JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.194.24.159

20.194.24.159 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.194.24.159

Whois 20.194.24.159

IP Abuse Reports for 20.194.24.159:

This IP address has been reported a total of 108 times from 98 distinct sources. 20.194.24.159 was first reported on June 29th 2026, and the most recent report was 17 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 OptimusGO	2026-06-29 17:49:28 (17 seconds ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-29 18:49:28 UTC Log evidence: 20.194.24.159 - - [29/Jun/2026:18:48:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.194.24.159 - - [29/Jun/2026:18:48:03 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 20.194.24.159 - - [29/Jun/2026:18:48:03 +0100] "GET /inputs.php HTTP/1.1" 404 146 "-" "-" show less	Port Scan Brute-Force
🇩🇪 big-cloud.nl	2026-06-29 17:47:45 (2 minutes ago)	Try to access /sinterklaas/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇩🇪 maxpower	2026-06-29 17:43:36 (6 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.194.24.159 (KR/South Korea/-): 1 in the la ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.194.24.159 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.194.24.159 - - [29/Jun/2026:19:43:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 325 "-" "-" "-" host=emmeccipubblicita.it show less	Port Scan
🇳🇱 middelkoopcc	2026-06-29 17:40:06 (9 minutes ago)	2026-06-29 19:28:21 [client 20.194.24.159:17917] AH01071: Got error 'Primary script unknown' && 2026 ... show more 2026-06-29 19:28:21 [client 20.194.24.159:17917] AH01071: Got error 'Primary script unknown' && 2026-06-29 19:28:21 [client 20.194.24.159:17917] AH01071: Got error 'Primary script unknown' && 2026-06-29 19:28:21 [client 20.194.24.159:17917] AH01071: Got error 'Primary script unknown' && 90 more within 20 minutes show less	Web App Attack
🇫🇮 JimArchon72	2026-06-29 17:40:01 (9 minutes ago)	2026/06/29 17:37:27 "GET /wp-admin/maint/index.php HTTP/1.1"	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-29 17:38:36 (11 minutes ago)	20.194.24.159 - - [29/Jun/2026:20:38:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.194.24.159 - - [29/Jun/2026:20:38:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 713 "-" "-" ... show less	Web App Attack
🇵🇱 strefapi_com	2026-06-29 17:29:35 (20 minutes ago)	Brute-force on web app ...	Brute-Force Web App Attack
🇺🇸 NXTwoThou	2026-06-29 17:27:07 (22 minutes ago)	/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇹🇭 MWA SOC	2026-06-29 17:26:09 (23 minutes ago)		Hacking
🇫🇷 Campus France	2026-06-29 17:25:51 (23 minutes ago)	[Mon Jun 29 19:25:49.913696 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/ ... show more [Mon Jun 29 19:25:49.913696 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/www/html/desk.radio-campus.org/desk/www/this_is_a_new_hello_world.php' not found or unable to stat [Mon Jun 29 19:25:50.136564 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/www/html/desk.radio-campus.org/desk/www/inputs.php' not found or unable to stat [Mon Jun 29 19:25:50.359338 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/www/html/desk.radio-campus.org/desk/www/admin.php' not found or unable to stat [Mon Jun 29 19:25:50.582487 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/www/html/desk.radio-campus.org/desk/www/goods.php' not found or unable to stat [Mon Jun 29 19:25:50.820686 2026] [php:error] [pid 301895] [client 20.194.24.159:9629] script '/var/www/html/desk.radio-campus.org/desk/www/file.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇦🇹 penguin-solutions.at	2026-06-29 17:23:30 (26 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇮🇩 Burayot	2026-06-29 17:22:31 (27 minutes ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.194.24.159 (KR/South Korea/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.194.24.159 (KR/South Korea/-): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 backslash	2026-06-29 17:21:00 (28 minutes ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-06-29 17:20:34 (29 minutes ago)	Try to connect to Port_Scan_80_stealth	Port Scan
🇩🇪 ghostwarriors	2026-06-29 17:20:16 (29 minutes ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.21.193.41

🇲🇽 187.191.48.4

🇸🇬 103.20.122.54

🇹🇷 78.178.131.17

🇸🇬 47.236.188.232

🇺🇸 44.215.219.236

🇩🇪 209.38.221.33

🇿🇦 196.6.105.172

🇺🇸 172.178.115.83

🇺🇸 167.99.97.26

🇷🇺 138.124.77.177

🇨🇳 125.77.73.145

🇺🇸 20.168.120.151

🇨🇳 14.103.54.150

🇬🇧 2a06:4880::c

🇿🇦 196.39.112.254

🇳🇱 176.65.148.215

🇿🇦 165.16.188.254

🇨🇳 120.48.102.177

🇰🇷 58.229.180.111