JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.50.116

20.104.50.116 was found in our database!

This IP was reported 1,714 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.50.116

Whois 20.104.50.116

IP Abuse Reports for 20.104.50.116:

This IP address has been reported a total of 1,714 times from 704 distinct sources. 20.104.50.116 was first reported on July 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-11 07:32:24 (1 hour ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 CUBEWALL	2026-07-10 21:00:44 (12 hours ago)	WAF blocked multiple malicious requests. Examples: [2026-07-08T05:38:07.000000Z] GET https://datapol ... show more WAF blocked multiple malicious requests. Examples: [2026-07-08T05:38:07.000000Z] GET https://datapolice.cubewall.net/wp-admin/css/colors/modern - blocked show less	Hacking Port Scan Web App Attack
🇺🇸 Rayulcifer	2026-07-10 20:51:21 (12 hours ago)	[Sat Jul 04 09:38:21.620339 2026] [access_compat:error] [pid 1359574:tid 123143205148352] [client 20 ... show more [Sat Jul 04 09:38:21.620339 2026] [access_compat:error] [pid 1359574:tid 123143205148352] [client 20.104.50.116:53267] AH01797: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sat Jul 04 09:38:21.651313 2026] [access_compat:error] [pid 1359574:tid 123144807368384] [client 20.104.50.116:53267] AH01797: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sat Jul 04 09:38:21.686067 2026] [access_compat:error] [pid 1359574:tid 123143758804672] [client 20.104.50.116:53267] AH01797: client denied by server configuration: proxy:http://localhost:4000/av.php [Sat Jul 04 09:38:21.717370 2026] [access_compat:error] [pid 1359574:tid 123145956611776] [client 20.104.50.116:53267] AH01797: client denied by server configuration: proxy:http://localhost:4000/adminfuns.php [Sat Jul 04 09:38:21.756700 2026] [access_compat:error] [pid 1359574:tid 123145335846592] [client 20.104.50.116:53267] A ... show less	Brute-Force SSH
Anonymous	2026-07-10 11:14:00 (22 hours ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇧🇷 Black_Brazil	2026-07-09 23:40:00 (1 day ago)	IP Blocked: 20.104.50.116; 2027-07-07; UTC Time - 15:09:46; Blocked by: Cloudflare WAF; Blocked Requ ... show more IP Blocked: 20.104.50.116; 2027-07-07; UTC Time - 15:09:46; Blocked by: Cloudflare WAF; Blocked Requests - 41; Scanning attack targeting typical names for webshells, backdoor panels, exfiltration scripts, and malware artifacts. URL Paths: GET - /ant.php; /forx.php; /domvf.php; /wp-su.php; /oiitmfgw.php; /skr.php; /error_log.php; /class-db.php; /log.php; /mj2.php; Threatfox listing for this IP; ClearFake and DCRat dated 2026-07-09. show less	Bad Web Bot Exploited Host Web App Attack
🇨🇦 zXero	2026-07-09 10:56:31 (1 day ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇮🇳 evicky2002	2026-07-09 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 SiyCah	2026-07-09 03:00:01 (2 days ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-09 02:05:56 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 tecnicorioja	2026-07-08 22:01:09 (2 days ago)	wp-login attack [08/Jul/2026:03:57:05	Brute-Force Web App Attack
🇫🇷 IRISIO	2026-07-08 09:48:16 (2 days ago)	scans/SQL injection/spam posts : 1017 queries	Web App Attack SQL Injection
🇫🇷 900cm	2026-07-08 09:21:08 (3 days ago)	[Wed Jul 08 11:21:07.475262 2026] [php7:error] [pid 4085412:tid 4085412] [client 20.104.50.116:38385 ... show more [Wed Jul 08 11:21:07.475262 2026] [php7:error] [pid 4085412:tid 4085412] [client 20.104.50.116:38385] script '/var/www/nextcloud/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 08 11:21:07.663607 2026] [php7:error] [pid 4085412:tid 4085412] [client 20.104.50.116:38385] script '/var/www/nextcloud/zoro.php' not found or unable to stat [Wed Jul 08 11:21:07.882362 2026] [php7:error] [pid 4085412:tid 4085412] [client 20.104.50.116:38385] script '/var/www/nextcloud/chosen.php' not found or unable to stat ... show less	Port Scan Brute-Force SSH
🇫🇮 pixiekat	2026-07-08 09:10:43 (3 days ago)	[Wed Jul 08 10:10:41.421150 2026] [authz_core:error] [pid 1154:tid 1204] [client 20.104.50.116:15318 ... show more [Wed Jul 08 10:10:41.421150 2026] [authz_core:error] [pid 1154:tid 1204] [client 20.104.50.116:15318] AH01630: client denied by server configuration: proxy:http://localhost:13378/wp-content/plugins/hellopress/wp_filemanager.php [Wed Jul 08 10:10:41.785494 2026] [authz_core:error] [pid 1154:tid 1184] [client 20.104.50.116:15318] AH01630: client denied by server configuration: proxy:http://localhost:13378/this_is_a_new_hello_world.php [Wed Jul 08 10:10:42.167654 2026] [authz_core:error] [pid 1154:tid 1276] [client 20.104.50.116:15318] AH01630: client denied by server configuration: proxy:http://localhost:13378/zoro.php [Wed Jul 08 10:10:42.621379 2026] [authz_core:error] [pid 1154:tid 1270] [client 20.104.50.116:15318] AH01630: client denied by server configuration: proxy:http://localhost:13378/chosen.php [Wed Jul 08 10:10:43.161190 2026] [authz_core:error] [pid 1154:tid 1244] [client 20.104.50.116:15318] AH01630: client denied by server configuration: proxy:http://localhost:13378/wp-inc ... show less	Brute-Force
🇧🇷 dominioz	2026-07-08 09:02:38 (3 days ago)	2026-07-08 09:02:28 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.104.50.116 HTTP/1.1 ... show more 2026-07-08 09:02:28 GET /wp-content/plugins/hellopress/wp_filemanager.php - - 20.104.50.116 HTTP/1.1 - - 403 5330 2026-07-08 09:02:29 GET /this_is_a_new_hello_world.php - - 20.104.50.116 HTTP/1.1 - - 403 5292 2026-07-08 09:02:29 GET /zoro.php - - 20.104.50.116 HTTP/1.1 - - 403 5250 2026-07-08 09:02:29 GET /chosen.php - - 20.104.50.116 HTTP/1.1 - - 403 5254 ... show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-08 08:52:19 (3 days ago)	2026-07-08 @ 10:52:19 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-08 @ 10:52:19 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack

Showing 1 to 15 of 1714 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.99.102.191

🇲🇬 102.68.195.117

🇰🇿 95.58.255.251

🇺🇸 66.132.172.200

🇺🇸 66.132.172.134

🇺🇸 52.200.142.199

🇺🇸 45.79.168.172

🇺🇦 37.55.157.145

🇺🇸 24.5.244.85

🇮🇩 202.145.0.61

🇹🇼 198.235.24.75

🇲🇽 189.194.140.170

🇲🇽 187.190.198.62

🇧🇷 187.51.208.158

🇧🇷 170.81.167.124

🇸🇦 151.255.11.108

🇺🇸 147.185.132.184

🇹🇭 118.193.57.59

🇫🇷 85.217.140.22

🇫🇷 85.25.43.199