JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.56.20.160

149.56.20.160 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 0%: ?

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns529080.ip-149-56-20.net
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.56.20.160

Whois 149.56.20.160

IP Abuse Reports for 149.56.20.160:

This IP address has been reported a total of 122 times from 41 distinct sources. 149.56.20.160 was first reported on June 23rd 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MHuiG	2024-02-27 20:06:44 (2 years ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 16276 clientAS ... show more The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 16276 clientASNDescription: OVH clientCountryName: CA clientIP: 149.56.20.160 clientRequestHTTPHost: ssl.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2024-02-27T19:22:55Z rayName: 85c2cca30a853870 ruleId: asn userAgent: Mozilla/5.0 (Windows NT 10.0; rv:73.0) Gecko/20100101 Firefox/73.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇨🇭 unifr	2024-02-24 00:02:27 (2 years ago)	Unauthorized IMAP connection attempt	Brute-Force
🇨🇭 backslash	2024-02-23 19:10:10 (2 years ago)	block ruleset BECD12F7534F5C7593316CD42723C759ED3AB940	Bad Web Bot
🇵🇱 strefapi_com	2024-02-18 05:50:34 (2 years ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
🇲🇾 syokadmin	2024-02-17 15:05:47 (2 years ago)	149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 se ... show more 149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 secs show less	Brute-Force
🇩🇪 Hazzard	2024-02-17 03:42:42 (2 years ago)	149.56.20.160 (CA/Canada/Quebec/Montreal/ns529080.ip-149-56-20.net/[redacted]), more than 3 Apache 4 ... show more 149.56.20.160 (CA/Canada/Quebec/Montreal/ns529080.ip-149-56-20.net/[redacted]), more than 3 Apache 403 hits show less	Hacking
🇦🇺 MAGIC	2024-02-16 07:00:17 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 strefapi_com	2024-02-13 18:49:32 (2 years ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
🇩🇪 Hazzard	2024-02-08 22:45:18 (2 years ago)	149.56.20.160 (CA/Canada/Quebec/Montreal/ns529080.ip-149-56-20.net/[redacted]), more than 3 Apache 4 ... show more 149.56.20.160 (CA/Canada/Quebec/Montreal/ns529080.ip-149-56-20.net/[redacted]), more than 3 Apache 403 hits show less	Hacking
🇲🇾 syokadmin	2024-02-08 09:17:27 (2 years ago)	149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 se ... show more 149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2024-02-08 09:17:27 (2 years ago)	149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 se ... show more 149.56.20.160 (CA/Canada/ns529080.ip-149-56-20.net), more than 2 Apache 403 hits in the last 3600 secs show less	Brute-Force
🇦🇺 MAGIC	2024-02-08 05:16:49 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-01-30 12:08:19 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2024-01-27 19:32:16 (2 years ago)	[Sun Jan 28 02:32:14.282714 2024] [security2:error] [pid 96298:tid 135717611112000] [client 149.56.2 ... show more [Sun Jan 28 02:32:14.282714 2024] [security2:error] [pid 96298:tid 135717611112000] [client 149.56.20.160:50152] [client 149.56.20.160] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "62"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 149.56.20.160 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZbVaPvhA7ISRuKH_aRLnvgAAAGQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[96400] [XPk3eJr7Ox0] [ZbVaPvhA7ISRuKH_aRLnvgAAAGQ] keep_alive=[0] [2024-01-28 02:32:14.282718] [R:ZbVaPvhA7ISRuKH_aRLnvgAAAGQ] UA:'Mozilla/5.0 (Windows NT 10.0; rv:73.0) Gecko/20100101 Firefox/73.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/css, /' ... show less	Hacking Web App Attack
Anonymous	2024-01-20 10:55:53 (2 years ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.181.211.31

🇺🇸 158.94.187.63

🇩🇪 142.252.6.95

🇺🇸 135.237.126.225

🇸🇬 47.84.206.215

🇭🇰 45.142.154.99

🇬🇭 41.139.47.230

🇱🇹 194.165.16.167

🇨🇳 113.221.44.48

🇳🇱 45.148.10.157

🇬🇧 35.203.211.134

🇳🇱 34.178.21.247

🇨🇳 223.109.252.155

🇧🇷 205.210.31.132

🇺🇦 193.56.12.240

🇰🇿 185.233.3.95

🇳🇱 45.148.10.216

🇧🇷 187.51.208.158

🇺🇸 147.185.132.123

🇺🇸 147.185.132.9