JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.24.211.71

Neutral Activity

Abuse confidence score ?

0% Low Risk

338 reports

215 reporters · latest 9 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.24.211.71 has been reported 338 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.24.211.71

Export CSV

This IP address has been reported a total of 338 times from 215 distinct sources. 20.24.211.71 was first reported on December 22nd 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-12-31 07:18:43 (9 months ago)	Unauthorized web scan.	Web App Attack
🇳🇱 Site.eu	2025-12-31 07:10:39 (9 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2025-12-28 19:47:22 (9 months ago)	$f2bV_matches	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-26 20:10:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 itsolon	2025-12-26 11:56:47 (9 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
Anonymous	2025-12-25 15:03:15 (9 months ago)	20.24.211.71 - - [23/Dec/2025:14:33:58 +0100] "GET /wp-admin/css/colors/blue/chosen.php HTTP/1.1" 30 ... show more 20.24.211.71 - - [23/Dec/2025:14:33:58 +0100] "GET /wp-admin/css/colors/blue/chosen.php HTTP/1.1" 301 493 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 20.24.211.71 - - [23/Dec/2025:14:33:58 +0100] "GET /wp-admin/css/colors/blue/chosen.php HTTP/1.1" 500 334 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 20.24.211.71 - - [23/Dec/2025:14:34:04 +0100] "GET /wp-admin/images/function.php HTTP/1.1" 301 479 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" ... show less	Bad Web Bot
Anonymous	2025-12-25 11:27:12 (9 months ago)	FortiWeb WAF: 110 attacks detected. Threat Score: 20400. Types: Client Management(55), GEO IP(55). O ... show more FortiWeb WAF: 110 attacks detected. Threat Score: 20400. Types: Client Management(55), GEO IP(55). Origin: Hong Kong. show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-12-25 06:14:17 (9 months ago)	4601 attacks on Alfa URLs, PHP URLs: GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1 GET /c ... show more 4601 attacks on Alfa URLs, PHP URLs: GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1 GET /cp.php HTTP/1.1 show less	Hacking Web App Attack
🇭🇺 NyaljBe	2025-12-25 04:15:00 (9 months ago)	20.24.211.71 - - [25/Dec/2025:01:59:11 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 555 " ... show more 20.24.211.71 - - [25/Dec/2025:01:59:11 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - - [25/Dec/2025:01:59:11 +0100] "GET /wp-admin/includes/ HTTP/1.1" 403 153 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 20.24.211.71 - - [25/Dec/2025:01:59:10 +0100] "GET /nc4.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.24.211.71 - - [25/Dec/2025:01:59:10 +0100] "GET /ioxi-o.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.24.211.71 - - [25/Dec/2025:01:59:10 +0100] "GET /info.php show less	Web App Attack
🇭🇺 DumaNet	2025-12-25 02:24:00 (9 months ago)	WordPress plugin attack attempts. Date: 2025 Dec 24. 20:12:42 Source IP: 20.24.211.71 Portion o ... show more WordPress plugin attack attempts. Date: 2025 Dec 24. 20:12:42 Source IP: 20.24.211.71 Portion of the log(s): 20.24.211.71 - [24/Dec/2025:20:12:41 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 555 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:20:12:41 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 555 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:20:12:41 +0100] "GET /nc4.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:20:12:41 +0100] "GET /ioxi-o.php HTTP/1.1" 404 555 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mob show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-12-25 02:02:00 (9 months ago)	WordPress plugin attack attempts. Date: 2025 Dec 24. 15:21:22 Source IP: 20.24.211.71 Portion o ... show more WordPress plugin attack attempts. Date: 2025 Dec 24. 15:21:22 Source IP: 20.24.211.71 Portion of the log(s): 20.24.211.71 - [24/Dec/2025:15:21:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 153 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 20.24.211.71 - [24/Dec/2025:15:21:22 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:15:21:22 +0100] "GET /nc4.php HTTP/1.1" 404 153 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 20.24.211.71 - [24/Dec/2025:15:21:22 +0100] "GET /ioxi-o.php HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537 show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-12-25 01:40:00 (9 months ago)	WordPress plugin attack attempts. Date: 2025 Dec 24. 13:41:45 Source IP: 20.24.211.71 Portion o ... show more WordPress plugin attack attempts. Date: 2025 Dec 24. 13:41:45 Source IP: 20.24.211.71 Portion of the log(s): 20.24.211.71 - [24/Dec/2025:13:41:42 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:13:41:41 +0100] "GET /wp-admin/includes/ HTTP/1.1" 403 555 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:13:41:41 +0100] "GET /nc4.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.24.211.71 - [24/Dec/2025:13:41:41 +0100] "GET /ioxi-o.php HTTP/1.1" 404 153 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-12-25 00:54:57 (9 months ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/perl.alfa Request Query: Host: ns2.e ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/perl.alfa Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1 Action: log Source: firewallManaged ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: HK Method: GET Timestamp: 2025-12-25T00:54:57Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-25 00:52:22 (9 months ago)	[Thu Dec 25 01:52:21.649905 2025] [proxy_fcgi:error] [pid 3392175:tid 3392744] [remote 20.24.211.71: ... show more [Thu Dec 25 01:52:21.649905 2025] [proxy_fcgi:error] [pid 3392175:tid 3392744] [remote 20.24.211.71:0] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/ [Thu Dec 25 01:52:22.441146 2025] [proxy_fcgi:error] [pid 3392175:tid 3392868] [remote 20.24.211.71:0] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/ ... show less	Hacking Web App Attack
🇩🇪 MarkGGN	2025-12-25 00:44:58 (9 months ago)	Webexploits. 20.24.211.71 - - [25/Dec/2025:01:44:56 +0100] "GET /edit.php HTTP/1.1" 401 0 "https://w ... show more Webexploits. 20.24.211.71 - - [25/Dec/2025:01:44:56 +0100] "GET /edit.php HTTP/1.1" 401 0 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.24.211.71 - - [25/Dec/2025:01:44:58 +0100] "GET /info.php HTTP/1.1" 401 0 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 338 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.62.96.42

🇰🇷 175.209.156.146

🇿🇦 102.22.73.113

🇳🇱 78.142.18.40

🇭🇰 49.213.6.30

🇹🇼 211.72.115.235

🇭🇰 185.227.152.135

🇺🇸 161.35.10.7

🇻🇳 125.212.251.7

🇵🇰 116.71.136.125

🇫🇷 85.217.140.40

🇳🇱 77.239.124.34

🇬🇧 77.67.26.131

🇬🇧 77.67.26.68

🇺🇸 66.132.159.23

🇬🇧 35.203.210.253

🇳🇱 34.12.113.64

🇧🇷 187.103.105.17

🇨🇳 183.230.9.103

🇨🇳 116.138.234.68