20.9.49.147

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse confidence score ?
0% Low Risk
76 reports
55 reporters ยท latest 5 months ago
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.9.49.147 has been reported 76 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.9.49.147

This IP address has been reported a total of 76 times from 55 distinct sources. 20.9.49.147 was first reported on , and the most recent report was .

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡ณ evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on milky
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ ambor
L0ss Honeypot: phpinfo disclosure attempt. Path: /phpinfo.php
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on bean
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on ec102933
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on eris
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ธ๐Ÿ‡ช Lemmy
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on frost
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Savvii
20 attempts against mh-misbehave-ban on eris
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง Greg Poulson
Our website was hit by this DDOS at a rate of 51 in 5 minutes.
DDoS Attack Web Spam Brute-Force
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 20.9.49.147 (US/United States/-)
SQL Injection
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ myagent.site
Blocking for trying to access an exploit file: /_profiler/phpinfo.php
Hacking
๐Ÿ‡จ๐Ÿ‡ญ TOCE
48 hits seen on 2026-04-07, ports 21 (FTP), 22 (SSH) on a honeypot from www.toce.ch
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ ambor
Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ต 202.166.205.98
๐Ÿ‡ฎ๐Ÿ‡ฉ 202.158.36.50
๐Ÿ‡ณ๐Ÿ‡ฑ 178.128.251.121
๐Ÿ‡จ๐Ÿ‡ณ 114.244.219.215
๐Ÿ‡ฎ๐Ÿ‡ณ 103.104.112.8
๐Ÿ‡บ๐Ÿ‡ธ 74.7.227.177
๐Ÿ‡บ๐Ÿ‡ธ 52.167.144.166
๐Ÿ‡ฏ๐Ÿ‡ต 40.74.77.37
๐Ÿ‡บ๐Ÿ‡ธ 20.65.202.124
๐Ÿ‡ซ๐Ÿ‡ท 178.238.238.175
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.117
๐Ÿ‡ณ๐Ÿ‡ฑ 146.190.224.165
๐Ÿ‡จ๐Ÿ‡ณ 140.255.149.231
๐Ÿ‡ป๐Ÿ‡ณ 103.60.242.169
๐Ÿ‡บ๐Ÿ‡ธ 100.2.216.128
๐Ÿ‡จ๐Ÿ‡ฆ 217.181.83.170
๐Ÿ‡จ๐Ÿ‡ฆ 217.181.80.1
๐Ÿ‡ง๐Ÿ‡ท 177.173.47.109
๐Ÿ‡ธ๐Ÿ‡ฌ 165.154.200.214