20.104.218.124 - - [07/Jul/2026:17:14:54 -0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 584 "-" "-" 20.104.218.124 - - [07/Jul/2026:17:14:54 -0700] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 403 584 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-08 00:12:26 (3 hours ago)	20.104.218.124 - - [07/Jul/2026:19:12:19 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.104.218.124 - - [07/Jul/2026:19:12:19 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:19 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:19 -0500] "GET /x.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:19 -0500] "GET /j260624_13.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:20 -0500] "GET /d62.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:20 -0500] "GET /ups.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:20 -0500] "GET /k.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:20 -0500] "GET /k2.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:20 -0500] "GET /k3.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:21 -0500] "GET /k4.php HTTP/1.0" 403 199 "-" "-" 20.104.218.124 - - [07/Jul/2026:19:12:21 -0500] "GET /k5. ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 00:11:07 (3 hours ago)	Web attack	Bad Web Bot Web App Attack
🇷🇺 ago.su	2026-07-08 00:08:28 (3 hours ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack
Anonymous	2026-07-08 00:07:01 (3 hours ago)	Automated web scanner. Requested suspicious paths: /wss.php \| /this_is_a_new_hello_world.php \| ///ad ... show more Automated web scanner. Requested suspicious paths: /wss.php \| /this_is_a_new_hello_world.php \| ///admin.php \| /x.php \| /ty.php \| /ops.php \| /ingfo.php \| /155.php \| //ok.php \| /3PJcpMFsD8B.php \| /25d653587fdfd1.php \| /mac.php \| /wp-content/plugins/hellopress/wp_filemanager.php \| /wefile.php \| /modules/mod_simplefileuploadv1.3/elements/filemanager.php \| /wp-includes/blocks/post-comments-form/ \| /wp-admin/js/ \| /like.php \| /wordpress/wp-admin/maint/ \| /.well-known/about.php \| /wp-admin/css/colour.php \| /wp-includes/ID3/about.php \| /wp-admin/css/ \|. UTC: 2026-07-07 23:56:08. show less	Web App Attack
🇩🇪 on-com	2026-07-08 00:06:50 (3 hours ago)	URL scan	Brute-Force Web App Attack
🇨🇿 ddw	2026-07-08 00:06:12 (3 hours ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇸🇬 ipidentify	2026-07-08 00:02:59 (3 hours ago)	2026-07-08T00:02:59Z GET /wp-admin/css/colors/coffee/wp-adochan.php 2026-07-08T00:03:11Z GET /wp-adm ... show more 2026-07-08T00:02:59Z GET /wp-admin/css/colors/coffee/wp-adochan.php 2026-07-08T00:03:11Z GET /wp-admin/js/ 2026-07-08T00:03:11Z GET /wp-admin/css/colour.php 2026-07-08T00:03:13Z GET /wp-admin/css/ 2026-07-08T00:03:14Z GET /wp-admin/css/colors/modern/ 2026-07-08T00:03:16Z GET /wp-admin/js/index.php 2026-07-08T00:03:29Z GET /wp-admin/css/colors/blue/ 2026-07-08T00:03:38Z GET /wp-admin/css/colors/sunrise/ 2026-07-08T00:03:40Z GET /wp-admin/network/plugins.php show less	Web App Attack
🇩🇪 Séfora Srl	2026-07-08 00:02:22 (3 hours ago)	Web App Attack with different attempts on Apache - detected by Fail2Ban in plesk-apache jail	Web App Attack
🇭🇺 kranem	2026-07-08 00:00:40 (3 hours ago)	Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /f35.php Timestamp: 2026-07-07T22:16:23Z User-Agent: empty show less	Bad Web Bot

Showing 1 to 15 of 206 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:10ff:43::

🇳🇱 216.246.119.89

🇺🇸 195.184.76.190

🇺🇸 172.174.236.9

🇰🇷 118.37.214.187

🇵🇰 103.179.241.3

🇷🇺 95.129.146.157

🇩🇪 69.5.169.209

🇨🇳 47.96.142.95

🇸🇬 47.79.248.119

🇷🇺 45.74.3.137

🇺🇸 20.124.93.107

🇪🇸 2a05:d011:d07:5802:e881:bd74:8170:95a8

🇺🇸 2a03:2880:10ff:42::

🇺🇸 216.126.225.6

🇳🇱 91.92.40.43

🇳🇱 45.153.34.186

🇺🇸 45.55.65.84

🇳🇵 165.101.164.252

🇸🇬 139.99.74.35