JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.249.209.240

20.249.209.240 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 97%: ?

97%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.249.209.240

Whois 20.249.209.240

IP Abuse Reports for 20.249.209.240:

This IP address has been reported a total of 60 times from 49 distinct sources. 20.249.209.240 was first reported on July 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-14 06:00:12 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 Site.eu	2026-08-12 07:48:52 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 cybertechsec	2026-08-11 11:52:00 (3 weeks ago)	Searching .(env\|sql\|zip\|tar\|rar) files - Resource Drain (High Crawl) Ignore robots directives	Brute-Force Bad Web Bot Web App Attack Hacking
🇺🇸 nyt	2026-08-10 00:44:44 (3 weeks ago)	Bad Web Bot, Web App Attack, suspicious: 404 flood (16/60s)	Bad Web Bot Web App Attack
Anonymous	2026-08-08 04:52:30 (3 weeks ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
Anonymous	2026-08-06 08:12:28 (3 weeks ago)	20.249.209.240 - - [05/Aug/2026:17:03:35 -0500] "GET /db.sqlite HTTP/1.1" 404 311264 "-" "Mozilla/5. ... show more 20.249.209.240 - - [05/Aug/2026:17:03:35 -0500] "GET /db.sqlite HTTP/1.1" 404 311264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/603.1.10 (KHTML, like Gecko) Version/10.1 Safari/603.1.10" 172.71.110.196 20.249.209.240 - - [05/Aug/2026:17:03:37 -0500] "GET /database.sqlite HTTP/1.1" 404 311264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 162.158.138.97 20.249.209.240 - - [05/Aug/2026:17:03:47 -0500] "GET /db.sqlite HTTP/1.1" 404 204776 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 172.71.110.197 20.249.209.240 - - [05/Aug/2026:17:04:08 -0500] "GET /db.sqlitedb HTTP/1.1" 503 18083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.2 (x64 de)" 172.71.110.197 20.249.209.240 - - [05/Aug/2026:17:04:09 -0500] "GET /database.sqlitedb HTTP/1.1" 503 18083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64 ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-08-05 20:51:31 (3 weeks ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 20.249.209.240 - - [04/Aug/2 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 20.249.209.240 - - [04/Aug/2026:06:47:54 +0300] "GET /backup.sql HTTP/1.1" 403 2423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" show less	Web App Attack
🇨🇭 backslash	2026-08-05 12:51:01 (3 weeks ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇺🇸 maxasp.net	2026-08-05 12:15:27 (3 weeks ago)	Inc-HTTP-Safe Reject, collection = JA4/Browser; Attack Var: IP Reputation; Attack Data: Score: 100	SQL Injection
🇵🇱 sefinek.net	2026-08-05 12:04:53 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from KR. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from KR. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 alferez	2026-08-05 06:57:22 (3 weeks ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇩🇪 london2038.com	2026-08-05 05:24:47 (3 weeks ago)	Malformed or malicious web request 20.249.209.240 - - [05/Aug/2026:07:24:43 +0200] "GET / HTTP/1.1" ... show more Malformed or malicious web request 20.249.209.240 - - [05/Aug/2026:07:24:43 +0200] "GET / HTTP/1.1" 400 635 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 conseilgouz	2026-08-05 05:04:46 (3 weeks ago)	joe-7 : Trying access unauthorized files/dir=>/db_backup.sql	Hacking
Anonymous	2026-08-05 04:52:34 (3 weeks ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
🇭🇺 kranem	2026-08-05 03:00:17 (3 weeks ago)	Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-05T00:52:40Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.89.109.112

🇺🇸 163.123.184.82

🇺🇸 163.123.184.9

🇩🇪 144.172.68.56

🇮🇩 103.129.152.39

🇨🇿 78.44.192.210

🇫🇷 37.66.149.214

🇻🇪 201.208.223.156

🇫🇷 185.177.72.70

🇺🇸 163.123.184.212

🇻🇳 123.30.106.64

🇬🇧 103.244.226.141

🇺🇸 35.245.213.220

🇺🇸 35.196.107.182

🇺🇸 34.214.14.191

🇺🇸 34.148.211.101

🇫🇮 204.168.204.232

🇬🇧 195.96.139.150

🇳🇱 173.194.170.30

🇺🇸 163.123.184.195