JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.244.61.204

20.244.61.204 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 79%: ?

79%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.244.61.204

Whois 20.244.61.204

IP Abuse Reports for 20.244.61.204:

This IP address has been reported a total of 19 times from 13 distinct sources. 20.244.61.204 was first reported on September 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-09-17 10:01:20 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 09:58:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:58:24.680871 2026] [security2:error] [pid 9619:tid 9619] [client 20.244.61.204:6137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vansfanz.rollinchassis.com"] [uri "/wp-config.php.bak"] [unique_id "aqu5wJBzdT1HRlW-k6uqAwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 09:33:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:33:33.241165 2026] [security2:error] [pid 617:tid 617] [client 20.244.61.204:5888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hayrun.com"] [uri "/wp-config.php.bak"] [unique_id "aquz7SAL_GbUEybGWAWDiAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:40:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:40:27.139627 2026] [security2:error] [pid 40099:tid 40099] [client 20.244.61.204:1741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.joevallone.com"] [uri "/wp-config.php.bak"] [unique_id "aquneya6pwDJw1Zzhq-H5wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 07:42:15 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:42:08.473111 2026] [security2:error] [pid 7773:tid 7773] [client 20.244.61.204:6095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikinitweets.com"] [uri "/wp-config.php.bak"] [unique_id "aquZ0NDUxp-7t4U4hGPr9gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-17 07:11:44 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇧🇪 taivas.nl	2026-09-17 04:33:35 (1 day ago)	Many_bad_calls	Web App Attack
🇫🇷 masterguru	2026-09-17 04:04:21 (1 day ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-17 03:59:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:59:47.903015 2026] [security2:error] [pid 8757:tid 8757] [client 20.244.61.204:3267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/wp-config.php.bak"] [unique_id "aqtls6c2UcOPG3dgXD-BsgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 03:27:33 (1 day ago)	[ns41.kdns.gr] httpd-config-scan: sites=www.koukas-machines.com; logs=/var/log/httpd/domains/koukas- ... show more [ns41.kdns.gr] httpd-config-scan: sites=www.koukas-machines.com; logs=/var/log/httpd/domains/koukas-machines.com.log; samples=/wp-config.php.bak \| /wp-config.php~ \| /wp-config.php.save show less	Hacking Web App Attack
Anonymous	2026-09-17 03:08:18 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 palla89	2026-09-17 03:01:03 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 20.244.61.204 (IN/India/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-09-17 01:42:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.244.61.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 21:42:42.515325 2026] [security2:error] [pid 16586:tid 16603] [client 20.244.61.204:2522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pwihatah.plumeraproductions.com"] [uri "/wp-config.php.bak"] [unique_id "aqtFkl7IBcljeN8jXJKGUwAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 01:27:52 (1 day ago)	URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ ... show more URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. (920440-131) show less	Hacking
Anonymous	2026-09-17 01:26:56 (1 day ago)	DEAGICO WEBEXPLOIT 20.244.61.204 (20.244.61.204)	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.231.140.136

🇩🇪 213.209.159.25

🇳🇱 213.206.207.162

🇺🇦 212.178.16.73

🇺🇸 192.42.176.30

🇬🇧 188.240.59.27

🇫🇷 178.18.240.38

🇩🇪 167.94.145.25

🇺🇸 165.154.36.218

🇺🇸 134.33.67.95

🇨🇳 129.211.176.209

🇻🇳 123.16.143.216

🇨🇳 117.89.178.173

🇨🇳 112.80.181.111

🇺🇸 100.29.192.59

🇳🇱 86.54.31.46

🇧🇬 79.124.56.142

🇩🇪 69.5.169.181

🇮🇳 65.254.81.69

🇺🇸 54.86.66.252