20.106.75.210
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Phoenix, Arizona
Abuse Reports
Total reports
1,267 from
796 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 macrob |
|
Web App Attack | |
| 🇺🇸 craudiovizai |
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-content/maljum.php. Blocked at the edge.
|
Bad Web Bot | |
| 🇺🇸 mys_721tx |
2026-11-15T12:29:56.035850+00:00 talon nginx[966944]: 20.106.75.210 - - [15/Nov/2026:12:29:56 +0000] "GET /wp-admin/images/EoOqS.php?p= HTTP/1.1" 308 164 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇫🇮 albionfreemarket.com |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 raulns |
HTTP probing by raw IP address against a customer-facing web application. Window (UTC): 2026-11-15T12:25:57.737Z to 2026-11-15T12:26:00.032Z. Events: 2. Paths: /wp-content/plugins/hellopress/wp_filemanager.php , /this_is_a_new_hello_world.php.
|
Port Scan Hacking | |
| 🇩🇪 Holger |
URL probing: GET /wp-xmlrpc.php
|
Web App Attack | |
| 🇬🇧 saxicola |
20.106.75.210 - - 2026-11-15 12:10:52 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 487 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇦🇺 Proxay Fox |
|
Brute-Force Web App Attack | |
| Anonymous |
[ABYNTIS Lagezentrum] Web vulnerability scanning on 2026-11-15: 14 requests, 14 probes for sensitive paths (e.g. /xyn.php, /special.php, /ejrofgj.php, /GA13.php). Blocked automatically by rule-based detection.
|
Web App Attack Bad Web Bot | |
| Anonymous |
Web scanner: GET /wp-content/plugins/hellopress/wp_filemanager.php
|
Web App Attack Hacking | |
| 🇦🇲 arm osint |
Automated web vulnerability scanning: 147 HTTP 4xx probes for sensitive paths (/.well-known/ccc.php?p=, /.well-known/sid3.php, //about/abbi.php, //about/bnbqwpnw.php). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
|
Web App Attack Brute-Force | |
| 🇫🇷 ✨ |
Domain : gestioncgt.es
Rule : WEB
IP in black list
|
Port Scan | |
| Anonymous |
CrowdSec detection: crowdsecurity/http-backdoors-attempts
|
Web App Attack | |
| 🇺🇸 etu brutus |
20.106.75.210 has been banned for [WebApp Attack]
...
|
Hacking Bad Web Bot Web App Attack | |
| 🇺🇦 vbios.com |
HTTP_Brute-Force
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown