JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.220.20.149

135.220.20.149

Neutral Activity

320 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Limited

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

135.220.20.149 has been reported 320 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 135.220.20.149:

This IP address has been reported a total of 320 times from 176 distinct sources. 135.220.20.149 was first reported on April 27th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Altis Shield	2025-12-01 01:50:50 (8 months ago)	Failed password for invalid user root from 135.220.20.149 port 44230 ssh2	Brute-Force SSH
🇺🇸 MKWServer	2025-09-09 19:50:03 (11 months ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇺🇸 MKWServer	2025-09-07 14:15:03 (11 months ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇺🇸 MKWServer	2025-09-05 09:55:03 (11 months ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-01 20:08:34 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 SecondEdge	2025-09-01 09:17:30 (11 months ago)	A web attack was detected from 135.220.20.149 (United States / Illinois / Chicago) against lifeofstu ... show more A web attack was detected from 135.220.20.149 (United States / Illinois / Chicago) against lifeofstu.co.uk (Wordpress Admin) over 2s. show less	Web App Attack
🇧🇪 Ivo Vynckier	2025-09-01 08:23:00 (11 months ago)	135.220.20.149 - - [01/Sep/2025:08:02:49 +0200] "GET /.alf.php HTTP/1.1" 404 27 "-" "-" 135.220.20. ... show more 135.220.20.149 - - [01/Sep/2025:08:02:49 +0200] "GET /.alf.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:49 +0200] "GET /.bod/.ll/ss.php HTTP/1.1" 404 7295 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:49 +0200] "GET /aa.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:49 +0200] "GET /about.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /admin.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /akc.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /alfa.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /asasx.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /atomlib.php HTTP/1.1" 404 27 "-" "-" 135.220.20.149 - - [01/Sep/2025:08:02:50 +0200] "GET /buy.php HTTP/1.1" 301 252 "-" "-" show less	Web App Attack
🇫🇷 danirod	2025-09-01 06:49:22 (11 months ago)	135.220.20.149 - - [01/Sep/2025:06:49:21 +0000] "GET https://dashboard.makigas.es/.alf.php HTTP/1.1" ... show more 135.220.20.149 - - [01/Sep/2025:06:49:21 +0000] "GET https://dashboard.makigas.es/.alf.php HTTP/1.1" 404 10479 "-" "-" 0.035 135.220.20.149 - - [01/Sep/2025:06:49:21 +0000] "GET https://dashboard.makigas.es/.bod/.ll/ss.php HTTP/1.1" 404 10479 "-" "-" 0.058 135.220.20.149 - - [01/Sep/2025:06:49:21 +0000] "GET https://dashboard.makigas.es/aa.php HTTP/1.1" 404 10479 "-" "-" 0.034 ... show less	Brute-Force
🇺🇸 construct.net	2025-09-01 06:10:38 (11 months ago)	Triggered rate limiter [PRD-VM-WEB2a]	Bad Web Bot
🇺🇸 snappic	2025-09-01 06:04:45 (11 months ago)	Malicious URI path & NULL user agent [GET /about.php] [NULL user agent]	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-09-01 05:41:07 (11 months ago)	135.220.20.149 - - [01/Sep/2025:08:41:03 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 4 ... show more 135.220.20.149 - - [01/Sep/2025:08:41:03 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇫🇷 MatStef132	2025-09-01 04:58:16 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/ UA: Empty string show less	Bad Web Bot
🇺🇸 ph	2025-09-01 04:27:50 (11 months ago)	Bad web bot attempting to run lock360.php on non-WP site	Hacking Bad Web Bot Web App Attack
🇸🇪 sweplox.se	2025-09-01 03:39:48 (11 months ago)	135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /.alf.php HTTP/1.1" 301 178 "-" "-" 135.220.20. ... show more 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /.alf.php HTTP/1.1" 301 178 "-" "-" 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /.bod/.ll/ss.php HTTP/1.1" 301 178 "-" "-" 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /aa.php HTTP/1.1" 301 178 "-" "-" 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /about.php HTTP/1.1" 301 178 "-" "-" 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "-" 135.220.20.149 - - [01/Sep/2025:03:39:47 +0000] "GET /akc.php HTTP/1.1" 301 178 "-" "-" ... show less	Bad Web Bot SSH

Showing 1 to 15 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 182.52.21.2

🇯🇵 152.32.203.18

🇳🇱 89.149.241.127

🇸🇪 45.84.107.222

🇨🇳 14.18.77.99

🇸🇬 192.250.235.185

🇷🇺 178.65.173.96

🇺🇸 167.99.234.119

🇸🇬 140.245.103.252

🇻🇳 116.99.168.167

🇨🇳 101.71.134.164

🇷🇺 89.109.59.8

🇺🇸 50.35.168.148

🇻🇳 222.254.2.249

🇱🇹 213.176.26.37

🇺🇸 198.179.70.19

🇳🇱 192.42.116.144

🇫🇷 91.196.152.48

🇬🇧 62.60.130.253

🇫🇷 54.38.180.48