20.217.81.49
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- ๐ฎ๐ฑ Israel
- City
- Tel Aviv, Tel Aviv
Abuse Reports
Total reports
133 from
80 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ง๐ท Peregrine |
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 20.217.81.49 141.101.105.125 - - [23/Oct/2026:23:10:44 -0300] "GET /.git/config HTTP/1.1" 404 414
|
Bad Web Bot | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Cloud secrets probing
|
Bad Web Bot Web App Attack | |
| ๐ณ๐ฑ Alt255 |
|
Bad Web Bot Web App Attack | |
| ๐ณ๐ฑ Alt255 |
|
Bad Web Bot Web App Attack | |
| ๐ฉ๐ช gurnip |
Vulnerability probe of page /.git/config, not found on the server.
|
Brute-Force Web App Attack | |
| ๐จ๐ฆ AEITS |
Fail2Ban www
|
Bad Web Bot Web App Attack | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Cloud secrets probing
|
Bad Web Bot Web App Attack | |
| ๐ณ๐ฑ enpepet |
GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 URL:/.git/config
|
Port Scan Hacking Brute-Force Bad Web Bot | |
| Anonymous |
PSCSERV WPSCAN 20.217.81.49
|
Bad Web Bot Web App Attack | |
| ๐ง๐ท Peregrine |
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 20.217.81.49 141.101.105.125 - - [23/Oct/2026:23:10:44 -0300] "GET /.git/config HTTP/1.1" 404 414
|
Bad Web Bot | |
| ๐ซ๐ท YF |
Git config exposure probe
|
Web App Attack | |
| ๐ฉ๐ช big-cloud.nl |
Try to access /.git/config
|
Web App Attack | |
| ๐บ๐ธ kosada.com |
Repeated exploit attempts, for example: /.git/config /.git/config (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36")
|
Web App Attack | |
| ๐ฉ๐ช altenglaner |
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
|
Hacking Web App Attack | |
| ๐ซ๐ท geot |
GET /.git/config HTTP/1.1
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown