JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.96.117

20.104.96.117 was found in our database!

This IP was reported 304 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.96.117

Whois 20.104.96.117

IP Abuse Reports for 20.104.96.117:

This IP address has been reported a total of 304 times from 251 distinct sources. 20.104.96.117 was first reported on July 16th 2026, and the most recent report was 1 second ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-16 22:34:42 (1 second ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/cong.php	Web App Attack
🇩🇪 maxpower	2026-07-16 22:32:22 (2 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 36 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.104.96.117 - - [17/Jul/2026:00:32:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 355 "-" "-" "-" host=phedralms.aspi.arkon.it show less	Port Scan
🇺🇸 Gabriel Camargo	2026-07-16 22:30:57 (3 minutes ago)	20.104.96.117 - - [16/Jul/2026:17:30:51 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.96.117 - - [16/Jul/2026:17:30:51 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.104.96.117 - - [16/Jul/2026:17:30:57 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.104.96.117 - - [16/Jul/2026:17:30:57 -0500] "GET //ip.php HTTP/1.1" 301 178 "-" "-" ... show less	Brute-Force SSH
🇺🇸 antlac1	2026-07-16 22:30:47 (3 minutes ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2026-07-16 22:28:26 (6 minutes ago)	Wordpress vulnerability scanning ...	Web App Attack
🇸🇬 serverutama	2026-07-16 22:22:31 (12 minutes ago)	fail2ban[nginx-scanner]: scanning path sensitif (.git/.env/wp-config/secrets/dll).	Bad Web Bot Web App Attack
🇨🇭 beatsnet.com	2026-07-16 22:22:16 (12 minutes ago)	[Fri Jul 17 00:22:15.668519 2026] [proxy_fcgi:error] [pid 42803:tid 2490613985296] [client 20.104.96 ... show more [Fri Jul 17 00:22:15.668519 2026] [proxy_fcgi:error] [pid 42803:tid 2490613985296] [client 20.104.96.117:20358] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:22:15.775200 2026] [proxy_fcgi:error] [pid 42803:tid 2490613985296] [client 20.104.96.117:20358] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:22:16.014404 2026] [proxy_fcgi:error] [pid 42803:tid 2490613985296] [client 20.104.96.117:20358] AH01071: Got error 'Primary script unknown' [Fri Jul 17 00:22:16.338368 2026] [proxy_fcgi:error] [pid 42803:tid 2490613987344] [client 20.104.96.117:20358] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
Anonymous	2026-07-16 22:21:19 (13 minutes ago)	20.104.96.117 - - [17/Jul/2026:06:21:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.96.117 - - [17/Jul/2026:06:21:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET //ip.php HTTP/1.1" 404 16 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET //ip.php HTTP/1.1" 404 16 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /fw/faiyy.php HTTP/1.1" 404 196 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /fw/faiyy.php HTTP/1.1" 404 196 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /wp-temp.php HTTP/1.1" 404 16 "-" "-" 20.104.96.117 - - [17/Jul/2026:06:21:18 +0800] "GET /wp-temp.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-16 22:16:54 (17 minutes ago)	Attempt to scan vulnerabilities	Hacking
🇩🇪 maxpower	2026-07-16 22:16:21 (18 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 36 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.104.96.117 - - [17/Jul/2026:00:16:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 320 "-" "-" "-" host=keyprint.com.br show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-07-16 22:05:34 (29 minutes ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
🇨🇭 Mario Bretscher	2026-07-16 22:02:53 (31 minutes ago)	[Fri Jul 17 00:02:51.477005 2026] [php:error] [pid 299279] [client 20.104.96.117:17378] script '/var ... show more [Fri Jul 17 00:02:51.477005 2026] [php:error] [pid 299279] [client 20.104.96.117:17378] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Jul 17 00:02:51.921728 2026] [php:error] [pid 299279] [client 20.104.96.117:17378] script '/var/www/html/ip.php' not found or unable to stat [Fri Jul 17 00:02:52.132631 2026] [php:error] [pid 299279] [client 20.104.96.117:17378] script '/var/www/html/wp-temp.php' not found or unable to stat ... show less	Web App Attack
🇫🇷 tecnicorioja	2026-07-16 22:01:00 (33 minutes ago)	wp-login attack [16/Jul/2026:19:46:38	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-16 22:00:54 (33 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 36 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.104.96.117 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.104.96.117 - - [17/Jul/2026:00:00:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 355 "-" "-" "-" host=phedralms.aspi.arkon.it show less	Port Scan
Anonymous	2026-07-16 21:56:23 (38 minutes ago)	WordPress/Woo probe	Web App Attack

Showing 1 to 15 of 304 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 64.89.163.92

🇧🇷 201.77.124.248

🇧🇪 198.235.24.232

🇫🇮 147.185.133.223

🇩🇪 139.59.208.225

🇹🇼 128.14.229.76

🇨🇳 116.255.226.73

🇮🇳 103.54.101.203

🇭🇰 101.36.108.158

🇩🇪 77.90.19.14

🇺🇸 67.102.248.72

🇲🇾 66.23.162.13

🇺🇸 47.77.182.54

🇳🇱 45.148.10.151

🇱🇹 5.181.86.46

🇪🇬 196.218.11.50

🇺🇸 147.185.132.114

🇹🇼 111.242.97.61

🇮🇩 103.24.212.42

🇺🇸 68.167.246.182