JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.24.80.73

20.24.80.73

Recent Activity

207 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇭🇰 Hong Kong

City

Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.24.80.73:

This IP address has been reported a total of 207 times from 161 distinct sources. 20.24.80.73 was first reported on September 7th 2026, and the most recent report was 3 hours ago. In the last 60 days, the top reporter locations were: Germany with 53 reports; United States of America with 42 reports; France with 19 reports. The most common categories in these recent reports were: Web App Attack 146 times; Brute-Force 49 times; Bad Web Bot 45 times; Hacking 40 times; Port Scan 25 times; Other 15 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-09-08 05:13:47 (3 hours ago)	377 attacks on PHP URLs, ACME URLs: GET /aaa.php HTTP/1.1 GET /adminfuns.php/.well-known/acme-challe ... show more 377 attacks on PHP URLs, ACME URLs: GET /aaa.php HTTP/1.1 GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1 show less	Web App Attack
🇲🇽 octageeks.com	2026-09-08 04:16:36 (4 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 giulio gorobey	2026-09-08 03:34:52 (4 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-2019.php	Web App Attack
🇵🇱 miriks	2026-09-08 03:31:38 (4 hours ago)	Automated scan detected: GET /alfa-rex.php7 — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ... show more Automated scan detected: GET /alfa-rex.php7 — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇺🇸 magnetosphere-tarpit	2026-09-08 03:14:55 (5 hours ago)	Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not ... show more Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 ramazan	2026-09-08 03:13:53 (5 hours ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /1.php /autoload_classmap.php /flower.php /meta.php /post. ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /1.php /autoload_classmap.php /flower.php /meta.php /post.php show less	Web App Attack Hacking
🇧🇷 Peregrine	2026-09-08 03:08:58 (5 hours ago)	Fail2Ban Jail: tomcat-404 \| Evidence: 20.24.80.73 162.158.179.214 - - [07/Sep/2026:11:33:16 -0300] " ... show more Fail2Ban Jail: tomcat-404 \| Evidence: 20.24.80.73 162.158.179.214 - - [07/Sep/2026:11:33:16 -0300] "GET /1.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:17 -0300] "GET /new.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:17 -0300] "GET /num.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:18 -0300] "GET /wp-includes/fonts/ HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:18 -0300] "GET /admin.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:19 -0300] "GET /13.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:19 -0300] "GET /222.php HTTP/1.1" 404 414 20.24.80.73 162.158.178.135 - - [07/Sep/2026:11:33:19 -0300] "GET /aa.php HTTP/1.1" 404 414 show less	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-09-08 03:05:13 (5 hours ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=dlmtappi.com ip=20.24.80.73 richieste=55 rischio=AL ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=dlmtappi.com ip=20.24.80.73 richieste=55 rischio=ALTO score=12 motivi=richieste_elevate,diverse_uri_uniche,molti_404,path_sospetti,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇭🇺 kranem	2026-09-08 03:00:14 (5 hours ago)	Triggered Cloudflare WAF from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-09-08T02:16:35Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 sthoyer.de	2026-09-08 02:46:36 (5 hours ago)	20.24.80.73 - - [08/Sep/2026:04:46:35 +0200] "GET /autoload_classmap.php HTTP/1.1" 302 495 "-" "Mozi ... show more 20.24.80.73 - - [08/Sep/2026:04:46:35 +0200] "GET /autoload_classmap.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:04:46:35 +0200] "GET /post.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:04:46:35 +0200] "GET /1.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇩 soc-yk	2026-09-08 02:42:16 (5 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 1061 Evidence: - Persistent suspicious network ... show more Type: suspicious_network_activity Risk: 100 Events: 1061 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇪🇸 el-brujo	2026-09-08 02:28:50 (5 hours ago)	20.24.80.73 - - [08/Sep/2026:04:28:48 +0200] "GET /autoload_classmap.php HTTP/2.0" 404 15943 "-" "Mo ... show more 20.24.80.73 - - [08/Sep/2026:04:28:48 +0200] "GET /autoload_classmap.php HTTP/2.0" 404 15943 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:04:28:49 +0200] "GET /post.php HTTP/2.0" 404 15943 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:04:28:49 +0200] "GET /1.php HTTP/2.0" 404 15943 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:04:28:49 +0200] "GET /flower.php HTTP/2.0" 404 15943 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇺🇸 TAY	2026-09-08 02:12:23 (6 hours ago)	20.24.80.73 - - [08/Sep/2026:10:03:57 +0800] "GET /updates.php HTTP/1.1" 404 2126 "-" "Mozilla/5.0 ( ... show more 20.24.80.73 - - [08/Sep/2026:10:03:57 +0800] "GET /updates.php HTTP/1.1" 404 2126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:10:04:00 +0800] "GET /update.php HTTP/1.1" 404 2126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:10:08:38 +0800] "GET /updates.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:10:08:41 +0800] "GET /update.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.24.80.73 - - [08/Sep/2026:10:12:09 +0800] "GET /updates.php HTTP/1.1" 404 80811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2 ... show less	Brute-Force
🇺🇸 deskpass.com	2026-09-08 01:57:12 (6 hours ago)	GET /meta.php	Web App Attack
🇫🇷 Tilellit.PRO	2026-09-08 01:49:01 (6 hours ago)	Malicious web traffic detected by CrowdSec	Hacking

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c38::12d

🇱🇰 220.247.224.226

🇮🇳 52.66.129.11

🇫🇷 213.32.21.31

🇳🇱 195.178.110.217

🇺🇸 173.16.189.42

🇧🇷 172.253.233.28

🇸🇬 149.118.48.73

🇺🇸 136.118.220.112

🇲🇦 105.156.238.238

🇮🇪 52.51.220.142

🇺🇸 40.124.82.183

🇨🇦 34.118.142.130

🇮🇳 34.100.217.171

🇮🇳 2401:4900:1c7e:10a5:fd73:76eb:59b4:cf62

🇰🇷 218.233.182.39

🇫🇷 212.90.120.154

🇺🇸 156.229.21.54

🇩🇪 130.12.180.90

🇮🇳 122.183.33.250