AbuseIPDB » 20.204.52.116

Check an IP Address, Domain Name, or Subnet

e.g. 18.232.31.206, microsoft.com, or 5.188.10.0/24

20.204.52.116 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 32%: ?

32%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.204.52.116

Whois 20.204.52.116

IP Abuse Reports for 20.204.52.116:

This IP address has been reported a total of 70 times from 35 distinct sources. 20.204.52.116 was first reported on July 23rd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
maxxsense	10 Dec 2022	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/ ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/-) show less	Port Scan
4server	10 Dec 2022	[SatDec1010:29:29.8021472022][:error][pid15382:tid47450052212480][client20.204.52.116:59263][client2 ... show more[SatDec1010:29:29.8021472022][:error][pid15382:tid47450052212480][client20.204.52.116:59263][client20.204.52.116]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"giftech.ch\"][uri\"/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php\"][unique_id\"Y5RReQEy_ENafcBfrbtHpAAAAMc\"]\,referer:https://www.google.com[SatDec1010:29:57.3762212022][:error][pid15382:tid47450129696512][client20.204.52.116:54273][client20.204.52.116]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][ show less	Port Scan Brute-Force Web App Attack
netfactotum	10 Dec 2022		Hacking Web App Attack
stinpriza	09 Dec 2022	common Web Exploits being scanned	Web App Attack
SleepyHosting	09 Dec 2022	(mod_security) mod_security (id:500200) triggered by 20.204.52.116 (US/United States/-): 5 in the la ... show more(mod_security) mod_security (id:500200) triggered by 20.204.52.116 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
AC - Team	09 Dec 2022	20.204.52.116 - - [09/Dec/2022:14:01:50 -0300] "GET /wp-content/plugins/cherry-plugin/admin/import-e ... show more20.204.52.116 - - [09/Dec/2022:14:01:50 -0300] "GET /wp-content/plugins/cherry-plugin/admin/import-export/download-content.php?file=../../../../../wp-config.php HTTP/1.1" 301 786 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
stinpriza	08 Dec 2022	common Web Exploits being scanned	Web App Attack
EIC	08 Dec 2022	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/ ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/-): (CF_ENABLE) show less	Port Scan
Anonymous	08 Dec 2022	[Thu Dec 08 09:29:13.283889 2022] [authz_core:error] [pid 4049] [client 20.204.52.116:59038] AH01630 ... show more[Thu Dec 08 09:29:13.283889 2022] [authz_core:error] [pid 4049] [client 20.204.52.116:59038] AH01630: client denied by server configuration: /var/www/vhosts/traumatic.de/httpdocs/www/elomix/wp-content/plugins/iwp-client, referer: https://www.google.com [Thu Dec 08 09:29:40.352409 2022] [authz_core:error] [pid 4801] [client 20.204.52.116:57865] AH01630: client denied by server configuration: /var/www/vhosts/traumatic.de/httpdocs/www/elomix/wp-content/plugins/wp-time-capsule, referer: https://www.google.com [Thu Dec 08 09:29:51.579881 2022] [authz_core:error] [pid 4048] [client 20.204.52.116:57023] AH01630: client denied by server configuration: /var/www/vhosts/traumatic.de/httpdocs/www/elomix/wp-content/plugins/themegrill-demo-importer, referer: https://www.google.com [Thu Dec 08 09:30:04.326646 2022] [authz_core:error] [pid 10968] [client 20.204.52.116:49742] AH01630: client denied by server configuration: /var/www/vhosts/traumatic.de/httpdocs/www/elomix/wp-content/plugins/advanced-imp ... show less	Hacking
Anonymous	08 Dec 2022	(mod_security) mod_security triggered on hostname [redacted] 20.204.52.116 (IN/India/-)	SQL Injection
4server	07 Dec 2022	[ThuDec0804:41:59.4468202022][:error][pid22359:tid47497607182080][client20.204.52.116:52435][client2 ... show more[ThuDec0804:41:59.4468202022][:error][pid22359:tid47497607182080][client20.204.52.116:52435][client20.204.52.116]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"emobilitytime.ch\"][uri\"/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php\"][unique_id\"Y5FdB_aZeLp2Eh77rbh0JAAAAAE\"]\,referer:https://www.google.com[ThuDec0804:42:24.2964092022][:error][pid22418:tid47497626093312][client20.204.52.116:55064][client20.204.52.116]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblock show less	Blog Spam
dwmp	07 Dec 2022	[Thu Dec 08 03:39:58.732863 2022] [authz_core:error] [pid 548244:tid 139848539162368] [client 20.204 ... show more[Thu Dec 08 03:39:58.732863 2022] [authz_core:error] [pid 548244:tid 139848539162368] [client 20.204.52.116:53098] AH01630: client denied by server configuration: /var/www/vhosts/erba-legale.it/httpdocs/wp-content/plugins/wp-time-capsule, referer: https://www.google.com [Thu Dec 08 03:40:28.787362 2022] [authz_core:error] [pid 548244:tid 139849629689600] [client 20.204.52.116:60626] AH01630: client denied by server configuration: /var/www/vhosts/erba-legale.it/httpdocs/wp-content/plugins/themegrill-demo-importer, referer: https://www.google.com [Thu Dec 08 03:40:53.954156 2022] [authz_core:error] [pid 555317:tid 139849596118784] [client 20.204.52.116:58803] AH01630: client denied by server configuration: /var/www/vhosts/erba-legale.it/httpdocs/wp-content/plugins/advanced-import, referer: https://www.google.com [Thu Dec 08 03:41:47.867984 2022] [authz_core:error] [pid 555317:tid 139849453508352] [client 20.204.52.116:57731] AH01630: client denied by server configuration: /var/www/vhosts ... show less	Brute-Force
MacLotsen	07 Dec 2022	[Thu Dec 08 02:57:27.228510 2022] [access_compat:error] [pid 616375] [client 20.204.52.116:63719] AH ... show more[Thu Dec 08 02:57:27.228510 2022] [access_compat:error] [pid 616375] [client 20.204.52.116:63719] AH01797: client denied by server configuration: /var/www/ellenbakt/wp-admin/admin-ajax.php, referer: https://www.google.com [Thu Dec 08 02:57:36.819624 2022] [access_compat:error] [pid 616214] [client 20.204.52.116:59957] AH01797: client denied by server configuration: /var/www/ellenbakt/wp-admin/admin-ajax.php, referer: https://www.google.com [Thu Dec 08 02:58:49.170125 2022] [access_compat:error] [pid 616215] [client 20.204.52.116:61829] AH01797: client denied by server configuration: /var/www/ellenbakt/wp-admin/admin-ajax.php, referer: https://www.google.com ... show less	Brute-Force Web App Attack
ANDREAS LYTOS	07 Dec 2022	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/ ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 20.204.52.116 (IN/India/-) show less	Port Scan
dwmp	07 Dec 2022	[Wed Dec 07 13:51:23.361099 2022] [authz_core:error] [pid 380885:tid 139849537369856] [client 20.204 ... show more[Wed Dec 07 13:51:23.361099 2022] [authz_core:error] [pid 380885:tid 139849537369856] [client 20.204.52.116:54233] AH01630: client denied by server configuration: /var/www/vhosts/energiamilano.it/httpdocs/wp-content/plugins/wp-time-capsule, referer: https://www.google.com [Wed Dec 07 13:51:36.693958 2022] [authz_core:error] [pid 380945:tid 139849587726080] [client 20.204.52.116:60222] AH01630: client denied by server configuration: /var/www/vhosts/energiamilano.it/httpdocs/wp-content/plugins/themegrill-demo-importer, referer: https://www.google.com [Wed Dec 07 13:51:59.017011 2022] [authz_core:error] [pid 380885:tid 139849621296896] [client 20.204.52.116:52523] AH01630: client denied by server configuration: /var/www/vhosts/energiamilano.it/httpdocs/wp-content/plugins/advanced-import, referer: https://www.google.com [Wed Dec 07 13:52:24.086971 2022] [authz_core:error] [pid 380885:tid 139848480446208] [client 20.204.52.116:61585] AH01630: client denied by server configuration: /var/www/ ... show less	Brute-Force