JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.218.104.173

20.218.104.173 was found in our database!

This IP was reported 473 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.218.104.173

Whois 20.218.104.173

IP Abuse Reports for 20.218.104.173:

This IP address has been reported a total of 473 times from 278 distinct sources. 20.218.104.173 was first reported on July 23rd 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RogueAutomata	2026-07-29 15:04:59 (8 minutes ago)	Detected malicious request: GET /wp-content/plugins/hellopress/wp_filemanager.php Detections trigge ... show more Detected malicious request: GET /wp-content/plugins/hellopress/wp_filemanager.php Detections triggered: Wordpress attack show less	Web App Attack
🇺🇸 RamSet	2026-07-29 13:29:51 (1 hour ago)	[wx] HTTP-Probe on port 443 (via domain). 101 distinct paths probed in 31s. Sustained 203 req/min, 1 ... show more [wx] HTTP-Probe on port 443 (via domain). 101 distinct paths probed in 31s. Sustained 203 req/min, 100 nonexistent paths (404). Paths: //cgi-bin/index.php, //cgi-bin/admin.php, ///admin.php, //a1.php, //abcd.php, //admin.php, //adminfuns.php, //av.php, //edit.php, //goods.php, //wp-admin/js/index.php, //wp-content/admin.php, //wp-includes/Requests/, //wp-includes/css/dist/, //wp-includes/js/jquery/, //wp-includes/l10n/, /1.php, /155.php, /177.php, /199.php, /1polka.php, /222.php, /2P.php, /7.php, /8.php, /BDKR28WP.php, /FWAZ.php, /X.php, /aaf.php, /about.php, /alls.php, /biufile.php, /blurbs.php, /ccc.php?p=, /classwithtostring.php?p=, /coffexium.php, /crgio.php, /dejavu.php, /domvf.php, /dx.php, /error_log.php, /fffm.php, /file52.php, /fpwch.php, /gec.php, /geck.php, /get.php, /h02ugyh.php, /ha.php, /hur.php, /hypo.php, /images.php, /ingfo.php, /inputs.php, /k.php, /k2.php, /koala.php, /mac.php, /makeasmtp.php?p=, /mgrr.php show less	Bad Web Bot Web App Attack
🇺🇸 KitsuneTech	2026-07-29 13:25:48 (1 hour ago)	20.218.104.173 - - [29/Jul/2026:08:25:47 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.218.104.173 - - [29/Jul/2026:08:25:47 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 327 "-" "-" ... show less	Web App Attack
🇩🇪 Hary74656	2026-07-29 13:05:06 (2 hours ago)	[Wed Jul 29 15:04:55.936789 2026] [core:info] [pid 107208:tid 107347] [client 20.218.104.173:5009] A ... show more [Wed Jul 29 15:04:55.936789 2026] [core:info] [pid 107208:tid 107347] [client 20.218.104.173:5009] AH00128: File does not exist: /home/divisio/www/wp-content/admin.php ... show less	Bad Web Bot
🇺🇸 jormaster3k	2026-07-29 12:25:46 (2 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇫🇷 Campus France	2026-07-29 11:56:13 (3 hours ago)	[Wed Jul 29 13:56:12.757968 2026] [php:error] [pid 866388] [client 20.218.104.173:5110] script '/var ... show more [Wed Jul 29 13:56:12.757968 2026] [php:error] [pid 866388] [client 20.218.104.173:5110] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 29 13:56:12.775437 2026] [php:error] [pid 866388] [client 20.218.104.173:5110] script '/var/www/html/x.php' not found or unable to stat [Wed Jul 29 13:56:12.775437 2026] [php:error] [pid 866388] [client 20.218.104.173:5110] script '/var/www/html/x.php' not found or unable to stat [Wed Jul 29 13:56:12.792311 2026] [php:error] [pid 866388] [client 20.218.104.173:5110] script '/var/www/html/mgrr.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 raph	2026-07-29 11:21:46 (3 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-07-29 10:55:15 (4 hours ago)	[Wed Jul 29 12:55:14.089895 2026] [proxy_fcgi:error] [pid 8296:tid 8368] [client 20.218.104.173:4993 ... show more [Wed Jul 29 12:55:14.089895 2026] [proxy_fcgi:error] [pid 8296:tid 8368] [client 20.218.104.173:4993] AH01071: Got error 'Primary script unknown' [Wed Jul 29 12:55:14.105916 2026] [proxy_fcgi:error] [pid 8296:tid 8396] [client 20.218.104.173:4993] AH01071: Got error 'Primary script unknown' [Wed Jul 29 12:55:14.122065 2026] [proxy_fcgi:error] [pid 8296:tid 8381] [client 20.218.104.173:4993] AH01071: Got error 'Primary script unknown' [Wed Jul 29 12:55:14.140469 2026] [proxy_fcgi:error] [pid 8296:tid 8391] [client 20.218.104.173:4993] AH01071: Got error 'Primary script unknown' [Wed Jul 29 12:55:14.157115 2026] [proxy_fcgi:error] [pid 8296:tid 8354] [client 20.218.104.173:4993] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 Site.eu	2026-07-29 10:25:56 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 BlueWire Hosting	2026-07-29 10:09:56 (5 hours ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇧🇪 cmbplf	2026-07-29 10:03:41 (5 hours ago)	5.000 requests from abuseipdb.com blacklisted IP (6mos4d5h)	Brute-Force Bad Web Bot
🇩🇪 Bedios GmbH	2026-07-29 09:48:34 (5 hours ago)	Wordpress hacking attempt	Web App Attack
🇩🇪 macrob	2026-07-29 09:46:04 (5 hours ago)	2026/07/29 09:46:02 [error] 1537707#1537707: 423665957 access forbidden by rule, client: 20.218.104 ... show more 2026/07/29 09:46:02 [error] 1537707#1537707: 423665957 access forbidden by rule, client: 20.218.104.173, server: binixo.ph, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "binixo.ph" 2026/07/29 09:46:02 [error] 1537707#1537707: 423665957 access forbidden by rule, client: 20.218.104.173, server: binixo.ph, request: "GET /wp-includes/sodium_compat/ HTTP/1.1", host: "binixo.ph" 2026/07/29 09:46:02 [error] 1537707#1537707: 423665957 access forbidden by rule, client: 20.218.104.173, server: binixo.ph, request: "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1", host: "binixo.ph" ... show less	Web App Attack
🇩🇪 dbmwebdesign	2026-07-29 09:45:07 (5 hours ago)	Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban	Web App Attack
🇺🇸 rdpguard.com	2026-07-29 09:39:12 (5 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 473 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 191.156.41.228

🇮🇳 163.47.213.195

🇧🇷 129.159.56.14

🇺🇸 107.173.137.250

🇷🇺 91.233.240.75

🇳🇱 45.148.10.157

🇺🇸 20.55.3.202

🇰🇷 219.248.4.146

🇫🇷 169.58.40.131

🇲🇲 103.59.163.134

🇺🇦 91.223.110.255

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇺🇸 20.12.240.188

🇹🇳 197.17.114.69

🇳🇱 185.242.226.85

🇳🇱 185.136.15.10

🇺🇸 172.202.95.21

🇨🇳 117.32.132.170

🇮🇩 103.24.13.25