JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.204.5.161

20.204.5.161 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.204.5.161

Whois 20.204.5.161

IP Abuse Reports for 20.204.5.161:

This IP address has been reported a total of 129 times from 113 distinct sources. 20.204.5.161 was first reported on July 1st 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-03 03:10:44 (16 hours ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.204.5.161 172.71.202.97 - - [01/Jul/2026:17:45:31 - ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.204.5.161 172.71.202.97 - - [01/Jul/2026:17:45:31 -0300] "GET /a.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:31 -0300] "GET /aa.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:32 -0300] "GET /aaa.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:32 -0300] "GET /ab.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:33 -0300] "GET /lock360.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:33 -0300] "GET /anonse/lock360.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.129 - - [01/Jul/2026:17:45:33 -0300] "GET /file5.php HTTP/1.1" 404 414 20.204.5.161 172.71.202.97 - - [01/Jul/2026:17:45:34 -0300] "GET /sitemaps.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-07-03 02:22:22 (17 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 00:05:03 (19 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 22:29:30 (21 hours ago)		Brute-Force Web App Attack
Anonymous	2026-07-02 20:11:04 (23 hours ago)	Cyber.Irish SIEM auto-block: Web - Sensitive File Access Attempt	Web App Attack
🇬🇧 openstrike.co.uk	2026-07-02 05:14:56 (1 day ago)	154 attacks on PHP URLs: GET /inputs.php HTTP/1.1	Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-07-02 04:14:49 (1 day ago)	CloudFlare WAF REPORT: /inputs.php	Bad Web Bot Web App Attack
🇺🇸 slay3r9903	2026-07-02 03:41:21 (1 day ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇩🇪 updown.io	2026-07-02 03:27:57 (1 day ago)	{"level":"info","ts":1782961794.571642,"logger":"http.log.access.log0","msg":"handled request","requ ... show more {"level":"info","ts":1782961794.571642,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.204.5.161","remote_port":"10407","client_ip":"20.204.5.161","proto":"HTTP/1.1","method":"GET","host":"uc9o.status.updown.io","uri":"/admin.php","headers":{"Sec-Fetch-Site":["none"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US, en; q=0.9"],"Sec-Fetch-Dest":["document"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Connection":["keep-alive"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-User":["?1"],"Cache-Control":["max-age=0"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, /; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"Accept-Encoding":["gzip, deflate, br"],"Sec-Ch-Ua-Mobile":["?0"],"Dnt":["1 ... show less	DDoS Attack Web App Attack
Anonymous	2026-07-02 03:25:44 (1 day ago)	20.204.5.161 - - [02/Jul/2026:05:25:39 +0200] "GET /a.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/J ... show more 20.204.5.161 - - [02/Jul/2026:05:25:39 +0200] "GET /a.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:39 +0200] "GET /aa.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:40 +0200] "GET /aaa.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:40 +0200] "GET /ab.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:40 +0200] "GET /lock360.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:41 +0200] "GET /anonse/lock360.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:41 +0200] "GET /file5.php HTTP/1.1" 404 48040 20.204.5.161 - - [02/Jul/2026:05:25:41 +0200] "GET /sitemaps.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:42 +0200] "GET /ioxi-o.php HTTP/1.1" 404 52838 20.204.5.161 - - [02/Jul/2026:05:25:42 +0200] "GET /load.php HTTP/1.1" 404 52838 ... show less	Web Spam Web App Attack
🇮🇹 Inartis	2026-07-02 03:18:28 (1 day ago)	20.204.5.161 - - [02/Jul/2026:05:17:43 +0200] "GET /admin.php HTTP/1.1" 404 47735 "-" "Mozilla/5.0 ( ... show more 20.204.5.161 - - [02/Jul/2026:05:17:43 +0200] "GET /admin.php HTTP/1.1" 404 47735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.5.161 - - [02/Jul/2026:05:18:26 +0200] "GET /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.204.5.161 - - [02/Jul/2026:05:18:26 +0200] "GET /xmlrpc.php0 HTTP/1.1" 404 47739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-07-02 03:17:25 (1 day ago)	[Thu Jul 02 04:17:24.099870 2026] [proxy_fcgi:error] [pid 1390873:tid 139821175531072] [client 20.20 ... show more [Thu Jul 02 04:17:24.099870 2026] [proxy_fcgi:error] [pid 1390873:tid 139821175531072] [client 20.204.5.161:12232] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:17:24.274147 2026] [proxy_fcgi:error] [pid 1390873:tid 139822742292032] [client 20.204.5.161:12232] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:17:24.428181 2026] [proxy_fcgi:error] [pid 1390873:tid 139822232487488] [client 20.204.5.161:12232] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:17:24.583074 2026] [proxy_fcgi:error] [pid 1390873:tid 139822759077440] [client 20.204.5.161:12232] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:17:24.747846 2026] [proxy_fcgi:error] [pid 1390873:tid 139822750684736] [client 20.204.5.161:12232] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇦🇺 nzhost.co.nz	2026-07-02 03:11:36 (1 day ago)	$f2bV_matches	Hacking Brute-Force
🇫🇷 mrcrassi	2026-07-02 03:10:00 (1 day ago)	Triggered Cloudflare WAF (botFight) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /class_api.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 SiyCah	2026-07-02 03:00:02 (1 day ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.79.222.26

🇺🇸 72.215.46.114

🇺🇸 54.158.221.244

🇬🇧 2a06:4880:6000::7d

🇨🇳 203.189.195.8

🇸🇬 146.174.163.25

🇺🇸 104.168.4.167

🇫🇷 62.84.185.63

🇧🇷 4.203.116.41

🇺🇸 199.195.251.168

🇸🇪 171.25.158.58

🇺🇸 167.71.240.77

🇻🇳 104.218.166.62

🇮🇳 103.127.30.137

🇨🇳 101.126.89.164

🇺🇸 72.63.20.243

🇺🇦 62.182.64.74

🇯🇵 20.46.122.193

🇺🇸 209.141.41.212

🇧🇷 205.210.31.167