JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.24.203.130

20.24.203.130 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.24.203.130

Whois 20.24.203.130

IP Abuse Reports for 20.24.203.130:

This IP address has been reported a total of 310 times from 254 distinct sources. 20.24.203.130 was first reported on July 5th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geot	2026-07-06 10:38:41 (2 hours ago)	WordPress scanning bot	Hacking Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-07-06 10:02:40 (2 hours ago)	Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: //wp-includes/l10n/ Timestamp: 2026-07-06T06:36:06Z Ray ID: a16c97db79f78585 UA: Empty string show less	Bad Web Bot
🇮🇳 walkintoadmin	2026-07-06 08:40:29 (4 hours ago)	datacenter scanner, 0 real-user 200s, scanner-path probing	Bad Web Bot Web App Attack
Anonymous	2026-07-06 07:17:39 (5 hours ago)	[Mon Jul 06 09:17:38.482185 2026] [authz_core:error] [pid 6341] [client 20.24.203.130:41160] AH01630 ... show more [Mon Jul 06 09:17:38.482185 2026] [authz_core:error] [pid 6341] [client 20.24.203.130:41160] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jul 06 09:17:38.669436 2026] [authz_core:error] [pid 6341] [client 20.24.203.130:41160] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Jul 06 09:17:38.856695 2026] [authz_core:error] [pid 6341] [client 20.24.203.130:41160] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-07-06 07:07:03 (5 hours ago)	[Mon Jul 06 09:07:03.000838 2026] [proxy_fcgi:error] [pid 2229:tid 2265] [client 20.24.203.130:37996 ... show more [Mon Jul 06 09:07:03.000838 2026] [proxy_fcgi:error] [pid 2229:tid 2265] [client 20.24.203.130:37996] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇬🇧 myintarweb	2026-07-06 07:05:45 (5 hours ago)	20.24.203.130 - - [06/Jul/2026:08:05:44 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager ... show more 20.24.203.130 - - [06/Jul/2026:08:05:44 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 410 1504 "-" "-" ... show less	Hacking Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-07-06 06:57:41 (5 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇫🇷 pm33	2026-07-06 06:46:02 (5 hours ago)	Unsolicited connection attempts or aggressive port scan.	Port Scan
🇺🇸 KitsuneTech	2026-07-06 06:41:13 (5 hours ago)	20.24.203.130 - - [06/Jul/2026:01:41:12 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.24.203.130 - - [06/Jul/2026:01:41:12 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 322 "-" "-" ... show less	Web App Attack
🇩🇪 rh24	2026-07-06 06:27:00 (6 hours ago)	20.24.203.130 (HK/Hong Kong/-), more than 25 Apache 403 hits	Hacking
🇩🇪 macrob	2026-07-06 06:12:22 (6 hours ago)	2026/07/06 06:11:52 [error] 1735386#1735386: 354207430 access forbidden by rule, client: 20.24.203. ... show more 2026/07/06 06:11:52 [error] 1735386#1735386: 354207430 access forbidden by rule, client: 20.24.203.130, server: binofferes.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "binofferes.com" 2026/07/06 06:12:19 [error] 1735386#1735386: 354207430 access forbidden by rule, client: 20.24.203.130, server: binofferes.com, request: "GET //wp-includes/css/dist/ HTTP/1.1", host: "binofferes.com" 2026/07/06 06:12:20 [error] 1735386#1735386: 354207430 access forbidden by rule, client: 20.24.203.130, server: binofferes.com, request: "GET //wp-admin/user/index.php HTTP/1.1", host: "binofferes.com" ... show less	Web App Attack
🇫🇷 guillaume illien	2026-07-06 06:06:47 (6 hours ago)	20.24.203.130 - - [06/Jul/2026:06:06:42 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.24.203.130 - - [06/Jul/2026:06:06:42 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:43 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:44 +0000] "GET /zoko.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:44 +0000] "GET /w.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:45 +0000] "GET /133.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:46 +0000] "GET /7.php HTTP/1.1" 301 178 "-" "-" 20.24.203.130 - - [06/Jul/2026:06:06:46 +0000] "GET /wp3.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇮🇩 soc-yk	2026-07-06 06:06:12 (6 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 139 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 139 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇺🇸 Epimetheus	2026-07-06 06:06:04 (6 hours ago)	Unauthorized access attempts: [GET] /gin.php [GET] /yawa.php [GET] /bays.php [GET] /x0rg.php [GET] ... show more Unauthorized access attempts: [GET] /gin.php [GET] /yawa.php [GET] /bays.php [GET] /x0rg.php [GET] /dk.php [GET] /configuration/info.xml [GET] /7.php [GET] /output.php [GET] /ioxi-2.php [GET] /file31.php [GET] /aligk.php [GET] /fetch.php [GET] /byrgo.php [GET] /no1.php [GET] /xwpg.php [GET] /file61.php [GET] /xqq.php [GET] /cgi-bin/index.php [GET] /wp-includes/l10n/ [GET] /wp-includes/css/dist/ [GET] /fi.php [GET] /wp-content/uploads/2021/02/index.php [GET] /a1.php [GET] /wp-includes/css/index.php [GET] /press.php [GET] /ga.php [GET] /less.php [GET] /x3x.php [GET] /state.php [GET] /xozx.php [GET] /97.php [GET] /file-gertdxz.php [GET] /tx79.php [GET] /aboute.php [GET] /wswer1.php [GET] /new3.php [GET] /sadcut1.php [GET] /wp-turn.php [GET] /myy.php [GET] /wdone1.php [GET] /wziar1.php [GET] /wmore1.php [GET] /riz.php [GET] /r2.php [GET] /006.php [GET] /packsin1.php [GET] /cr7.php [GET] /arig.php [GET] /xll.php [GET] /a11.php UA: Unknown show less	Web App Attack
Anonymous	2026-07-06 05:57:53 (6 hours ago)	20.24.203.130 - - [06/Jul/2026:07:57:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.24.203.130 - - [06/Jul/2026:07:57:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 402 816 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇫🇷 185.177.72.66

🇯🇵 152.32.201.247

🇳🇱 45.148.10.120

🇬🇧 217.146.80.119

🇺🇸 209.50.160.207

🇺🇸 185.198.240.143

🇹🇯 185.105.229.21

🇮🇳 117.247.23.131

🇸🇪 104.222.171.254

🇩🇪 65.111.27.183

🇺🇸 64.62.156.222

🇳🇱 45.148.10.147

🇯🇵 43.165.185.177

🇳🇬 41.216.164.6

🇶🇦 2600:1900:4260:40e::25

🇺🇸 216.180.246.139

🇺🇸 216.26.231.78

🇦🇷 186.148.224.183

🇺🇸 138.68.9.82