JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.245.70

20.104.245.70 was found in our database!

This IP was reported 391 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.245.70

Whois 20.104.245.70

IP Abuse Reports for 20.104.245.70:

This IP address has been reported a total of 391 times from 316 distinct sources. 20.104.245.70 was first reported on April 12th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-07-17 12:10:38 (1 month ago)	csagent: score 15.5: php 404 x2, 404 noise floor x2, shell drop sweep x1; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-05-09 13:03:07 (3 months ago)	Captured: 2026-04-13 10:46:20 on /wp-content/plugins/hellopress/wp_filemanager.php (Attributed to: A ... show more Captured: 2026-04-13 10:46:20 on /wp-content/plugins/hellopress/wp_filemanager.php (Attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack
🇮🇳 evicky2002	2026-04-30 13:02:46 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-30 11:21:39 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-04-29 05:51:19 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ecs.ge	2026-04-20 23:28:02 (4 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇪🇸 Gem	2026-04-17 22:11:27 (4 months ago)	Unauthorized web scan.	Web App Attack
🇩🇪 ecs.ge	2026-04-16 22:48:26 (4 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇧🇷 Peregrine	2026-04-16 03:09:59 (4 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /kma.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /wpls.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /i6z19N.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /ssh3ll.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:17 -0300] "GET /new4.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇭🇺 DumaNet	2026-04-15 12:25:00 (4 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 13. 09:11:05 Source IP: 20.104 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 13. 09:11:05 Source IP: 20.104.245.70 Portion of the log(s): 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /RIP.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /multirole.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /green.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /jatuh.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /seo.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /congeree.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:04 +0200] "GET /rnenu.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:03 +0200] "GET /wp-0fsdhv.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:03 +0200] "GET /fallbackapi.php HTTP/1.1" 404 153 "-" "-" 20.104.245.70 - [13/Apr/2026:09:11:03 +0200] "GET /new2.php HTTP/1.1" 404 show less	Web App Attack
🇩🇪 Holger	2026-04-15 07:02:58 (4 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-04-15 03:09:54 (4 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /kma.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /wpls.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /i6z19N.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:16 -0300] "GET /ssh3ll.php HTTP/1.1" 404 414 20.104.245.70 172.71.120.97 - - [12/Apr/2026:18:43:17 -0300] "GET /new4.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-04-14 21:59:02 (4 months ago)	Auto-ban: 248 malicious requests on 2026-04-13 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 248 malicious requests on 2026-04-13 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
Anonymous	2026-04-14 10:24:00 (4 months ago)	Portscan: TCP/80 (8x), TCP/443 (2x)	Port Scan
🇬🇧 openstrike.co.uk	2026-04-14 05:18:00 (4 months ago)	354 attacks on PHP URLs: GET /444.php HTTP/1.1	Web App Attack

Showing 1 to 15 of 391 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.54.125.157

🇨🇳 111.173.158.229

🇬🇦 102.142.97.214

🇺🇸 50.82.200.91

🇳🇱 45.148.10.157

🇺🇸 35.94.161.10

🇷🇴 193.32.162.84

🇺🇸 184.105.139.67

🇨🇴 179.51.114.2

🇭🇰 154.198.162.234

🇮🇳 152.58.178.221

🇺🇸 104.154.146.127

🇺🇸 40.80.202.148

🇩🇪 31.172.83.122

🇺🇸 20.64.98.142

🇻🇪 190.77.139.59

🇦🇷 181.228.80.171

🇺🇸 172.234.199.75

🇸🇬 159.138.88.16

🇩🇪 151.243.11.15