JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.215.49.97

20.215.49.97 was found in our database!

This IP was reported 183 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.215.49.97

Whois 20.215.49.97

IP Abuse Reports for 20.215.49.97:

This IP address has been reported a total of 183 times from 166 distinct sources. 20.215.49.97 was first reported on June 11th 2026, and the most recent report was 7 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-06-12 00:51:11 (7 seconds ago)	(mod_security) mod_security (id:20000010) triggered by 20.215.49.97 (PL/Poland/-): 5 in the last 300 ... show more (mod_security) mod_security (id:20000010) triggered by 20.215.49.97 (PL/Poland/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇩🇪 Philister11	2026-06-12 00:39:46 (11 minutes ago)	CrowdSec: crowdsecurity/http-probing (PL/AS8075)	Web App Attack Hacking
🇺🇸 xmission.com	2026-06-12 00:38:09 (13 minutes ago)	Blocked by UFW (TCP on 80) Source port: 20671 TTL: 101 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 20671 TTL: 101 Packet length: 52 TOS: 0x00 This report (for 20.215.49.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 pscriptos	2026-06-12 00:28:08 (23 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇸🇬 lancernz	2026-06-12 00:23:03 (28 minutes ago)	Auto-detected: 31 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring ... show more Auto-detected: 31 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇨🇭 backslash	2026-06-12 00:06:14 (45 minutes ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
Anonymous	2026-06-12 00:05:15 (46 minutes ago)	PHP file probing detected by Fail2Ban	Web App Attack
🇩🇪 macrob	2026-06-12 00:04:22 (46 minutes ago)	2026/06/12 00:03:53 [error] 2130147#2130147: 299099126 access forbidden by rule, client: 20.215.49. ... show more 2026/06/12 00:03:53 [error] 2130147#2130147: 299099126 access forbidden by rule, client: 20.215.49.97, server: binixo.lk, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "binixo.lk" 2026/06/12 00:04:19 [error] 2130143#2130143: 299099122 access forbidden by rule, client: 20.215.49.97, server: binixo.lk, request: "GET /wp-content/radio.php HTTP/2.0", host: "binixo.lk" 2026/06/12 00:04:20 [error] 2130143#2130143: 299099734 access forbidden by rule, client: 20.215.49.97, server: binixo.lk, request: "GET /plugin-install.php HTTP/2.0", host: "binixo.lk" ... show less	Web App Attack
🇫🇷 sthoyer.de	2026-06-12 00:04:08 (47 minutes ago)	20.215.49.97 - - [12/Jun/2026:02:04:01 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.215.49.97 - - [12/Jun/2026:02:04:01 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 794 "-" "-" 20.215.49.97 - - [12/Jun/2026:02:04:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 794 "-" "-" 20.215.49.97 - - [12/Jun/2026:02:04:06 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 794 "-" "-" ... show less	Web App Attack
🇫🇷 AGEPCom	2026-06-12 00:03:17 (48 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-12 00:00:46 (50 minutes ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2026-06-12 00:00:11 (51 minutes ago)	20.215.49.97 - autoconfig.sliver85.eu - [12/Jun/2026:01:47:17 +0200] "GET /wp-content/plugins/hellop ... show more 20.215.49.97 - autoconfig.sliver85.eu - [12/Jun/2026:01:47:17 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.215.49.97 - autoconfig.sliver85.eu - [12/Jun/2026:01:47:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.215.49.97 - autoconfig.sliver85.eu - [12/Jun/2026:01:47:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" 20.215.49.97 - autoconfig.sliver85.eu - [12/Jun/2026:01:47:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-" ... show less	Brute-Force Web App Attack
🇫🇮 danskefilm.dk	2026-06-12 00:00:01 (51 minutes ago)	wordpress login attempts	Web App Attack
Anonymous	2026-06-11 23:54:14 (57 minutes ago)	Portscan: TCP/80 (6x)	Port Scan
🇫🇷 Catalin Negru	2026-06-11 23:50:11 (1 hour ago)	2026-06-12 02:50:02,694 fail2ban.actions [2945670]: NOTICE [apache-scan] Ban 20.215.49.97 20 ... show more 2026-06-12 02:50:02,694 fail2ban.actions [2945670]: NOTICE [apache-scan] Ban 20.215.49.97 2026-06-12 02:50:02,783 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 20.215.49.97 2026-06-12 02:50:03,031 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 20.215.49.97 2026-06-12 02:50:03,356 fail2ban.actions [2945670]: NOTICE [apache-security] Ban 20.215.49.97 2026-06-12 02:50:10,211 fail2ban.actions [2945670]: NOTICE [wordpress-scanner] Ban 20.215.49.97 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.168.2.77

🇰🇷 211.251.245.88

🇬🇧 193.163.125.121

🇲🇽 187.188.223.30

🇳🇱 185.226.197.50

🇳🇱 185.226.197.48

🇱🇻 185.113.139.84

🇨🇳 180.184.30.99

🇭🇰 165.154.60.76

🇩🇪 128.14.225.164

🇨🇳 101.126.157.138

🇧🇷 45.175.123.254

🇹🇼 45.43.37.254

🇬🇧 35.203.211.126

🇵🇰 14.1.107.190

🇮🇳 4.224.59.75

🇳🇱 204.76.203.206

🇧🇷 187.126.84.118

🇲🇽 186.96.145.241

🇦🇷 181.116.220.140