JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.240.91.2

Neutral Activity

Abuse Confidence Score

0% Low Risk

64 reports

45 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇸🇪 Sweden
City: Gavle, Gavleborg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.240.91.2 has been reported 64 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

64 from 45 distinct reporters

First reported

September 1st 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-04 20:08:37 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-09-03 23:06:37 UTC · (1 year ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-09-03 20:08:35 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-09-02 23:04:13 UTC · (1 year ago)		Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2025-09-02 21:50:32 UTC · (1 year ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇬🇧 Andrew	2025-09-02 20:44:31 UTC · (1 year ago)	20.240.91.2 - - [02/Sep/2025:20:44:27 +0000] "GET /aa.php HTTP/1.1" 404 5657 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /about.php HTTP/1.1" 404 3668 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /admin.php HTTP/1.1" 404 36 ... show more 20.240.91.2 - - [02/Sep/2025:20:44:27 +0000] "GET /aa.php HTTP/1.1" 404 5657 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /about.php HTTP/1.1" 404 3668 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /admin.php HTTP/1.1" 404 3668 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /akc.php HTTP/1.1" 404 3666 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /alfa.php HTTP/1.1" 404 3667 "-" "-" 20.240.91.2 - - [02/Sep/2025:20:44:28 +0000] "GET /asasx.php HTTP/1.1" 404 3668 "-" "-" ... show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-02 19:50:11 UTC · (1 year ago)	wordpress-trap	Web App Attack
🇫🇷 COMAITE	2025-09-02 19:46:54 UTC · (1 year ago)	Multiple web server 400 error codes from same source ip 20.240.91.2.	Web App Attack
🇦🇺 paulshipley.com.au	2025-09-02 19:34:39 UTC · (1 year ago)	valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:20 +1000] "GET /aa.php HTTP/1.1" 404 153036 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:23 +1000] "GET /about.php HTTP/1.1" 404 150354 "-" "-" valueadde ... show more valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:20 +1000] "GET /aa.php HTTP/1.1" 404 153036 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:23 +1000] "GET /about.php HTTP/1.1" 404 150354 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:25 +1000] "GET /admin.php HTTP/1.1" 404 150354 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:28 +1000] "GET /akc.php HTTP/1.1" 404 150352 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:31 +1000] "GET /alfa.php HTTP/1.1" 404 150348 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:33 +1000] "GET /asasx.php HTTP/1.1" 404 150354 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:36 +1000] "GET /atomlib.php HTTP/1.1" 404 150356 "-" "-" valueaddedpromotions.com.au:443 20.240.91.2 - - [03/Sep/2025:05:33:39 +1000] "GET /autoload_classmap.php HTTP/1.1" 404 150366 "-" "-" valueaddedpromot ... show less	Web App Attack
🇳🇱 Mangelot Hosting	2025-09-02 17:06:01 UTC · (1 year ago)	(upload_shell) srv101 Shell upload 20.240.91.2 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇩🇪 macrob	2025-09-02 16:27:40 UTC · (1 year ago)	2025/09/02 16:27:37 [error] 2925148#2925148: 22088223 access forbidden by rule, client: 20.240.91.2, server: binixo.vn, request: "GET /admin.php HTTP/2.0", host: "binixo.vn" 2025/09/02 16:27:39 [error] 2925149#2925149: 22088309 access forbidden by ... show more 2025/09/02 16:27:37 [error] 2925148#2925148: 22088223 access forbidden by rule, client: 20.240.91.2, server: binixo.vn, request: "GET /admin.php HTTP/2.0", host: "binixo.vn" 2025/09/02 16:27:39 [error] 2925149#2925149: 22088309 access forbidden by rule, client: 20.240.91.2, server: binixo.vn, request: "GET /wp-content/plugins/about.php HTTP/2.0", host: "binixo.vn" 2025/09/02 16:27:39 [error] 2925150#2925150: *22088317 access forbidden by rule, client: 20.240.91.2, server: binixo.vn, request: "GET /wp-content/plugins/admin.php HTTP/2.0", host: "binixo.vn" ... show less	Web App Attack
🇳🇱 CryptoYakari	2025-09-02 15:41:41 UTC · (1 year ago)	[Tue Sep 02 18:41:39.379228 2025] [proxy_fcgi:error] [pid 4009443:tid 4009460] [client 20.240.91.2:0] AH01071: Got error 'Primary script unknown' [Tue Sep 02 18:41:39.491749 2025] [proxy_fcgi:error] [pid 4009443:tid 4009468] [client 20.240.91.2:0] AH ... show more [Tue Sep 02 18:41:39.379228 2025] [proxy_fcgi:error] [pid 4009443:tid 4009460] [client 20.240.91.2:0] AH01071: Got error 'Primary script unknown' [Tue Sep 02 18:41:39.491749 2025] [proxy_fcgi:error] [pid 4009443:tid 4009468] [client 20.240.91.2:0] AH01071: Got error 'Primary script unknown' [Tue Sep 02 18:41:39.595369 2025] [proxy_fcgi:error] [pid 4009443:tid 4009494] [client 20.240.91.2:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-09-02 14:57:17 UTC · (1 year ago)	20.240.91.2 - - [02/Sep/2025:17:57:16 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 404 196 "-" "-" ...	Web App Attack
🇺🇸 mnsf	2025-09-02 12:05:11 UTC · (1 year ago)	Too many Status 40X (11)	Brute-Force Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 43.154.88.182

🇺🇸 2604:a880:400:d1:0:5:5fc3:8001

🇺🇸 2604:a880:400:d1:0:5:5f7a:3001

🇺🇸 128.92.194.90

🇮🇳 103.147.248.23

🇺🇸 40.114.36.50

🇬🇧 35.203.211.137

🇧🇪 34.38.19.77

🇺🇸 20.115.91.172

🇩🇪 20.52.137.255

🇳🇱 193.47.62.69

🇫🇮 185.89.42.11

🇻🇳 103.68.69.15

🇲🇩 89.34.65.167

🇰🇼 78.89.154.59

🇺🇸 75.142.18.106

🇺🇸 52.179.208.167

🇦🇷 200.225.116.240

🇩🇪 130.61.73.28

🇫🇮 130.49.77.253