JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.87.97

20.104.87.97 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.87.97

Whois 20.104.87.97

IP Abuse Reports for 20.104.87.97:

This IP address has been reported a total of 268 times from 250 distinct sources. 20.104.87.97 was first reported on August 24th 2026, and the most recent report was 34 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-08-24 16:50:38 (34 seconds ago)	(mod_security) mod_security (id:20000010) triggered by 20.104.87.97 (CA/Canada/-): 5 in the last 300 ... show more (mod_security) mod_security (id:20000010) triggered by 20.104.87.97 (CA/Canada/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
Anonymous	2026-08-24 16:49:10 (2 minutes ago)	IP banned by Fail2Ban	Brute-Force SSH
🇦🇺 KevinNeale	2026-08-24 16:47:27 (3 minutes ago)	Fail2Ban recidive block for repeated malicious authentication attempts.	Brute-Force Web App Attack
🇫🇷 venar	2026-08-24 16:46:05 (5 minutes ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇦🇹 vikal	2026-08-24 16:44:42 (6 minutes ago)	20.104.87.97 - - [24/Aug/2026:18:44:42 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.104.87.97 - - [24/Aug/2026:18:44:42 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Brute-Force SSH
🇳🇱 Brict IT	2026-08-24 16:44:40 (6 minutes ago)		Bad Web Bot Web App Attack
🇩🇪 bsoft.de	2026-08-24 16:44:20 (6 minutes ago)	20.104.87.97 - - [24/Aug/2026:17:42:21 +0200] "GET /wp-login.php HTTP/1.1" 200 9923 "-" "-" 20.104.8 ... show more 20.104.87.97 - - [24/Aug/2026:17:42:21 +0200] "GET /wp-login.php HTTP/1.1" 200 9923 "-" "-" 20.104.87.97 - - [24/Aug/2026:17:43:00 +0200] "GET /wpsearch/wp-login.php HTTP/1.1" 404 61293 "-" "-" 20.104.87.97 - - [24/Aug/2026:18:44:19 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇳🇱 tmiland	2026-08-24 16:43:45 (7 minutes ago)	(wordpress_login) WordPress Login Attack 20.104.87.97 (CA/Canada/-): 3 in the last 3600 secs; IP: 20 ... show more (wordpress_login) WordPress Login Attack 20.104.87.97 (CA/Canada/-): 3 in the last 3600 secs; IP: 20.104.87.97; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.104.87.97 - - [24/Aug/2026:18:43:36 +0200] "GET /wp-login.php HTTP/1.1" 302 138 "-" "-" 20.104.87.97 - - [24/Aug/2026:18:43:36 +0200] "GET /wp-login.php HTTP/1.1" 200 6851 "-" "-" 20.104.87.97 - - [24/Aug/2026:18:43:41 +0200] "GET /wpsearch/wp-login.php HTTP/1.1" 302 138 "-" "-" show less	Brute-Force
🇫🇷 LRNP	2026-08-24 16:43:28 (7 minutes ago)	_:80 20.104.87.97 - - [24/Aug/2026:16:43:26 +0000] "GET /wp-content/themes/hueman/404.php HTTP/1.1" ... show more _:80 20.104.87.97 - - [24/Aug/2026:16:43:26 +0000] "GET /wp-content/themes/hueman/404.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:26 +0000] "GET /404.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:26 +0000] "GET /lc.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:26 +0000] "GET /bv3.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /ol.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /nc4.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /co.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /aua.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /Sanskrit.php HTTP/1.1" 404 146 "-" "-" _:80 20.104.87.97 - - [24/Aug/2026:16:43:27 +0000] "GET /great.php HTTP/1.1" 404 146 "-" "-" ... show less	Bad Web Bot Web App Attack
🇮🇩 soc-yk	2026-08-24 16:42:09 (9 minutes ago)	Type: web_scanning Risk: 100 Events: 133 Evidence: - Automated hostile web probing detected - Repea ... show more Type: web_scanning Risk: 100 Events: 133 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇳🇱 wlt-blocker	2026-08-24 16:41:19 (9 minutes ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇦 Not Fake	2026-08-24 16:41:07 (10 minutes ago)	$f2bV_matches	Web App Attack
🇫🇷 Kraften	2026-08-24 16:39:01 (12 minutes ago)	GET Web noscript attack ...	Web Spam Web App Attack
🇵🇱 tomkolp	2026-08-24 16:38:36 (12 minutes ago)	CrowdSec - Scenario: crowdsecurity/http-probing. Duration: 4h.	Port Scan Web App Attack
🇩🇪 maxpower	2026-08-24 16:38:31 (12 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.87.97 (CA/Canada/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.87.97 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.104.87.97 - - [24/Aug/2026:18:38:30 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-" host=ns2.spacehosting.ovh show less	Port Scan

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.126.92

🇮🇳 38.188.182.70

🇧🇷 187.4.56.225

🇺🇸 147.185.132.243

🇮🇩 114.10.129.38

🇮🇩 103.190.28.4

🇳🇱 91.92.40.37

🇮🇹 87.20.247.37

🇮🇳 49.204.201.131

🇲🇾 47.250.133.175

🇩🇪 47.245.139.161

🇵🇰 39.43.41.152

🇩🇪 178.27.90.142

🇺🇸 109.105.210.85

🇺🇸 91.230.168.25

🇺🇸 82.23.222.19

🇮🇪 31.57.56.146

🇫🇷 2001:41d0:303:8732::1

🇺🇦 195.211.253.172

🇭🇰 172.253.5.18