JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.219.189.206

Recent Activity

Abuse confidence score ?

100% Critical

219 reports

146 reporters · latest 3 days ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.219.189.206

Export CSV

This IP address has been reported a total of 219 times from 146 distinct sources. 20.219.189.206 was first reported on September 27th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 53 reports; United States of America with 45 reports; France with 20 reports. The most common categories in these recent reports were: Web App Attack 170 times; Bad Web Bot 75 times; Brute-Force 63 times; Hacking 46 times; Port Scan 19 times; Other 24 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2026-09-30 18:31:43 (3 days ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-30 04:31:31 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇷🇺 OK	2026-09-30 01:29:02 (4 days ago)	HTTP/HTTPS	Hacking Web App Attack
🇫🇮 as211431.net	2026-09-30 01:26:01 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /app/.env UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 Klaverstyn	2026-09-30 01:15:23 (4 days ago)	Excessive HTTP request rate	Web App Attack
🇬🇧 andypiper	2026-09-30 01:00:32 (4 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇭 Cybercat	2026-09-30 00:28:49 (4 days ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Hacking
🇩🇪 klaus_ph	2026-09-30 00:16:04 (4 days ago)	2026-09-27 17:38:03,923 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 20.219.189.206 . ... show more 2026-09-27 17:38:03,923 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 20.219.189.206 ... show less	Bad Web Bot
🇬🇧 stevendodd	2026-09-29 23:53:21 (4 days ago)	20.219.189.206 - - [30/Sep/2026:00:53:16 +0100] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windo ... show more 20.219.189.206 - - [30/Sep/2026:00:53:16 +0100] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:16 +0100] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:17 +0100] "GET /.env.local HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:17 +0100] "GET /.env.production HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:17 +0100] "GET /.env.local HTTP/1.1" 404 4246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:17 +0100] "GET /.env.local HTTP/1.1" 404 4246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 20.219.189.206 - - [30/Sep/2026:00:53:17 +0100] "GET /.env.development HTTP/1.1" ... show less	Brute-Force Web App Attack
Anonymous	2026-09-29 22:09:55 (4 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: Back ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇨🇭 jebla.ch	2026-09-29 22:06:27 (4 days ago)	Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ... show more Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-09-29 21:53 UTC. show less	Web App Attack
🇩🇪 itsolon	2026-09-29 21:11:48 (4 days ago)	[29/Sep/2026:23:11:43 +0200] 179071630386.465643 20.219.189.206 59087 217.154.7.177 80 [29/Sep/2026: ... show more [29/Sep/2026:23:11:43 +0200] 179071630386.465643 20.219.189.206 59087 217.154.7.177 80 [29/Sep/2026:23:11:43 +0200] 179071630358.527585 20.219.189.206 58907 217.154.7.177 443 [29/Sep/2026:23:11:44 +0200] 179071630419.243649 20.219.189.206 59727 217.154.7.177 80 [29/Sep/2026:23:11:46 +0200] 17907163068.361485 20.219.189.206 60166 217.154.7.177 443 [29/Sep/2026:23:11:48 +0200] 179071630882.845403 20.219.189.206 61759 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-09-29 20:07:52 (4 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env) show less	Hacking Brute-Force Web App Attack
Anonymous	2026-09-29 19:59:54 (4 days ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇵🇱 mscode.pl	2026-09-29 19:44:10 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK ASN: 8075 (Microsoft Corporat ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Zone: mscode.pl Endpoint: /app/.env UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 show less	Bad Web Bot

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.54.23.149

🇧🇷 181.189.81.244

🇨🇳 180.153.236.159

🇮🇹 146.75.186.17

🇳🇱 109.160.32.129

🇺🇸 100.29.192.84

🇨🇦 85.217.149.52

🇨🇦 85.217.149.0

🇬🇧 81.134.57.17

🇳🇱 77.239.124.77

🇱🇹 77.90.185.20

🇺🇸 74.82.47.20

🇩🇪 69.5.169.86

🇺🇸 66.116.237.85

🇺🇸 65.49.1.142

🇸🇬 52.148.71.222

🇸🇬 43.159.34.167

🇰🇷 221.162.135.179

🇨🇳 218.68.218.81

🇺🇸 216.25.89.74