JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.106.183.48

20.106.183.48 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 62%: ?

62%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.106.183.48

Whois 20.106.183.48

IP Abuse Reports for 20.106.183.48:

This IP address has been reported a total of 30 times from 29 distinct sources. 20.106.183.48 was first reported on June 2nd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Void Vendor	2026-07-23 01:07:30 (4 days ago)	VoidTrap [15,21]: [offense #1 → 30 minutes] Unauthorized Lucy internal endpoint: /stream \| ip: 20.10 ... show more VoidTrap [15,21]: [offense #1 → 30 minutes] Unauthorized Lucy internal endpoint: /stream \| ip: 20.106.183.48 \| loc: Washington, Virginia, US, AS8075 Microsoft Corporation \| path: /stream/ingest \| ua: python-requests/2.34.2 show less	Hacking Web App Attack
🇯🇵 demonsword	2026-07-16 13:04:22 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: e-learning.youpass.vn:443:443 show less	Open Proxy Port Scan
Anonymous	2026-07-02 03:54:10 (3 weeks ago)	Reported from Nginx log analysis 19. Log: 20.106.183.48 - - [02/Jul/2026:xx:xx:xx 0200] "GET /.git/ ... show more Reported from Nginx log analysis 19. Log: 20.106.183.48 - - [02/Jul/2026:xx:xx:xx 0200] "GET /.git/HEAD HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "US United States Washington" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
Anonymous	2026-07-02 00:40:12 (3 weeks ago)	Aggressive web scan	Web App Attack
🇩🇪 marcel-knorr.de	2026-07-02 00:37:12 (3 weeks ago)	[MK-Root1] Blocked by UFW	Brute-Force Port Scan
🇷🇸 Scan	2026-07-02 00:28:31 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 ghostwarriors	2026-07-01 23:50:16 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 23:39:24 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.106.183.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.106.183.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 19:39:18.845180 2026] [security2:error] [pid 8988:tid 8988] [client 20.106.183.48:54466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.90"] [uri "/.git/HEAD"] [unique_id "akWlJtLWXeS26aaOs6NhngAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-27 20:36:52 (4 weeks ago)	2026-06-27 20:36:52 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇧🇷 dominioz	2026-06-27 20:25:34 (4 weeks ago)	2026-06-27 20:24:27 GET /.git/HEAD - - 20.106.183.48 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:125 ... show more 2026-06-27 20:24:27 GET /.git/HEAD - - 20.106.183.48 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:125.0)+Gecko/20100101+Firefox/125.0 - 404 1459 2026-06-27 20:24:28 GET /.git/logs/HEAD - - 20.106.183.48 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+14_4_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - 404 1459 2026-06-27 20:24:31 GET /.git/refs/heads/main - - 20.106.183.48 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 - 404 1459 2026-06-27 20:24:32 GET /.git/index - - 20.106.183.48 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - 404 1459 ... show less	Web App Attack
Anonymous	2026-06-27 18:31:21 (4 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 Starburst SysOp Team	2026-06-27 18:05:20 (4 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-4)	Hacking Bad Web Bot
🇹🇭 Sawasdee	2026-06-27 17:45:59 (4 weeks ago)	Port Scan ...	Port Scan
🇳🇱 pearbright	2026-06-27 17:45:19 (4 weeks ago)	[Sat Jun 27 17:45:18.701019 2026] [php:error] [pid 758381:tid 758381] [client 20.106.183.48:34664] s ... show more [Sat Jun 27 17:45:18.701019 2026] [php:error] [pid 758381:tid 758381] [client 20.106.183.48:34664] script '/var/www/html/phpinfo.php' not found or unable to stat [Sat Jun 27 17:45:19.572335 2026] [php:error] [pid 758378:tid 758378] [client 20.106.183.48:34681] script '/var/www/html/info.php' not found or unable to stat ... show less	Web App Attack
Anonymous	2026-06-27 17:09:02 (4 weeks ago)	Bot / scanning and/or hacking attempts: GET /backup.sql HTTP/1.1, GET /config/database.php HTTP/1.1, ... show more Bot / scanning and/or hacking attempts: GET /backup.sql HTTP/1.1, GET /config/database.php HTTP/1.1, GET /info.php HTTP/1.1, GET /.env.development HTTP/1.1, GET /config/config.php HTTP/1.1, GET /.env.local HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /.htpasswd HTTP/1.1, GET /.git/refs/heads/master HTTP/1.1 show less	Hacking Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.48.203.57

🇷🇺 178.251.140.3

🇺🇸 173.239.240.107

🇺🇸 147.185.132.156

🇸🇬 139.59.255.226

🇺🇸 136.144.35.73

🇺🇸 136.144.35.70

🇺🇸 136.144.35.64

🇮🇩 103.99.214.211

🇺🇸 97.74.236.238

🇺🇿 94.232.26.130

🇮🇷 94.182.168.149

🇺🇸 64.62.197.194

🇩🇪 47.254.167.143

🇧🇪 34.78.189.110

🇺🇸 205.210.31.109

🇺🇿 202.79.189.62

🇬🇧 193.46.0.90

🇧🇷 177.76.248.226

🇺🇸 173.239.240.113