AbuseIPDB » 20.106.182.106
20.106.182.106
This IP was reported 8 times. Confidence of
Abuse
is 50% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Washington, Virginia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.106.182.106 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
20.106.182.106 was first reported on
July 22nd 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
MPL
2026-07-22 23:29:16
(1 day ago)
tcp port scan (16 or more attempts)
Port Scan
🇺🇸
kosada.com
2026-07-22 20:17:35
(1 day ago)
Web vulnerability probing: /.git/refs/heads/main (bogus vhost/SNI)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 19:54:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 20.106.182.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 20.106.182.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 15:54:32.770203 2026] [security2:error] [pid 2008205:tid 2008215] [client 20.106.182.106:19866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.127"] [uri "/.git/config"] [unique_id "amEf-O7_ZJcUTd1TNPBHZwAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-07-22 19:24:40
(1 day ago)
Knock-Knock HTTP honeypot activity; time=2026-07-22 19:19:25; http_method=GET; http_path=/.git/HEAD; ...
show more
Knock-Knock HTTP honeypot activity; time=2026-07-22 19:19:25; http_method=GET; http_path=/.git/HEAD; http_purpose=config_exposure; http_exploit=Git Metadata Exposure; http_user_agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.
show less
Web App Attack
2026-07-22 19:19:22
(1 day ago)
nginx-444 from fail2ban
...
Web App Attack
2026-07-22 19:16:16
(1 day ago)
denied traffic to a honeypot network. destination port 2083.
Port Scan
Hacking
🇩🇪
ValtonTahiri
2026-07-22 19:08:45
(1 day ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=20.106.182.106; proto=TCP; source_port=19725; target_port=2087; flags=ACK,RST
show less
Port Scan
🇺🇸
TPI-Abuse
2026-07-22 18:23:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 20.106.182.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 20.106.182.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:23:37.615990 2026] [security2:error] [pid 2403374:tid 2403374] [client 20.106.182.106:20177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.141"] [uri "/.git/config"] [unique_id "amEKqXmroQjpfs5ssIud6wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: