This IP address has been reported a total of
22
times from
14 distinct
sources.
20.106.191.54 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[v5-99] Port scan: 16 packet(s) from 20.106.191.54 to 8 distinct destination ports (80,2087,2095,808 ...
show more[v5-99] Port scan: 16 packet(s) from 20.106.191.54 to 8 distinct destination ports (80,2087,2095,8081,443,8888) blocked at the perimeter (automated sensor)
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443
show less
4 incidents: malicious activity. First: 2026-06-10 03:22, Last: 2026-06-10 03:22 UTC. Triggers: port ...
show more4 incidents: malicious activity. First: 2026-06-10 03:22, Last: 2026-06-10 03:22 UTC. Triggers: port-trap,ufw-repeater,non-public-port,recidive.
show less
6 incidents: web scanning/attack, port scanning. Ports: 2082/TCP(1), 2083/TCP(1), 2086/TCP(1), 2087/ ...
show more6 incidents: web scanning/attack, port scanning. Ports: 2082/TCP(1), 2083/TCP(1), 2086/TCP(1), 2087/TCP(1), 8080/TCP(1). First: 2026-06-10 03:22, Last: 2026-06-10 03:22 UTC. Triggers: port-trap,ufw-repeater,non-public-port,recidive,firewall-tcp,firewall-http.
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩