JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.49.180.59

20.49.180.59 was found in our database!

This IP was reported 188 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.49.180.59

Whois 20.49.180.59

IP Abuse Reports for 20.49.180.59:

This IP address has been reported a total of 188 times from 50 distinct sources. 20.49.180.59 was first reported on March 16th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2022-08-01 01:06:01 (3 years ago)	10 attacks on PHP URLs: 20.49.180.59 - - [31/Jul/2022:23:59:01 +0100] "HEAD /site/xmlrpc.php HTTP/1. ... show more 10 attacks on PHP URLs: 20.49.180.59 - - [31/Jul/2022:23:59:01 +0100] "HEAD /site/xmlrpc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" show less	Web App Attack
🇲🇾 syokadmin	2022-07-31 21:12:04 (3 years ago)	(mod_security) mod_security (id:77316861) triggered by 20.49.180.59 (-): 1 in the last 3600 secs	Brute-Force
🇺🇦 URAN Publishing Service	2022-07-31 18:58:39 (3 years ago)	20.49.180.59 - - [01/Aug/2022:01:58:35 +0300] "HEAD /xmlrpc.php HTTP/1.1" 404 231 "-" "Mozilla/5.0 ( ... show more 20.49.180.59 - - [01/Aug/2022:01:58:35 +0300] "HEAD /xmlrpc.php HTTP/1.1" 404 231 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.49.180.59 - - [01/Aug/2022:01:58:37 +0300] "GET /wp-login.php HTTP/1.1" 404 273 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" ... show less	Web App Attack
🇧🇷 AC - Team	2022-07-30 14:41:58 (3 years ago)	20.49.180.59 - - [30/Jul/2022:15:41:57 -0300] "GET /.env HTTP/1.1" 403 3502 "-" "Mozilla/5.0 (Window ... show more 20.49.180.59 - - [30/Jul/2022:15:41:57 -0300] "GET /.env HTTP/1.1" 403 3502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Exploited Host Web App Attack
🇧🇷 AC - Team	2022-07-30 13:47:23 (3 years ago)	20.49.180.59 - - [30/Jul/2022:14:47:29 -0300] "GET /.env HTTP/1.1" 403 3407 "-" "Mozilla/5.0 (Window ... show more 20.49.180.59 - - [30/Jul/2022:14:47:29 -0300] "GET /.env HTTP/1.1" 403 3407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 fortypoundhead	2022-07-30 08:18:01 (3 years ago)	PHP vulnerability scan	Web App Attack
🇮🇪 Delta Whiskey	2022-07-30 05:16:42 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇳🇱 revoxhere	2022-07-30 02:51:20 (3 years ago)	PHP attack attempt.	Web App Attack
🇩🇪 SpaceHost-Server	2022-07-25 23:32:22 (3 years ago)	20.49.180.59 - - [26/Jul/2022:05:32:21 +0200] "POST /xmlrpc.php HTTP/1.0" 200 795 "-" "Mozilla/5.0 ( ... show more 20.49.180.59 - - [26/Jul/2022:05:32:21 +0200] "POST /xmlrpc.php HTTP/1.0" 200 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 20.49.180.59 - - [26/Jul/2022:05:32:21 +0200] "POST /xmlrpc.php HTTP/1.0" 200 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 20.49.180.59 - - [26/Jul/2022:05:32:21 +0200] "POST /xmlrpc.php HTTP/1.0" 200 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 CrystalMaker	2022-07-25 20:46:08 (3 years ago)	Wordpress attack - GET /; GET /; GET /wp-includes/wlwmanifest.xml; GET /xmlrpc.php?rsd; GET /; GET / ... show more Wordpress attack - GET /; GET /; GET /wp-includes/wlwmanifest.xml; GET /xmlrpc.php?rsd; GET /; GET /blog/wp-includes/wlwmanifest.xml; GET /web/wp-includes/wlwmanifest.xml; GET /wordpress/wp-includes/wlwmanifest.xml; GET /website/wp-includes/wlwmanifest.xml; GET /wp/wp-includes/wlwmanifest.xml; GET /news/wp-includes/wlwmanifest.xml; GET /2020/wp-includes/wlwmanifest.xml; GET /2019/wp-includes/wlwmanifest.xml; GET /shop/wp-includes/wlwmanifest.xml; GET /wp1/wp-includes/wlwmanifest.xml; GET /test/wp-includes/wlwmanifest.xml; GET /wp2/wp-includes/wlwmanifest.xml; GET /site/wp-includes/wlwmanifest.xml; GET /cms/wp-includes/wlwmanifest.xml; GET /sito/wp-includes/wlwmanifest.xml; GET /; GET /wp-includes/wlwmanifest.xml; GET /xmlrpc.php?rsd; GET /; GET /blog/wp-includes/wlwmanifest.xml; GET /web/wp-includes/wlwmanifest.xml; GET /wordpress/wp-includes/wlwmanifest.xml; GET /website/wp-includes/wlwmanifest.xml; GET /wp/wp-includes/wlwmanifest.xml; GET /news/wp-includes/wlwmanifest.xml; GET /2015/wp-includes/wlwmanife... show less	Web App Attack
🇩🇪 stinpriza	2022-07-25 19:34:04 (3 years ago)	WP Authentication attempt for unknown user	Brute-Force Web App Attack
🇺🇸 jormaster3k	2022-07-25 17:24:10 (3 years ago)	Attack against WordPress	Web App Attack
🇧🇷 AC - Team	2022-07-25 14:09:41 (3 years ago)	20.49.180.59 - - [25/Jul/2022:15:09:41 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 1761 ... show more 20.49.180.59 - - [25/Jul/2022:15:09:41 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 1761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Exploited Host Web App Attack
🇩🇪 nextweb	2022-07-25 12:36:05 (3 years ago)	(mod_security) mod_security (id:210410) triggered by 20.49.180.59 (GB/United Kingdom/England/London/ ... show more (mod_security) mod_security (id:210410) triggered by 20.49.180.59 (GB/United Kingdom/England/London/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇳🇱 Roderic	2022-07-25 12:27:32 (3 years ago)	(wordpress) Failed wordpress login from 20.49.180.59 (GB/United Kingdom/-)	Brute-Force

Showing 1 to 15 of 188 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 178.128.51.84

🇧🇷 177.11.184.201

🇧🇷 177.11.184.20

🇸🇪 104.243.196.188

🇹🇳 102.158.102.243

🇰🇷 52.141.56.102

🇨🇳 49.64.169.153

🇦🇿 37.114.182.204

🇷🇺 31.173.2.182

🇧🇷 177.11.184.2

🇸🇪 171.25.158.70

🇺🇸 147.182.177.180

🇨🇳 113.201.64.23

🇺🇸 65.49.1.108

🇨🇴 206.62.136.130

🇧🇷 177.11.184.198

🇧🇷 177.11.184.196

🇺🇸 64.236.142.147

🇱🇺 64.89.161.90

🇺🇸 64.62.156.98