This IP address has been reported a total of
13
times from
9 distinct
sources.
20.199.242.6 was first reported on
August 1st 2026 , and the most recent report was
2 weeks ago Germany
with 4
reports;
Greece
with 3
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
4
times;
Bad Web Bot
3
times;
Port Scan
3
times;
Hacking
3
times;
Brute-Force
2
times.
Old Reports
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-09-09 15:00:30
(2 weeks ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4
Hacking
2026-09-04 10:50:31
(2 weeks ago)
WEB attack
Brute-Force
🇩🇪
bescared
2026-08-20 07:37:24
(1 month ago)
F2B - Malicious activity detected. Too many 403. -8ff06ede-
Bad Web Bot
Web App Attack
🇩🇪
Reinhard
2026-08-15 16:26:33
(1 month ago)
Unknown activity, but too many attacks with too many users.
Hacking
2026-08-14 08:13:32
(1 month ago)
LH-Watcher: FAKE_ID [Fake ChatGPT-User]
Bad Web Bot
🇬🇷
setupgr
2026-08-13 12:36:24
(1 month ago)
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[A ...
show more
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 13 15:36:24.495105 2026] [security2:error] [pid 2330636:tid 2330712] [remote 20.199.242.6:7039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%BA%CE%BF%CF%80%CE%AE-%CE%BE%CF%85%CE%BB%CE%B5%CE%AF%CE%B1%CF%82/"] [unique_id "an26SN2his8XR3ScO0OVtwADQA4"]
show less
Port Scan
🇬🇷
setupgr
2026-08-13 11:24:01
(1 month ago)
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[A ...
show more
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 13 14:23:56.948406 2026] [security2:error] [pid 2330404:tid 2875712] [remote 20.199.242.6:16097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "ftiaxtomonosou.gr"] [uri "/"] [unique_id "an2pTIkqysay9w6S78istgACRyI"]
show less
Port Scan
🇬🇷
setupgr
2026-08-13 07:42:20
(1 month ago)
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[A ...
show more
(mod_security) mod_security (id:990005) triggered by 20.199.242.6 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 13 10:42:18.800946 2026] [security2:error] [pid 2330636:tid 2819434] [remote 20.199.242.6:60133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "asteriassantorini.com"] [uri "/"] [unique_id "an11Wt2his8XR3ScO0NNtgADUSE"]
show less
Port Scan
2026-08-11 15:37:40
(1 month ago)
LH-Watcher: FAKE_ID [Fake ChatGPT-User]
Bad Web Bot
🇩🇪
Phenix Info
2026-08-10 16:00:29
(1 month ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇩🇪
Phenix Info
2026-08-09 12:21:46
(1 month ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇮🇹
mgarofano80
2026-08-04 15:40:28
(1 month ago)
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-08-01 09:05:34
(1 month ago)
Malicious web traffic detected by CrowdSec
Hacking
Showing 1 to
13
of 13 reports
