JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.76.210

20.104.76.210 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.76.210

Whois 20.104.76.210

IP Abuse Reports for 20.104.76.210:

This IP address has been reported a total of 267 times from 145 distinct sources. 20.104.76.210 was first reported on July 7th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 antlac1	2026-07-09 14:12:17 (12 minutes ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-07-09 13:32:35 (51 minutes ago)	20.104.76.210 - - [09/Jul/2026:16:32:34 +0300] "GET /cgi-bin/ HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Wi ... show more 20.104.76.210 - - [09/Jul/2026:16:32:34 +0300] "GET /cgi-bin/ HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇪 Ivo Vynckier	2026-07-09 10:41:00 (3 hours ago)	20.104.76.210 - - [09/Jul/2026:05:02:26 +0200] "GET /admin.php HTTP/1.1" 403 492 "-" "Mozilla/5.0 (W ... show more 20.104.76.210 - - [09/Jul/2026:05:02:26 +0200] "GET /admin.php HTTP/1.1" 403 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.76.210 - - [09/Jul/2026:05:02:26 +0200] "GET /about.php HTTP/1.1" 403 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.76.210 - - [09/Jul/2026:05:02:26 +0200] "GET /cgi-bin/ HTTP/1.1" 403 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 voormedia	2026-07-09 07:09:01 (7 hours ago)	Accessed trap at '/admin.php'	Web App Attack
🇩🇪 enjoyably	2026-07-09 07:03:10 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇫🇮 Christopher Hughes	2026-07-09 07:02:40 (7 hours ago)	[Thu Jul 09 08:02:38.951508 2026] [proxy_fcgi:error] [pid 1626919:tid 139821762725440] [client 20.10 ... show more [Thu Jul 09 08:02:38.951508 2026] [proxy_fcgi:error] [pid 1626919:tid 139821762725440] [client 20.104.76.210:29156] AH01071: Got error 'Primary script unknown' [Thu Jul 09 08:02:39.067129 2026] [proxy_fcgi:error] [pid 1626919:tid 139821779510848] [client 20.104.76.210:29156] AH01071: Got error 'Primary script unknown' [Thu Jul 09 08:02:39.416613 2026] [proxy_fcgi:error] [pid 1626919:tid 139822759077440] [client 20.104.76.210:29156] AH01071: Got error 'Primary script unknown' [Thu Jul 09 08:02:39.532121 2026] [proxy_fcgi:error] [pid 1626919:tid 139822299596352] [client 20.104.76.210:29156] AH01071: Got error 'Primary script unknown' [Thu Jul 09 08:02:39.997144 2026] [proxy_fcgi:error] [pid 1626919:tid 139821175531072] [client 20.104.76.210:29156] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇴 Abuse Buster	2026-07-09 06:35:34 (7 hours ago)	20.104.76.210 - [09/Jul/2026:08:35:32 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Wind ... show more 20.104.76.210 - [09/Jul/2026:08:35:32 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.104.76.210 Forwared for: 20.104.76.210 20.104.76.210 - [09/Jul/2026:08:35:32 +0200] "GET /about.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.104.76.210 Forwared for: 20.104.76.210 20.104.76.210 - [09/Jul/2026:08:35:32 +0200] "GET /cgi-bin/ HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Connecting ip: 20.104.76.210 Forwared for: 20.104.76.210 ... show less	Web App Attack
🇺🇸 sandap1	2026-07-09 06:35:03 (7 hours ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443,src_ip=20.104.76.210	Port Scan Hacking
🇫🇮 Christopher Hughes	2026-07-09 06:12:34 (8 hours ago)	[Thu Jul 09 07:12:33.377949 2026] [proxy_fcgi:error] [pid 1627549:tid 139822767470144] [client 20.10 ... show more [Thu Jul 09 07:12:33.377949 2026] [proxy_fcgi:error] [pid 1627549:tid 139822767470144] [client 20.104.76.210:52206] AH01071: Got error 'Primary script unknown' [Thu Jul 09 07:12:33.492778 2026] [proxy_fcgi:error] [pid 1627549:tid 139822759077440] [client 20.104.76.210:52206] AH01071: Got error 'Primary script unknown' [Thu Jul 09 07:12:33.834365 2026] [proxy_fcgi:error] [pid 1627549:tid 139821779510848] [client 20.104.76.210:52206] AH01071: Got error 'Primary script unknown' [Thu Jul 09 07:12:33.949379 2026] [proxy_fcgi:error] [pid 1627549:tid 139821175531072] [client 20.104.76.210:52206] AH01071: Got error 'Primary script unknown' [Thu Jul 09 07:12:34.404684 2026] [proxy_fcgi:error] [pid 1627549:tid 139821762725440] [client 20.104.76.210:52206] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 Epimetheus	2026-07-09 06:10:29 (8 hours ago)	Unauthorized access attempts: [GET] /wp-admin/js/widgets/ [GET] /wp-content/themes/index.php [GET] ... show more Unauthorized access attempts: [GET] /wp-admin/js/widgets/ [GET] /wp-content/themes/index.php [GET] /wp-includes/ [GET] /wp-admin/js/ [GET] /wp-includes/js/crop/ [GET] /inputs.php [GET] /about.php [GET] /wp-admin/maint/ [GET] /lite.php [GET] /wp-content/themes/theme/about.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇭🇺 kranem	2026-07-09 06:00:39 (8 hours ago)	Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from CA. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /edit.php Timestamp: 2026-07-09T03:06:49Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 danirod	2026-07-09 05:56:21 (8 hours ago)	20.104.76.210 - - [09/Jul/2026:05:56:19 +0000] "GET https://dashboard.makigas.es/admin.php HTTP/1.1" ... show more 20.104.76.210 - - [09/Jul/2026:05:56:19 +0000] "GET https://dashboard.makigas.es/admin.php HTTP/1.1" 404 3761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 1.122 20.104.76.210 - - [09/Jul/2026:05:56:20 +0000] "GET https://dashboard.makigas.es/about.php HTTP/1.1" 404 3763 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 0.051 20.104.76.210 - - [09/Jul/2026:05:56:21 +0000] "GET https://dashboard.makigas.es/adminfuns.php HTTP/1.1" 404 3726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 0.140 ... show less	Brute-Force
Anonymous	2026-07-09 05:55:40 (8 hours ago)	20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /admin.php HTTP/1.1" 404 5615 20.104.76.210 - - ... show more 20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /admin.php HTTP/1.1" 404 5615 20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /about.php HTTP/1.1" 404 5615 20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /cgi-bin/ HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /wp-content/themes/ HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:37 +0200] "GET /adminfuns.php HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:38 +0200] "GET /edit.php HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:38 +0200] "GET /.well-known/logs233/index.php HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:38 +0200] "GET /wp-admin/maint/ HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:38 +0200] "GET /wp-admin/ HTTP/1.1" 404 578 20.104.76.210 - - [09/Jul/2026:07:55:38 +0200] "GET /lite.php HTTP/1.1" 404 578 ... show less	Web Spam Web App Attack
🇺🇸 ipblock.com	2026-07-09 05:53:00 (8 hours ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇳🇴 Abuse Buster	2026-07-09 05:15:40 (9 hours ago)	20.104.76.210 - [09/Jul/2026:07:15:38 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Wind ... show more 20.104.76.210 - [09/Jul/2026:07:15:38 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.76.210 - [09/Jul/2026:07:15:38 +0200] "GET /about.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.76.210 - [09/Jul/2026:07:15:39 +0200] "GET /cgi-bin/ HTTP/2.0" 404 1843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 207.189.21.144

🇮🇩 182.8.225.110

🇧🇷 177.72.85.181

🇫🇮 147.185.133.99

🇺🇸 91.230.168.235

🇺🇸 64.62.156.33

🇭🇰 45.120.216.232

🇮🇳 38.134.138.195

🇬🇧 35.203.211.15

🇺🇸 20.12.41.6

🇨🇳 219.152.10.35

🇬🇧 213.166.84.56

🇲🇽 189.192.87.92

🇧🇷 187.61.124.68

🇩🇪 178.105.87.232

🇺🇸 172.253.2.21

🇳🇱 159.223.5.51

🇺🇸 65.49.1.147

🇩🇪 47.245.140.136

🇫🇷 37.67.31.11