JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.244.165

20.104.244.165 was found in our database!

This IP was reported 956 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.244.165

Whois 20.104.244.165

IP Abuse Reports for 20.104.244.165:

This IP address has been reported a total of 956 times from 558 distinct sources. 20.104.244.165 was first reported on June 15th 2026, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Dennis	2026-06-19 05:01:37 (43 minutes ago)	20.104.244.165 has been banned for triggering http-probing (11 events over 1.321998989s).	Brute-Force Web App Attack
🇫🇷 Guardian	2026-06-19 04:47:44 (57 minutes ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection atte ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities, Unauthorized connection attempt / Port scanning (x2) 20.104.244.165 [19/Jun/2026:04:47:43] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 20.104.244.165 [19/Jun/2026:04:47:44] "GET /this_is_a_new_hello_world.php HTTP/1.1" 20.104.244.165 [19/Jun/2026:04:47:44] "GET /core/init.php HTTP/1.1" show less	Port Scan Web App Attack
🇺🇸 VanKoh	2026-06-19 04:38:13 (1 hour ago)	20.104.244.165 - - [18/Jun/2026:22:38:12 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.104.244.165 - - [18/Jun/2026:22:38:12 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.104.244.165 - - [18/Jun/2026:22:38:12 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 20.104.244.165 - - [18/Jun/2026:22:38:12 -0600] "GET /core/init.php HTTP/1.1" 404 146 "-" "-" ... show less	DDoS Attack Web App Attack
🇩🇪 itsolon	2026-06-19 04:29:58 (1 hour ago)	[19/Jun/2026:06:29:48 +0200] 178184338861.660342 20.104.244.165 64482 217.154.7.177 80 [19/Jun/2026: ... show more [19/Jun/2026:06:29:48 +0200] 178184338861.660342 20.104.244.165 64482 217.154.7.177 80 [19/Jun/2026:06:29:51 +0200] 178184339151.881597 20.104.244.165 64482 217.154.7.177 80 [19/Jun/2026:06:29:52 +0200] 178184339286.218747 20.104.244.165 64482 217.154.7.177 80 [19/Jun/2026:06:29:55 +0200] 178184339551.716263 20.104.244.165 64482 217.154.7.177 80 [19/Jun/2026:06:29:57 +0200] 178184339741.854151 20.104.244.165 64482 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 hbrks	2026-06-19 04:24:59 (1 hour ago)	111 attack(s) detected, such as these: {"event":"web_block","ip":"20.104.244.165","host":"cloud4.xyz ... show more 111 attack(s) detected, such as these: {"event":"web_block","ip":"20.104.244.165","host":"cloud4.xyz","request":"GET /mini.php HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-19T04:24:59 00:00","logentry":"cloud4.xyz 20.104.244.165 - - [19/Jun/2026:04:24:59 0000] \"GET /mini.php HTTP/1.1\" 503 190 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/579XPYHFC8Z/1 IP Details *: https://p4u.xyz/579XPYHFC8Z/2 show less	Web Spam Hacking Bad Web Bot
🇺🇸 Epimetheus	2026-06-19 04:09:00 (1 hour ago)	Unauthorized access attempts: [GET] /xroot7.php [GET] /z.ph [GET] /wp-admin/includes/index.php [GET ... show more Unauthorized access attempts: [GET] /xroot7.php [GET] /z.ph [GET] /wp-admin/includes/index.php [GET] /init.php [GET] /k.php [GET] /file2.php [GET] /layout.php [GET] /wp-class.php [GET] /de.php [GET] /link.php [GET] /xltt.php [GET] /tiny.php [GET] /ms-edit.php [GET] /son.php [GET] /a4.php [GET] /xs.php [GET] /xxa.php [GET] /wp-the.php [GET] /aa.php [GET] /about.php [GET] /adminfuns.php UA: Unknown show less	Web App Attack
🇨🇿 ptlab	2026-06-19 04:00:03 (1 hour ago)	Detected wp_admin attack from WP-host.	Hacking Web App Attack
🇺🇸 sandap1	2026-06-19 04:00:03 (1 hour ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80,src_ip=20.104.244.165	Port Scan Hacking
🇳🇱 CryptoYakari	2026-06-19 03:25:40 (2 hours ago)	[Fri Jun 19 06:25:37.224483 2026] [proxy_fcgi:error] [pid 1911147:tid 1911181] [client 20.104.244.16 ... show more [Fri Jun 19 06:25:37.224483 2026] [proxy_fcgi:error] [pid 1911147:tid 1911181] [client 20.104.244.165:0] AH01071: Got error 'Primary script unknown' [Fri Jun 19 06:25:37.731866 2026] [proxy_fcgi:error] [pid 1911147:tid 1911182] [client 20.104.244.165:0] AH01071: Got error 'Primary script unknown' [Fri Jun 19 06:25:37.841727 2026] [proxy_fcgi:error] [pid 1911147:tid 1911161] [client 20.104.244.165:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇧🇷 Peregrine	2026-06-19 03:13:44 (2 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.104.244.165 172.70.80.74 - - [16/Jun/2026:09:34: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.104.244.165 172.70.80.74 - - [16/Jun/2026:09:34:12 -0300] "GET /wp-good.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇬🇧 consul.to	2026-06-19 03:09:59 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 jkhorvath.com	2026-06-19 02:31:47 (3 hours ago)	Request for URL /wp-content/plugins/hellopress/wp_filemanager.php	Phishing Brute-Force Web App Attack
Anonymous	2026-06-19 02:27:29 (3 hours ago)	Logfile match	Web App Attack
🇸🇬 securejdprop	2026-06-19 02:03:06 (3 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 20.104.244.1 ... show more This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 20.104.244.165 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 5.372154959s) at 2026-06-19 02:03:04.798870039 +0000 UTC show less	Hacking
Anonymous	2026-06-19 02:00:03 (3 hours ago)	20.104.244.165 - autoconfig.sliver85.eu - [19/Jun/2026:03:06:49 +0200] "GET /wp-content/plugins/hell ... show more 20.104.244.165 - autoconfig.sliver85.eu - [19/Jun/2026:03:06:49 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.104.244.165 - autoconfig.sliver85.eu - [19/Jun/2026:03:06:49 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.104.244.165 - autoconfig.sliver85.eu - [19/Jun/2026:03:06:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.104.244.165 - autoconfig.sliver85.eu - [19/Jun/2026:03:06:50 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 956 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac1:6520:8::3e6:76

🇨🇱 186.103.169.12

🇷🇴 141.98.83.48

🇮🇳 128.185.116.114

🇨🇳 106.58.220.34

🇮🇳 49.43.242.247

🇳🇱 45.198.224.115

🇬🇧 193.163.125.51

🇺🇸 162.216.149.29

🇵🇰 103.179.240.215

🇲🇾 49.125.201.80

🇳🇱 45.148.10.152

🇺🇸 43.153.13.30

🇺🇸 216.25.89.141

🇺🇸 184.105.139.80

🇺🇸 147.185.132.10

🇫🇷 91.196.152.119

🇫🇷 91.196.152.104

🇳🇱 89.21.67.154

🇫🇷 75.119.132.28