JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.53.249.197

Recent Activity

Abuse Confidence Score

100% Critical

1,015 reports

315 reporters · latest 1 minute ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,015 from 315 distinct reporters

First reported

October 19th 2026

Most recent report

1 minute ago

Last 60 days

Top reporter locations 🇩🇪 Germany 243 🇺🇸 United States of America 188 🇫🇷 France 85

Most common categories Web App Attack 829 Brute-Force 262 Bad Web Bot 215 Hacking 162 Port Scan 75

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 botwork.se	2026-10-29 05:57:01 (1 minute ago)	{"level":"info","ts":"2026-10-29T05:56:53Z","logger":"http.log.access.log9","msg":"handled request","request":{"remote_ip":"20.53.249.197","remote_port":"2048","client_ip":"20.53.249.197","proto":"HTTP/1.1","method":"GET","host":"botwork.se","uri":"/ ... show more {"level":"info","ts":"2026-10-29T05:56:53Z","logger":"http.log.access.log9","msg":"handled request","request":{"remote_ip":"20.53.249.197","remote_port":"2048","client_ip":"20.53.249.197","proto":"HTTP/1.1","method":"GET","host":"botwork.se","uri":"/wp-content/uploads/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, /; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Sec-Fetch-Site":["none"],"Dnt":["1"],"Connection":["keep-alive"],"Accept-Language":["en-US, en; q=0.9"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Accept-Encoding":["gzip, deflate, br"],"Sec-Ch-Ua-Mobile" ... show less	Web App Attack
🇺🇸 entangled_mongoose	2026-10-29 05:54:35 (3 minutes ago)	Probed /wp-content/uploads/.	Web App Attack
🇪🇸 librebit	2026-10-29 05:51:14 (7 minutes ago)	Brute force	Brute-Force
🇩🇪 Viveronese	2026-10-29 05:41:38 (16 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇫🇷 security.rdmc.fr	2026-10-29 04:59:51 (58 minutes ago)	Web scan: requests for sensitive files	Web App Attack Bad Web Bot
🇩🇪 Bedios GmbH	2026-10-29 04:55:53 (1 hour ago)	Scanning for WordPress Installations and Vulnerabilities	Web App Attack
🇵🇱 miriks	2026-10-29 04:52:10 (1 hour ago)	Automated scan detected: GET /wp-content/uploads/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36	Port Scan Web App Attack
🇫🇷 Zundapper	2026-10-29 04:38:21 (1 hour ago)	20.53.249.197 - - [29/Oct/2026:05:38:21 +0100] "GET /wp-content/uploads/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ...	Web App Attack Port Scan
🇫🇮 botwork.se	2026-10-29 04:26:42 (1 hour ago)	{"level":"info","ts":"2026-10-29T04:26:06Z","logger":"http.log.access.log9","msg":"handled request","request":{"remote_ip":"20.53.249.197","remote_port":"2769","client_ip":"20.53.249.197","proto":"HTTP/1.1","method":"GET","host":"botwork.se","uri":"/ ... show more {"level":"info","ts":"2026-10-29T04:26:06Z","logger":"http.log.access.log9","msg":"handled request","request":{"remote_ip":"20.53.249.197","remote_port":"2769","client_ip":"20.53.249.197","proto":"HTTP/1.1","method":"GET","host":"botwork.se","uri":"/inputs.php","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, /; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Language":["en-US, en; q=0.9"],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"Sec-Fetch-Mode":["navigate"],"Dnt":["1"],"Connection":["keep-alive"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"]}, ... show less	Web App Attack
🇺🇦 Infocom	2026-10-29 04:24:01 (1 hour ago)	WEB_Brute-Force	Brute-Force
🇳🇱 Roderic	2026-10-29 04:04:31 (1 hour ago)	Insights: 43 probe requests within 24 hours on 1 site, e.g. /wp-content/uploads/ (no normal page views)	Web App Attack
🇳🇱 informedclearly.com	2026-10-29 04:03:20 (1 hour ago)	WAF_BAN reason=WP_SCANNER rule=WP_PATH hits=5 path=/wp-includes/PHPMailer/? ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36	Port Scan Hacking
🇷🇺 Mga Admin	2026-10-29 03:57:04 (2 hours ago)	20.53.249.197 - - [29/Oct/2026:10:57:03 +0700] "GET /wp-content/uploads/ HTTP/1.1" 404 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ...	Web App Attack
🇫🇮 KTSTechnology	2026-10-29 03:54:58 (2 hours ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
Anonymous	2026-10-29 03:53:12 (2 hours ago)	[Thu Oct 29 04:53:11.762631 2026] [authz_core:error] [pid 14320:tid 14369] [client 20.53.249.197:19470] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/ ...	Brute-Force Web App Attack

Showing 1 to 15 of 1015 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 223.225.105.220

🇦🇷 207.191.165.110

🇵🇸 178.214.88.69

🇵🇹 178.166.23.146

🇻🇳 171.252.60.67

🇺🇸 162.216.150.38

🇮🇳 152.58.57.49

🇵🇭 136.158.61.106

🇺🇸 107.174.48.22

🇧🇩 103.185.224.24

🇰🇪 102.207.44.131

🇳🇱 89.21.67.134

🇮🇷 78.39.13.11

🇺🇸 66.132.195.75

🇳🇱 45.153.34.189

🇮🇳 2409:40d6:442:4991:d8e9:572d:4551:b69d

🇮🇳 2402:3a80:4175:6197:95d4:a40e:9c5a:7ab1

🇻🇪 201.249.87.201

🇨🇱 190.114.43.27

🇫🇮 157.22.75.193