JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.97.185

20.104.97.185 was found in our database!

This IP was reported 339 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.97.185

Whois 20.104.97.185

IP Abuse Reports for 20.104.97.185:

This IP address has been reported a total of 339 times from 262 distinct sources. 20.104.97.185 was first reported on March 1st 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-08 19:48:20 (6 months ago)	$f2bV_matches	Brute-Force
🇺🇸 Dolutech.com	2026-03-07 11:40:45 (6 months ago)	BF Attack detected Dolutech	Brute-Force
🇪🇸 Gem	2026-03-06 23:11:33 (6 months ago)	Unauthorized web scan.	Web App Attack
🇬🇧 sc user	2026-03-06 08:55:39 (6 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-03-04 06:22:11 (6 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇫🇷 SpaceHost-Server	2026-03-03 23:45:02 (6 months ago)		Brute-Force Web App Attack
🇩🇪 Holger	2026-03-03 19:11:28 (6 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇧🇪 boxed-it	2026-03-03 12:57:05 (6 months ago)	GET /wp-content/uploads/index.php (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇭🇺 DumaNet	2026-03-03 00:58:00 (6 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 02. 02:31:28 Source IP: 20.104 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 02. 02:31:28 Source IP: 20.104.97.185 Portion of the log(s): 20.104.97.185 - [02/Mar/2026:02:30:09 +0100] "GET /goods.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [02/Mar/2026:02:30:09 +0100] "GET /xmlrpc.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [02/Mar/2026:02:30:09 +0100] "GET /wp-good.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [02/Mar/2026:02:30:09 +0100] "GET /adminfuns.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [02/Mar/2026:02:30:09 +0100] "GET /file.php HTTP/1.1" 404 555 "-" "Mo show less	Web App Attack
🇭🇺 DumaNet	2026-03-03 00:38:00 (6 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 01. 22:20:12 Source IP: 20.104 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 01. 22:20:12 Source IP: 20.104.97.185 Portion of the log(s): 20.104.97.185 - [01/Mar/2026:22:20:12 +0100] "GET /404.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [01/Mar/2026:22:20:12 +0100] "GET /ws.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [01/Mar/2026:22:20:12 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [01/Mar/2026:22:20:12 +0100] "GET /index/function.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.97.185 - [01/Mar/2026:22:20:11 +0100] "GET /an.php HTTP/1.1" 404 555 "-" show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-03-02 23:43:39 (6 months ago)		Brute-Force Web App Attack
🇫🇷 Murazaki	2026-03-02 23:22:21 (6 months ago)	mehdibenadel.com 20.104.97.185 - - [02/Mar/2026:00:32:09 +0100] "GET /cgi-bin/ HTTP/1.1" 404 74634 " ... show more mehdibenadel.com 20.104.97.185 - - [02/Mar/2026:00:32:09 +0100] "GET /cgi-bin/ HTTP/1.1" 404 74634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.4:80" mail.benadel.fr 20.104.97.185 - - [02/Mar/2026:00:55:51 +0100] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.59:80" mail.benadel.fr 20.104.97.185 - - [02/Mar/2026:00:55:53 +0100] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.59:80" mail.balamb.fr 20.104.97.185 - - [02/Mar/2026:00:59:12 +0100] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.59:80" mail.balamb.fr 20.104.97.185 - - [02/Mar/2026:00:59:14 +0100] "GET ... show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-03-02 23:00:43 (6 months ago)	Auto-ban: 12 malicious requests on 2026-03-01 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 12 malicious requests on 2026-03-01 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇨🇦 saudetski	2026-03-02 21:03:30 (6 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-03-02 20:11:51 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 339 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::38

🇨🇩 169.159.210.118

🇵🇭 165.154.59.90

🇺🇸 162.216.149.80

🇺🇸 137.184.129.137

🇨🇳 124.193.81.23

🇩🇪 82.139.195.111

🇸🇬 47.128.38.81

🇺🇸 40.124.186.172

🇺🇸 20.168.116.153

🇪🇬 197.56.33.48

🇫🇮 147.185.133.215

🇵🇱 138.124.64.90

🇹🇭 125.26.202.220

🇰🇿 88.204.196.70

🇷🇴 80.94.92.234

🇮🇩 212.34.194.21

🇨🇳 203.176.95.143

🇪🇨 191.99.71.161

🇫🇷 176.31.21.38