JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.24.211.85

20.24.211.85 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.24.211.85

Whois 20.24.211.85

IP Abuse Reports for 20.24.211.85:

This IP address has been reported a total of 152 times from 92 distinct sources. 20.24.211.85 was first reported on March 6th 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 raymarron.com	2026-03-20 22:16:04 (5 months ago)	/wp-links-opml.php /wp-includes/js/crop/ /wp-includes/ /wp-content/uploads/admin.php /wp-content ... show more /wp-links-opml.php /wp-includes/js/crop/ /wp-includes/ /wp-content/uploads/admin.php /wp-content/uploads/ /wp-content/themes/admin.php /wp-content/themes/ /wp-admin/ /wp-admin/maint/ /wp-admin/js/widgets/ /wp-admin/js/ /wp-admin/css/bolt.php /wp-act.php /wk/index.php /upload.php /update/da222.php /rip.php /ms-edit.php /lite.php /ioxi-o.php /inputs.php?p= /fff.php /ff1.php /edit.php /class-t.api.php /cgi-bin/ /bolt.php /as.php /adminfuns.php /admin.php /about.php /xmr.php /wp-content/plugins/plugin/index.php /wp-content/themes/theme/about.php /wp-content/themes/haha.php /.trash7206/index.php show less	Web App Attack
🇹🇷 rtbh.com.tr	2026-03-11 20:11:59 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 Site.eu	2026-03-10 12:06:11 (6 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 www.Examensfragen.de	2026-03-09 22:20:36 (6 months ago)		Web Spam Bad Web Bot
🇩🇪 Ba-Yu	2026-03-09 20:48:18 (6 months ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 CryptoYakari	2026-03-09 20:39:36 (6 months ago)	20.24.211.85 - - [09/Mar/2026:23:39:33 +0300] "GET /ioxi-o.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (W ... show more 20.24.211.85 - - [09/Mar/2026:23:39:33 +0300] "GET /ioxi-o.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:23:39:34 +0300] "GET /0x.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:23:39:34 +0300] "GET /222.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:23:39:34 +0300] "GET /aa.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:23:39:34 +0300] "GET /abcd.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-09 20:11:58 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇱🇻 garmtech.com	2026-03-09 20:10:36 (6 months ago)	Attempted access to sensitive endpoint (/wp-content/themes/haha.php) detected. Automated scan or una ... show more Attempted access to sensitive endpoint (/wp-content/themes/haha.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇷 francoisunix	2026-03-09 19:56:28 (6 months ago)	20.24.211.85 - - [09/Mar/2026:19:56:21 +0000] "GET /cgi-bin/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Win ... show more 20.24.211.85 - - [09/Mar/2026:19:56:21 +0000] "GET /cgi-bin/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:19:56:24 +0000] "GET /wp-admin/js/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:19:56:24 +0000] "GET /wp-admin/js/widgets/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:19:56:24 +0000] "GET /wp-admin/maint/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.211.85 - - [09/Mar/2026:19:56:26 +0000] "GET /wp-content/uploads/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0. ... show less	Web App Attack
🇩🇪 ps-center	2026-03-09 19:48:52 (6 months ago)	SS5: Web Attack GET /wp-content/themes/haha.php	Web Spam Hacking Bad Web Bot Web App Attack
🇯🇵 Short-legs-Spider	2026-03-09 19:42:23 (6 months ago)	Test on existence -- [10/Mar/2026:04:42:23 +0900] "GET /.trash7206/index.php HTTP/1.1" 403 76 "-" ... show more Test on existence -- [10/Mar/2026:04:42:23 +0900] "GET /.trash7206/index.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [10/Mar/2026:04:42:23 +0900] "GET /.well-known/logs233/index.php?p= HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [10/Mar/2026:04:42:23 +0900] "GET /about.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [10/Mar/2026:04:42:23 +0900] "GET /admin.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [10/Mar/2026:04:42:23 +0900] "GET /adminfuns.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 ambor	2026-03-09 19:35:39 (6 months ago)	L0ss Honeypot: Admin panel access attempt. Path: /admin.php	Brute-Force Web App Attack
🇩🇪 paissangroup	2026-03-09 18:41:56 (6 months ago)	Multiple WAF Violations	Web App Attack
🇫🇮 DyslexicDog	2026-03-09 18:41:40 (6 months ago)	Invalid Path	Web App Attack
🇺🇸 ersei.net	2026-03-09 17:57:21 (6 months ago)	Brute force multiple 403s	Brute-Force

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 144.126.226.128

🇬🇧 35.203.210.7

🇨🇳 220.249.82.190

🇵🇪 190.238.105.148

🇳🇴 185.101.33.191

🇮🇩 163.7.3.154

🇺🇿 144.124.199.194

🇺🇿 144.124.199.187

🇺🇿 144.124.199.144

🇺🇿 144.124.199.137

🇳🇱 91.92.40.236

🇳🇱 34.187.80.138

🇷🇴 2.57.121.112

🇳🇱 195.178.110.227

🇧🇷 192.141.218.194

🇺🇸 162.216.150.145

🇺🇿 144.124.196.85

🇺🇿 144.124.196.49

🇺🇿 144.124.196.31

🇺🇿 144.124.192.92