20.240.91.97

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
25 reports
23 reporters · latest 1 year ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇸🇪 Sweden
City
Gavle, Gavleborg
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.240.91.97 has been reported 25 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
25 from 23 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Vegascosmetics
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇩🇪 LRob
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇦🇺 paulshipley.com.au
Web App Attack
🇩🇪 Vegascosmetics
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking Bad Web Bot Web App Attack
🇺🇸 myagent.site
Blocking for trying to access an exploit file: /tinyfilemanager.php
Hacking
🇬🇧 findlab
Backdrop CMS module - malicious activity detected
Bad Web Bot Web App Attack
🇺🇸 mnsf
Too many Status 40X (12)
Brute-Force Web App Attack
🇺🇸 iwle
Port Scan Brute-Force
🇩🇪 thesimonmanuel
Hacking Web App Attack
🇫🇷 COMAITE
Multiple web server 400 error codes from same source ip 20.240.91.97.
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /wp-l0gin.php HTTP/1.1, GET /wp-includes/wp_class_datlib.php HTTP/1.1, GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1, GET /wp-login.php HTTP/1.1
Hacking Web App Attack
🇨🇭 backslash
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
Anonymous
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force SSH
Anonymous
Blocked: Reason='Vulnerability probing — PHP scan detected (76/60 min)'; Requests=76
Port Scan
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 198.23.136.27
🇲🇩 143.246.221.209
🇨🇳 111.61.229.78
🇵🇱 45.138.12.179
🇺🇸 24.1.196.232
🇧🇪 198.235.24.195
🇬🇧 195.140.214.19
🇳🇱 185.226.197.37
🇵🇰 182.189.136.61
🇺🇸 172.234.25.187
🇧🇷 170.0.143.92
🇵🇱 162.158.103.209
🇺🇸 147.185.132.24
🇺🇸 104.164.173.124
🇩🇪 104.28.159.213
🇸🇬 94.231.206.132
feedback