JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.104.98.143

20.104.98.143 was found in our database!

This IP was reported 318 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.104.98.143

Whois 20.104.98.143

IP Abuse Reports for 20.104.98.143:

This IP address has been reported a total of 318 times from 248 distinct sources. 20.104.98.143 was first reported on May 29th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aranguren.org	2026-05-29 17:18:20 (5 days ago)	20.104.98.143 - - [30/May/2026:03:18:18 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.98.143 - - [30/May/2026:03:18:18 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 983 "-" "-" 20.104.98.143 - - [30/May/2026:03:18:18 +1000] "GET /wk/index.php HTTP/1.1" 404 983 "-" "-" 20.104.98.143 - - [30/May/2026:03:18:19 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 983 "-" "-" 20.104.98.143 - - [30/May/2026:03:18:19 +1000] "GET /1.php HTTP/1.1" 404 16 "-" "-" 20.104.98.143 - - [30/May/2026:03:18:19 +1000] "GET /wp-admin/about.php HTTP/1.1" 404 983 "-" "-" 20.104.98.143 - - [30/May/2026:03:18:19 +1000] "GET /ioxi-o.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇩🇪 Serpentex	2026-05-29 17:15:28 (5 days ago)	20.104.98.143 - - [29/May/2026:19:14:51 +0200] "GET /cgi-bin/ HTTP/1.1" 404 865 "-" "-" 20.104.98.14 ... show more 20.104.98.143 - - [29/May/2026:19:14:51 +0200] "GET /cgi-bin/ HTTP/1.1" 404 865 "-" "-" 20.104.98.143 - - [29/May/2026:19:14:58 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 865 "-" "-" 20.104.98.143 - - [29/May/2026:19:15:27 +0200] "GET /wp-signup.php HTTP/1.1" 404 865 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-05-29 17:10:32 (5 days ago)	T: f2b 404 5x	Web App Attack
🇺🇸 paulo.apoloni	2026-05-29 16:53:29 (5 days ago)	20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 146 "-" "-" 20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-admin/about.php HTTP/1.1" 404 146 "-" "-" 20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-admin/includes/index.php HTTP/1.1" 404 146 "-" "-" 20.104.98.143 - - [29/May/2026:13:53:28 -0300] "GET /wp-content/1.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-05-29 16:43:04 (5 days ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇺🇸 lavnet.net	2026-05-29 16:38:54 (5 days ago)	20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 4699 "-" ... show more 20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 4699 "-" "-" 20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /admin.phphttps:/www-vn500.com/inputs.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /admin.phphttps:/www-vn500.com/inputs.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /images/images/about.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:38:54 +0000] "GET /images/images/about.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
🇵🇱 strefapi_com	2026-05-29 16:28:47 (5 days ago)	Brute-force on web app ...	Brute-Force Web App Attack
🇺🇸 almazick	2026-05-29 16:25:05 (5 days ago)	Fail2Ban jail window on srv1.windowrepair.us banned 20.104.98.143 after 1 attempts	Bad Web Bot Web App Attack
🇺🇸 helios.live	2026-05-29 16:17:03 (5 days ago)	2026/05/29 16:17:01 [error] 2358177#2358177: 1207748 FastCGI sent in stderr: "Primary script unknow ... show more 2026/05/29 16:17:01 [error] 2358177#2358177: 1207748 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.104.98.143, server: huginn.kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm.sock:", host: "huginn.kocerroxy.com" 2026/05/29 16:17:02 [error] 2358177#2358177: 1207748 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.104.98.143, server: huginn.kocerroxy.com, request: "GET /wk/index.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm.sock:", host: "huginn.kocerroxy.com" 2026/05/29 16:17:02 [error] 2358177#2358177: 1207748 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.104.98.143, server: huginn.kocerroxy.com, request: "GET /wp-content/plugins/admin.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm.sock ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-29 16:17:01 (5 days ago)	20.104.98.143 - - [29/May/2026:19:17:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.98.143 - - [29/May/2026:19:17:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 707 "-" "-" ... show less	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-05-29 16:11:07 (5 days ago)	20.104.98.143 - - [29/May/2026:10:11:06 -0600] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 4 ... show more 20.104.98.143 - - [29/May/2026:10:11:06 -0600] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 487 "-" "-" ... show less	Web App Attack
🇺🇸 lavnet.net	2026-05-29 16:08:45 (5 days ago)	20.104.98.143 - - [29/May/2026:16:08:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.104.98.143 - - [29/May/2026:16:08:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4698 "-" "-" 20.104.98.143 - - [29/May/2026:16:08:45 +0000] "GET /wk/index.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:08:45 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:08:45 +0000] "GET /1.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:08:45 +0000] "GET /wp-admin/about.php HTTP/1.1" 404 2050 "-" "-" 20.104.98.143 - - [29/May/2026:16:08:45 +0000] "GET /ioxi-o.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
🇩🇪 Gwyneth Llewelyn	2026-05-29 16:06:12 (5 days ago)	20.104.98.143 - - [29/May/2026:17:06:10 +0100] "GET /cgi-bin HTTP/1.1" 404 2480 "-" "-"	Bad Web Bot
🇩🇪 s@ch@	2026-05-29 16:00:05 (5 days ago)	Jail: plesk-apache \| Web application attack (Plesk Apache)	Web App Attack
🇳🇱 Roderic	2026-05-29 15:51:32 (5 days ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan

Showing 121 to 135 of 318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.175

🇳🇱 193.176.31.236

🇳🇱 176.65.139.251

🇺🇸 172.217.46.17

🇺🇸 132.145.213.106

🇲🇲 103.59.163.132

🇱🇹 81.30.98.158

🇫🇮 80.66.83.43

🇺🇸 66.85.134.164

🇺🇸 65.49.20.73

🇲🇾 47.250.50.233

🇺🇸 47.77.190.158

🇯🇵 20.153.204.5

🇺🇸 20.80.105.229

🇫🇷 212.73.217.80

🇯🇵 212.32.76.53

🇸🇾 188.132.249.247

🇧🇷 177.70.165.173

🇨🇳 113.221.46.158

🇮🇳 103.75.32.1