JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.168.110.18

20.168.110.18 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 67%: ?

67%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.168.110.18

Whois 20.168.110.18

IP Abuse Reports for 20.168.110.18:

This IP address has been reported a total of 18 times from 14 distinct sources. 20.168.110.18 was first reported on November 18th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 JPPO	2026-06-10 01:52:17 (1 day ago)	Multiport scan 8 ports : 80 443(x2) 2082 2083 2086 2087 8080 8443	Port Scan
🇩🇪 dispaisyenterprises	2026-06-10 01:46:04 (1 day ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2082 [1], 2083 [1], 2086 [1] TCP R ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2082 [1], 2083 [1], 2086 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-06-10 00:55:15 (1 day ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)	Hacking Bad Web Bot
🇷🇸 Scan	2026-06-10 00:21:51 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇦 Tanados	2026-06-10 00:00:27 (1 day ago)	Blocked by UFW [2082/tcp] Source port: 36452 TTL: 44 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2082/tcp] Source port: 36452 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇱🇹 NotACaptcha	2026-06-09 23:53:52 (1 day ago)	Unauthorised access (Jun 10 02:53) SRC=20.168.110.18 LEN=60 TTL=34 ID=15434 DF TCP DPT=8080 WINDOW=6 ... show more Unauthorised access (Jun 10 02:53) SRC=20.168.110.18 LEN=60 TTL=34 ID=15434 DF TCP DPT=8080 WINDOW=64240 SYN show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-09 23:12:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.168.110.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.168.110.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:12:39.848611 2026] [security2:error] [pid 1751:tid 1751] [client 20.168.110.18:36230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.31"] [uri "/.env.local"] [unique_id "aiid5z97Hz4ilzhR9uC23AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 22:16:54 (1 day ago)	2026-06-09 22:16:54 warning[3066012]: host unknown[20.168.110.18]: unauthorized access att ... show more 2026-06-09 22:16:54 warning[3066012]: host unknown[20.168.110.18]: unauthorized access attempted: tcp/8443 show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-06-02 07:26:19 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 Andrew	2026-06-02 01:09:09 (1 week ago)	Blocked by UFW (TCP on port 2083). Source port: 17906 TTL: 42 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 2083). Source port: 17906 TTL: 42 Packet length: 60 TOS: 0x00 This report (for 20.168.110.18) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-06-02 00:20:41 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-01 23:26:37 (1 week ago)	Tried our host z.	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-06-01 22:58:42 (1 week ago)	2026-06-01 22:58:42 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-01 21:52:52 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 Rayulcifer	2026-04-05 18:41:52 (2 months ago)	20.168.110.18 - - [05/Apr/2026:13:41:51 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 " ... show more 20.168.110.18 - - [05/Apr/2026:13:41:51 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" 20.168.110.18 - - [05/Apr/2026:13:41:51 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.252.240

🇺🇸 174.35.25.179

🇺🇦 95.46.32.30

🇮🇷 2.180.240.192

🇵🇰 182.191.66.75

🇺🇸 172.253.85.87

🇻🇳 171.231.192.52

🇺🇸 65.111.6.47

🇷🇴 2.57.121.112

🇨🇳 223.83.252.202

🇺🇸 216.172.190.116

🇨🇱 186.189.88.4

🇳🇱 153.80.240.139

🇻🇳 103.63.108.25

🇺🇸 72.10.32.138

🇹🇼 61.222.211.114

🇳🇱 45.148.10.147

🇵🇦 181.119.124.41

🇹🇷 176.232.198.33

🇺🇸 164.92.114.247