JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.117.104.64

20.117.104.64 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.117.104.64

Whois 20.117.104.64

IP Abuse Reports for 20.117.104.64:

This IP address has been reported a total of 16 times from 12 distinct sources. 20.117.104.64 was first reported on April 8th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 Birdflew	2022-04-18 02:24:23 (4 years ago)	Port scanning	Hacking
🇬🇧 Epimetheus	2022-04-18 00:56:38 (4 years ago)	Unauthorized access attempts: From: 20.117.104.64 Method: HTTP GET URI Path: /wp-includes/wlwm ... show more Unauthorized access attempts: From: 20.117.104.64 Method: HTTP GET URI Path: /wp-includes/wlwmanifest.xml UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇮🇩 top tap	2022-04-18 00:51:18 (4 years ago)	20.117.104.64 - - [18/Apr/2022:11:39:56 +0700] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 ... show more 20.117.104.64 - - [18/Apr/2022:11:39:56 +0700] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.117.104.64 - - [18/Apr/2022:11:39:56 +0700] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.0" 404 394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.117.104.64 - - [18/Apr/2022:11:39:56 +0700] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.0" 404 394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.117.104.64 - - [18/Apr/2022:11:39:57 +0700] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.0" 404 393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇬🇧 Epimetheus	2022-04-18 00:28:39 (4 years ago)	Unauthorized access attempts: From: 20.117.104.64 Method: HTTP GET URI Path: /cms/wp-includes/ ... show more Unauthorized access attempts: From: 20.117.104.64 Method: HTTP GET URI Path: /cms/wp-includes/wlwmanifest.xml UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇳🇿 Tripwire	2022-04-17 17:46:23 (4 years ago)	Scanning for exploits - //wp-includes/wlwmanifest.xml	Web App Attack
🇲🇾 syokadmin	2022-04-16 19:50:35 (4 years ago)	(PERMBLOCK) 20.117.104.64 (GB/United Kingdom/-) has had more than 2 temp blocks in the last 86400 se ... show more (PERMBLOCK) 20.117.104.64 (GB/United Kingdom/-) has had more than 2 temp blocks in the last 86400 secs show less	Brute-Force
🇲🇾 syokadmin	2022-04-16 15:07:59 (4 years ago)	20.117.104.64 (GB/United Kingdom/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
🇸🇬 Sofibox Cyberwatch	2022-04-16 12:31:51 (4 years ago)	[bad_ip: 20.117.104.64 [alert_level: Medium Risk [inbound(1)+outbound(0): 1 [target_port: 443 [class ... show more [bad_ip: 20.117.104.64 [alert_level: Medium Risk [inbound(1)+outbound(0): 1 [target_port: 443 [class: nil [msg: SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) [csf_block_status: ok-ip-block-success [blcheck_ip_score: 97.38% (5/191) [blcheck_domain: "dnsbl.spfbl.net,cbl.abuseat.org,sbl-xbl.spamhaus.org,xbl.spamhaus.org,zen.spamhaus.org" [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(0) show less	Web App Attack
🇧🇪 taivas.nl	2022-04-15 00:32:15 (4 years ago)	Many_bad_calls	Web App Attack
🇨🇭 zynex	2022-04-15 00:11:59 (4 years ago)	URL Probing: /2019/wp-includes/wlwmanifest.xml	Web App Attack
🇧🇪 taivas.nl	2022-04-14 21:02:07 (4 years ago)	Bad_requests	Bad Web Bot
🇫🇷 geot	2022-04-12 08:17:41 (4 years ago)	POST / HTTP/1.1 GET /.env HTTP/1.1	Hacking Web App Attack
🇪🇸 10dencehispahard SL	2022-04-10 22:19:02 (4 years ago)	Suspicious activity detected by Modsecurity [Application attack LFI]	Hacking Web App Attack
🇲🇾 syokadmin	2022-04-10 10:36:57 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.117.104.64 (GB/United Kingdom/-): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 20.117.104.64 (GB/United Kingdom/-): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2022-04-10 10:16:56 (4 years ago)	20.117.104.64 - - [10/Apr/2022:16:16:55 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (X11; L ... show more 20.117.104.64 - - [10/Apr/2022:16:16:55 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 46.247.61.177

🇨🇱 191.112.20.176

🇺🇸 147.90.234.14

🇹🇷 146.19.125.65

🇿🇦 102.212.64.41

🇺🇸 70.184.91.124

🇺🇸 47.251.29.173

🇨🇦 45.194.92.106

🇭🇰 43.162.198.245

🇨🇳 42.49.168.98

🇺🇸 20.29.58.147

🇹🇭 2405:9800:b950:f2b1:311a:2d29:ede:8415

🇺🇦 185.177.188.12

🇺🇸 148.59.129.81

🇹🇼 128.14.237.130

🇲🇦 105.74.131.148

🇺🇸 67.162.233.0

🇺🇸 52.167.144.177

🇪🇨 45.163.204.245

🇳🇱 45.148.10.152