JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.218.104.173

20.218.104.173 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.218.104.173

Whois 20.218.104.173

IP Abuse Reports for 20.218.104.173:

This IP address has been reported a total of 181 times from 139 distinct sources. 20.218.104.173 was first reported on July 23rd 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 ScamAware	2026-07-24 13:14:55 (8 minutes ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 25. Unique request paths counted internally: 25. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇬🇧 Oakley	2026-07-24 13:03:29 (20 minutes ago)	(mod_security) mod_security (id:900191) triggered by 20.218.104.173 (DE/Germany/-): 5 in the last 90 ... show more (mod_security) mod_security (id:900191) triggered by 20.218.104.173 (DE/Germany/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇩🇪 curiosity	2026-07-24 12:54:35 (29 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-07-24 12:31:59 (51 minutes ago)	CrowdSec: crowdsecurity/http-probing \| req: /wp-content/plugins/hellopress/wp_filemanager.php \| 11 d ... show more CrowdSec: crowdsecurity/http-probing \| req: /wp-content/plugins/hellopress/wp_filemanager.php \| 11 distinct paths \| UA: - show less	Port Scan Web App Attack
🇩🇪 Ba-Yu	2026-07-24 11:32:59 (1 hour ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-24 11:24:20 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇮🇩 sockominfo	2026-07-24 11:00:28 (2 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
Anonymous	2026-07-24 10:59:03 (2 hours ago)	XSS Attempt	Hacking
Anonymous	2026-07-24 10:07:33 (3 hours ago)	[Fri Jul 24 12:07:31.895204 2026] [authz_core:error] [pid 75938:tid 75938] [client 20.218.104.173:62 ... show more [Fri Jul 24 12:07:31.895204 2026] [authz_core:error] [pid 75938:tid 75938] [client 20.218.104.173:6230] AH01630: client denied by server configuration: /var/lib/slidge/attachments ... show less	Brute-Force Web App Attack
🇺🇸 chrisj	2026-07-24 10:02:28 (3 hours ago)	[Fri Jul 24 09:52:21.694872 2026] [proxy_fcgi:error] [pid 308673:tid 308727] [client 20.218.104.173: ... show more [Fri Jul 24 09:52:21.694872 2026] [proxy_fcgi:error] [pid 308673:tid 308727] [client 20.218.104.173:6166] AH01071: Got error 'Primary script unknown' [Fri Jul 24 10:02:27.631432 2026] [proxy_fcgi:error] [pid 308673:tid 308752] [client 20.218.104.173:6269] AH01071: Got error 'Primary script unknown' [Fri Jul 24 10:02:27.828833 2026] [proxy_fcgi:error] [pid 308673:tid 308730] [client 20.218.104.173:6269] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇨🇦 john doe	2026-07-24 09:51:35 (3 hours ago)	SentinelBot: Admin Panel Probe (score: 74)	Bad Web Bot
🇺🇸 chrisj	2026-07-24 09:42:15 (3 hours ago)	[Fri Jul 24 09:42:14.865015 2026] [proxy_fcgi:error] [pid 308673:tid 308729] [client 20.218.104.173: ... show more [Fri Jul 24 09:42:14.865015 2026] [proxy_fcgi:error] [pid 308673:tid 308729] [client 20.218.104.173:6236] AH01071: Got error 'Primary script unknown' [Fri Jul 24 09:42:15.066673 2026] [proxy_fcgi:error] [pid 308673:tid 308755] [client 20.218.104.173:6236] AH01071: Got error 'Primary script unknown' [Fri Jul 24 09:42:15.264979 2026] [proxy_fcgi:error] [pid 308673:tid 308751] [client 20.218.104.173:6236] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-24 09:37:20 (3 hours ago)	[Fri Jul 24 11:37:18.965846 2026] [authz_core:error] [pid 75668:tid 75668] [client 20.218.104.173:62 ... show more [Fri Jul 24 11:37:18.965846 2026] [authz_core:error] [pid 75668:tid 75668] [client 20.218.104.173:6232] AH01630: client denied by server configuration: /var/lib/slidge/attachments [Fri Jul 24 11:37:19.014384 2026] [authz_core:error] [pid 75668:tid 75668] [client 20.218.104.173:6232] AH01630: client denied by server configuration: /var/lib/slidge/attachments [Fri Jul 24 11:37:19.059725 2026] [authz_core:error] [pid 75668:tid 75668] [client 20.218.104.173:6232] AH01630: client denied by server configuration: /var/lib/slidge/attachments ... show less	Brute-Force Web App Attack
🇬🇧 pinguin	2026-07-24 09:30:36 (3 hours ago)	Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: /kir.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Fnek	2026-07-24 08:45:01 (4 hours ago)	crowdsecurity/generic-wordpress-uploads-listing - 202607241045	Hacking

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9440:3af::5e:4a

🇹🇭 159.192.133.140

🇺🇸 66.132.195.86

🇺🇸 51.81.171.148

🇵🇾 45.235.122.140

🇺🇸 34.94.4.247

🇰🇷 211.223.107.86

🇳🇵 202.51.80.169

🇲🇽 189.204.230.91

🇺🇸 162.216.149.179

🇺🇸 107.178.149.246

🇱🇹 81.30.98.44

🇬🇧 35.203.211.168

🇺🇸 198.154.216.214

🇬🇧 193.46.0.183

🇧🇷 179.151.39.53

🇲🇽 177.227.193.131

🇳🇱 176.65.148.150

🇵🇱 176.53.159.197

🇫🇷 91.196.152.197