JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.206.106.76

20.206.106.76 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.206.106.76

Whois 20.206.106.76

IP Abuse Reports for 20.206.106.76:

This IP address has been reported a total of 186 times from 164 distinct sources. 20.206.106.76 was first reported on July 28th 2026, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-07-29 02:30:00 (17 minutes ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 28. 14:07:14 Source IP: 20.206.106.76 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 28. 14:07:14 Source IP: 20.206.106.76 Portion of the log(s): 20.206.106.76 - [28/Jul/2026:14:07:14 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:14 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:14 +0200] "GET /.well-known/about.php HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:13 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:13 +0200] "GET /wp-includes/assets/ HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:13 +0200] "GET /ops.php HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:13 +0200] "GET /dr.php HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:13 +0200] "GET /wp-includes/Text/ HTTP/1.1" 404 153 "-" "-" 20.206.106.76 - [28/Jul/2026:14:07:12 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 153 "-" "-" show less	Web App Attack Hacking
Anonymous	2026-07-28 20:25:41 (6 hours ago)	Portscan: TCP/80 (4x), TCP/443 (3x)	Port Scan
Anonymous	2026-07-28 20:20:45 (6 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 jocurionline	2026-07-28 17:32:57 (9 hours ago)	Auto-blocked by WAF: AUTO-BAN: WordPress scan + AbuseIPDB 7 zile	Web App Attack Port Scan
🇩🇪 webanyone	2026-07-28 16:15:59 (10 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 dpinse	2026-07-28 16:14:34 (10 hours ago)	Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /FWAZ.php) @ 2026-07-28T16 ... show more Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /FWAZ.php) @ 2026-07-28T16:14:34Z show less	Brute-Force
🇫🇮 habs	2026-07-28 16:14:13 (10 hours ago)	20.206.106.76 - - [28/Jul/2026:19:14:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.206.106.76 - - [28/Jul/2026:19:14:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.206.106.76 - - [28/Jul/2026:19:14:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 14 "-" "-" 20.206.106.76 - - [28/Jul/2026:19:14:12 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇨🇦 TechnoSolutions CL	2026-07-28 16:14:12 (10 hours ago)	20.206.106.76 - - [28/Jul/2026:16:14:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.206.106.76 - - [28/Jul/2026:16:14:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 405 150 "-" "-" 20.206.106.76 - - [28/Jul/2026:16:14:11 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
🇭🇺 IloGus	2026-07-28 16:10:03 (10 hours ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/ via ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/ via rule: /wp-content show less	Web App Attack Brute-Force Port Scan
Anonymous	2026-07-28 16:05:05 (10 hours ago)	PHP file probing detected by Fail2Ban	Web App Attack
Anonymous	2026-07-28 16:04:56 (10 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/Text/	Web App Attack
🇫🇷 phoenix1jl96	2026-07-28 16:03:42 (10 hours ago)	[Tue Jul 28 18:03:40.104526 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:6 ... show more [Tue Jul 28 18:03:40.104526 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:60998] AH01071: Got error 'Primary script unknown' [Tue Jul 28 18:03:40.333189 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:60998] AH01071: Got error 'Primary script unknown' [Tue Jul 28 18:03:40.542249 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:60998] AH01071: Got error 'Primary script unknown' [Tue Jul 28 18:03:40.751194 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:60998] AH01071: Got error 'Primary script unknown' [Tue Jul 28 18:03:40.968097 2026] [proxy_fcgi:error] [pid 950928:tid 950928] [client 20.206.106.76:60998] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2026-07-28 16:02:32 (10 hours ago)	[Tue Jul 28 18:02:30.161903 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH016 ... show more [Tue Jul 28 18:02:30.161903 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH01630: client denied by server configuration: /var/www/html/default/wp-content [Tue Jul 28 18:02:30.536848 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH01630: client denied by server configuration: /var/www/html/default/adminfuns.php [Tue Jul 28 18:02:30.911351 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH01630: client denied by server configuration: /var/www/html/default/goods.php [Tue Jul 28 18:02:31.285936 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH01630: client denied by server configuration: /var/www/html/default/ms-edit.php [Tue Jul 28 18:02:31.660404 2026] [authz_core:error] [pid 185007] [client 20.206.106.76:53335] AH01630: client denied by server configuration: /var/www/html/default/222.php ... show less	Web App Attack
🇮🇹 ciccio diddo	2026-07-28 16:00:34 (10 hours ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇬🇧 kie	2026-07-28 15:53:40 (10 hours ago)	28-07-2026:15:53:38UTC [Nginx Web Server] Suspicious web request: path:/admin.php path:/.well-known/ ... show more 28-07-2026:15:53:38UTC [Nginx Web Server] Suspicious web request: path:/admin.php path:/.well-known/ (2 request(s)). show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 186 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇳🇱 195.178.110.217

🇺🇸 174.138.44.8

🇺🇸 172.210.9.231

🇺🇸 147.185.132.54

🇹🇼 111.70.51.3

🇹🇼 111.70.42.37

🇺🇸 97.211.104.169

🇪🇸 68.221.130.241

🇸🇬 68.183.238.212

🇲🇾 49.124.153.30

🇧🇪 198.235.24.131

🇮🇳 164.52.199.129

🇺🇸 162.216.150.146

🇨🇦 149.22.81.210

🇨🇳 120.48.8.4

🇨🇳 120.24.249.224

🇸🇬 68.183.177.25

🇦🇺 65.181.13.63

🇨🇳 61.191.145.123