JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.195.24

20.197.195.24 was found in our database!

This IP was reported 714 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.195.24

Whois 20.197.195.24

IP Abuse Reports for 20.197.195.24:

This IP address has been reported a total of 714 times from 480 distinct sources. 20.197.195.24 was first reported on May 31st 2023, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-07-21 09:51:24 (4 minutes ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.197.195.24 (BR/Brazil/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.197.195.24 (BR/Brazil/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 chrisj	2026-07-21 09:49:15 (6 minutes ago)	[Tue Jul 21 09:49:14.123025 2026] [proxy_fcgi:error] [pid 262394:tid 262442] [client 20.197.195.24:4 ... show more [Tue Jul 21 09:49:14.123025 2026] [proxy_fcgi:error] [pid 262394:tid 262442] [client 20.197.195.24:42197] AH01071: Got error 'Primary script unknown' [Tue Jul 21 09:49:14.405005 2026] [proxy_fcgi:error] [pid 262394:tid 262476] [client 20.197.195.24:42197] AH01071: Got error 'Primary script unknown' [Tue Jul 21 09:49:14.683612 2026] [proxy_fcgi:error] [pid 262394:tid 262441] [client 20.197.195.24:42197] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 phoenix1jl96	2026-07-21 09:48:44 (7 minutes ago)	2026/07/21 11:48:09 [error] 100879#100879: 2335 open() "/home/user-data/www/default/cgi-bin/index.p ... show more 2026/07/21 11:48:09 [error] 100879#100879: 2335 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 20.197.195.24, server: box.ledemon.us, request: "GET //cgi-bin/index.php HTTP/1.1", host: "box.ledemon.us" 2026/07/21 11:48:13 [error] 100879#100879: *2335 open() "/home/user-data/www/default/cgi-bin/admin.php" failed (2: No such file or directory), client: 20.197.195.24, server: box.ledemon.us, request: "GET //cgi-bin/admin.php HTTP/1.1", host: "box.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇫🇷 LRNP	2026-07-21 09:43:22 (12 minutes ago)	mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:17 +0000] "GET /wp-content/plugins ... show more mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:17 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:17 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:18 +0000] "GET /media.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:19 +0000] "GET /images.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:19 +0000] "GET /gecko.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:20 +0000] "GET /82.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:20 +0000] "GET ///admin.php HTTP/1.1" 404 146 "-" "-" mirror2.urbanterror.info:443 20.197.195.24 - - [21/Jul/2026:09:43:21 +0000] "GET /adminner.php HTTP/1.1" 404 146 "- ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-21 09:36:42 (19 minutes ago)	[Tue Jul 21 09:36:42.201523 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/va ... show more [Tue Jul 21 09:36:42.201523 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/var/www/vhosts/mcdermit.org/BOISD/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jul 21 09:36:42.346094 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/var/www/vhosts/mcdermit.org/BOISD/x.php' not found or unable to stat [Tue Jul 21 09:36:42.492919 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/var/www/vhosts/mcdermit.org/BOISD/mgrr.php' not found or unable to stat [Tue Jul 21 09:36:42.639674 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/var/www/vhosts/mcdermit.org/BOISD/stdin.php' not found or unable to stat [Tue Jul 21 09:36:42.783360 2026] [php:error] [pid 3409665] [client 20.197.195.24:65502] script '/var/www/vhosts/mcdermit.org/BOISD/BDKR28.php' not found or unable to stat ... show less	Brute-Force
🇺🇸 chrisj	2026-07-21 09:29:05 (26 minutes ago)	[Tue Jul 21 09:29:04.686673 2026] [proxy_fcgi:error] [pid 262394:tid 262429] [client 20.197.195.24:4 ... show more [Tue Jul 21 09:29:04.686673 2026] [proxy_fcgi:error] [pid 262394:tid 262429] [client 20.197.195.24:42132] AH01071: Got error 'Primary script unknown' [Tue Jul 21 09:29:04.959716 2026] [proxy_fcgi:error] [pid 262394:tid 262430] [client 20.197.195.24:42132] AH01071: Got error 'Primary script unknown' [Tue Jul 21 09:29:05.240793 2026] [proxy_fcgi:error] [pid 262394:tid 262431] [client 20.197.195.24:42132] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-21 09:25:53 (29 minutes ago)	unsolicited connect TCP dport 80 (sport 64798)	Hacking
Anonymous	2026-07-21 09:22:54 (32 minutes ago)	$f2bV_matches	Brute-Force Web App Attack
🇫🇷 Thibault Millant	2026-07-21 09:21:27 (34 minutes ago)	20.197.195.24 - - [21/Jul/2026:09:21:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.197.195.24 - - [21/Jul/2026:09:21:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Brute-Force Exploited Host SSH
🇩🇪 Hans Wurst	2026-07-21 09:21:12 (34 minutes ago)	Web-Attack 403. Details: 20.197.195.24 - - [21/Jul/2026:11:21:11 +0200] "GET /this_is_a_new_hello_wo ... show more Web-Attack 403. Details: 20.197.195.24 - - [21/Jul/2026:11:21:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 486 "-" "-" 20.197.195.24 - - [21/Jul/2026:11:21:11 +0200] "GET /x.php HTTP/1.1" 403 486 "-" "-" 20.197.195.24 - - [21/Jul/2026:11:21:11 +0200] "GET /mgrr.php HTTP/1.1" 403 486 "-" "-" 20.197.195.24 - - [21/Jul/2026:11:21:11 +0200] "GET /stdin.php HTTP/1.1" 403 486 "-" "-" 20.197.195.24 - - [21/Jul/2026:11:21:12 +0200] "GET /BDKR28.php HTTP/1.1" 403 486 "-" "-" show less	Web App Attack
🇺🇸 oralunal	2026-07-21 09:13:39 (42 minutes ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-07-21 09:10:15 (45 minutes ago)	2026/07/21 09:10:07 [error] 2380570#2380570: 395565543 access forbidden by rule, client: 20.197.195 ... show more 2026/07/21 09:10:07 [error] 2380570#2380570: 395565543 access forbidden by rule, client: 20.197.195.24, server: binofferes.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "binofferes.com" 2026/07/21 09:10:12 [error] 2380570#2380570: 395565543 access forbidden by rule, client: 20.197.195.24, server: binofferes.com, request: "GET ///admin.php HTTP/1.1", host: "binofferes.com" 2026/07/21 09:10:13 [error] 2380570#2380570: 395565543 access forbidden by rule, client: 20.197.195.24, server: binofferes.com, request: "GET /adminner.php HTTP/1.1", host: "binofferes.com" ... show less	Web App Attack
🇳🇱 kie	2026-07-21 09:09:19 (46 minutes ago)	21-07-2026:09:08:48UTC [Nginx Web Server] Suspicious web request: path:/admin.php path:/.well-known/ ... show more 21-07-2026:09:08:48UTC [Nginx Web Server] Suspicious web request: path:/admin.php path:/.well-known/ (7 request(s)). show less	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-07-21 09:07:40 (48 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇨🇭 Mario Bretscher	2026-07-21 09:05:00 (50 minutes ago)	[Tue Jul 21 11:04:58.073336 2026] [php:error] [pid 1072775] [client 20.197.195.24:65448] script '/va ... show more [Tue Jul 21 11:04:58.073336 2026] [php:error] [pid 1072775] [client 20.197.195.24:65448] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jul 21 11:04:58.286512 2026] [php:error] [pid 1072775] [client 20.197.195.24:65448] script '/var/www/html/x.php' not found or unable to stat [Tue Jul 21 11:04:58.508883 2026] [php:error] [pid 1072775] [client 20.197.195.24:65448] script '/var/www/html/mgrr.php' not found or unable to stat ... show less	Web App Attack

Showing 1 to 15 of 714 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.140

🇪🇨 157.100.110.1

🇫🇮 147.185.133.99

🇳🇱 89.248.168.227

🇩🇪 69.5.169.92

🇨🇳 61.164.246.43

🇳🇱 45.148.10.200

🇨🇳 39.144.125.118

🇺🇸 34.148.166.21

🇮🇷 217.219.70.92

🇹🇭 202.29.228.248

🇮🇩 103.178.175.124

🇺🇸 75.91.61.129

🇺🇸 47.251.81.121

🇳🇱 45.198.224.15

🇮🇷 45.159.113.190

🇳🇱 45.153.34.165

🇩🇪 3.127.236.203

🇩🇪 195.230.103.242

🇬🇧 193.104.58.60