JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.24.209.4

20.24.209.4 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.24.209.4

Whois 20.24.209.4

IP Abuse Reports for 20.24.209.4:

This IP address has been reported a total of 72 times from 61 distinct sources. 20.24.209.4 was first reported on July 5th 2026, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-05 18:33:56 (19 minutes ago)	Web vulnerability probing: /rip.php	Web App Attack
🇨🇭 zynex	2026-07-05 18:29:26 (23 minutes ago)	URL Probing: /wk/index.php	Web App Attack
🇫🇮 Christopher Hughes	2026-07-05 18:18:45 (34 minutes ago)	[Sun Jul 05 19:18:42.852068 2026] [proxy_fcgi:error] [pid 1497428:tid 139821242639936] [client 20.24 ... show more [Sun Jul 05 19:18:42.852068 2026] [proxy_fcgi:error] [pid 1497428:tid 139821242639936] [client 20.24.209.4:11308] AH01071: Got error 'Primary script unknown' [Sun Jul 05 19:18:43.119866 2026] [proxy_fcgi:error] [pid 1497428:tid 139822215702080] [client 20.24.209.4:11308] AH01071: Got error 'Primary script unknown' [Sun Jul 05 19:18:43.674536 2026] [proxy_fcgi:error] [pid 1497428:tid 139822759077440] [client 20.24.209.4:11308] AH01071: Got error 'Primary script unknown' [Sun Jul 05 19:18:43.941837 2026] [proxy_fcgi:error] [pid 1497428:tid 139821251032640] [client 20.24.209.4:11308] AH01071: Got error 'Primary script unknown' [Sun Jul 05 19:18:44.477902 2026] [proxy_fcgi:error] [pid 1497428:tid 139821234247232] [client 20.24.209.4:11308] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 MusicLibrary	2026-07-05 18:16:25 (36 minutes ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 deskpass.com	2026-07-05 18:06:21 (46 minutes ago)	GET /about.php	Web App Attack
Anonymous	2026-07-05 17:58:00 (55 minutes ago)	wp admin page access attempt ...	Hacking Web App Attack
🇫🇷 masterguru	2026-07-05 17:22:46 (1 hour ago)	PHP execution attempt in wp-content/uploads blocked. Pattern match "(?i)/wp-content/uploads/.\\\\.p ... show more PHP execution attempt in wp-content/uploads blocked. Pattern match "(?i)/wp-content/uploads/.\\\\.php" at REQUEST_URI. (5100-196) show less	Hacking
🇺🇸 slay3r9903	2026-07-05 17:22:22 (1 hour ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇫🇷 bazter.pro	2026-07-05 17:20:24 (1 hour ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-07-05 16:54:22 (1 hour ago)	[Sun Jul 05 17:54:20.168112 2026] [proxy_fcgi:error] [pid 1497428:tid 139821225854528] [client 20.24 ... show more [Sun Jul 05 17:54:20.168112 2026] [proxy_fcgi:error] [pid 1497428:tid 139821225854528] [client 20.24.209.4:6278] AH01071: Got error 'Primary script unknown' [Sun Jul 05 17:54:20.379388 2026] [proxy_fcgi:error] [pid 1497428:tid 139821636900416] [client 20.24.209.4:6278] AH01071: Got error 'Primary script unknown' [Sun Jul 05 17:54:20.802691 2026] [proxy_fcgi:error] [pid 1497428:tid 139822750684736] [client 20.24.209.4:6278] AH01071: Got error 'Primary script unknown' [Sun Jul 05 17:54:21.015424 2026] [proxy_fcgi:error] [pid 1497428:tid 139822232487488] [client 20.24.209.4:6278] AH01071: Got error 'Primary script unknown' [Sun Jul 05 17:54:21.439255 2026] [proxy_fcgi:error] [pid 1497428:tid 139821251032640] [client 20.24.209.4:6278] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-05 16:51:39 (2 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/uploads/index.php	Web App Attack
🇩🇪 macrob	2026-07-05 16:49:56 (2 hours ago)	2026/07/05 16:49:54 [error] 1561371#1561371: 352867137 access forbidden by rule, client: 20.24.209. ... show more 2026/07/05 16:49:54 [error] 1561371#1561371: 352867137 access forbidden by rule, client: 20.24.209.4, server: binixo.es, request: "GET /admin.php HTTP/2.0", host: "binixo.es" 2026/07/05 16:49:54 [error] 1561371#1561371: 352875768 access forbidden by rule, client: 20.24.209.4, server: binixo.es, request: "GET /wp-content/uploads/index.php HTTP/2.0", host: "binixo.es" 2026/07/05 16:49:55 [error] 1561371#1561371: 352878286 access forbidden by rule, client: 20.24.209.4, server: binixo.es, request: "GET /wp-admin/user/index.php HTTP/2.0", host: "binixo.es" ... show less	Web App Attack
🇬🇷 setupgr	2026-07-05 16:40:11 (2 hours ago)	(mod_security) mod_security (id:1000001) triggered by 20.24.209.4 (HK/Hong Kong/Kowloon/Hong Kong/-/ ... show more (mod_security) mod_security (id:1000001) triggered by 20.24.209.4 (HK/Hong Kong/Kowloon/Hong Kong/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:40:06.841863 2026] [security2:error] [pid 2978:tid 3129] [client 20.24.209.4:3107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/ioxi-o.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /ioxi-o.php"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/ioxi-o.php"] [unique_id "akqI5gvxyAwCJxzheZQcxAAAAxY"] show less	Port Scan
🇩🇪 R.G.	2026-07-05 16:31:50 (2 hours ago)	(ScanningForFiles) Scanning for files triggerd 20.24.209.4 (HK/Hong Kong/-): 10 in the last 900 secs ... show more (ScanningForFiles) Scanning for files triggerd 20.24.209.4 (HK/Hong Kong/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-05 16:02:28 (2 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/user/index.php	Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac5:55fa:15f::23:478

🇸🇬 2620:171:f4:f0:9999::245

🇲🇽 189.190.244.176

🇸🇬 185.200.116.68

🇬🇷 172.68.62.188

🇺🇸 162.216.149.166

🇺🇸 159.183.203.162

🇷🇺 154.90.70.254

🇦🇷 138.117.16.120

🇨🇳 117.161.79.36

🇺🇸 104.28.159.135

🇺🇸 35.236.245.220

🇺🇸 34.74.221.249

🇺🇸 205.210.31.27

🇳🇱 188.226.148.205

🇦🇴 154.116.254.157

🇺🇸 146.190.71.200

🇹🇼 104.199.172.84

🇹🇼 35.194.179.239

🇺🇸 34.201.254.26