20.49.13.182
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
No reports in the last 60 days
20.49.13.182 has been reported 68 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
68 from
39 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 BlueWire Hosting |
Bad bot ignoring robot.txt
|
Bad Web Bot | |
| 🇩🇪 SCHAPPY |
Probing for non-installed web apps or current vulnerabilities.
|
Hacking Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 80)
Source port: 12416
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 20.49.13.182) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇺🇸 Rip |
Spoofed, Forged or malicious User-Agent detected.
|
Brute-Force Web App Attack | |
| 🇩🇪 todix |
WebAttack or semilar from 20.49.13.182
|
Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wordpress/ (Match: /wordpress/)
|
Hacking Exploited Host Web App Attack | |
| 🇩🇪 BlueWire Hosting |
Aggressive scanning resulting into 404
|
Bad Web Bot | |
| Anonymous |
denied traffic to a honeypot network. destination port 2086.
|
Port Scan Hacking | |
| 🇩🇪 Hazzard |
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
|
SQL Injection | |
| 🇺🇸 RAP |
2026-07-27 13:37:31 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇩🇪 2048 |
|
Port Scan | |
| 🇺🇸 Rayulcifer |
20.49.13.182 - - [30/Mar/2026:08:01:24 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-"
20.49.13.182 - - [30/Mar/2026:08:01:25 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/20.49.13.182
2026-02-25 00:05:15 ["whoami"]
2026-02-25 00:06:51 ["hostname"]
2026-02-25 00:00:29 ["hostname"]
2026-02-25 00:06:13 ["hostname"]
2026-02-25 00:01:25 ["pwd"]
|
Brute-Force | |
| 🇺🇸 serverargentina.com |
|
Brute-Force SSH | |
| 🇬🇧 knock |
SSH honeypot brute-force attempt (36 total hits)
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown