JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.236.100.7

20.236.100.7 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 43%: ?

43%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.236.100.7

Whois 20.236.100.7

IP Abuse Reports for 20.236.100.7:

This IP address has been reported a total of 11 times from 9 distinct sources. 20.236.100.7 was first reported on September 30th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-22 18:10:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.236.100.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.236.100.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:10:19.531007 2026] [security2:error] [pid 1264855:tid 1264855] [client 20.236.100.7:22862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.38"] [uri "/.git/logs/HEAD"] [unique_id "amEHi9WCTSC1kkSNgMKjvQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 zwebvigil	2026-07-22 16:45:30 (1 day ago)	20.236.100.7 [22/Jul/2026:09:45:25 -0700] "GET /.git/HEAD HTTP/1.1" 401 381 "-" port=23316 "Mozilla ... show more 20.236.100.7 [22/Jul/2026:09:45:25 -0700] "GET /.git/HEAD HTTP/1.1" 401 381 "-" port=23316 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 1507 20.236.100.7 [22/Jul/2026:09:45:26 -0700] "GET /.git/config HTTP/1.1" 401 381 "-" port=23326 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 347 20.236.100.7 [22/Jul/2026:09:45:27 -0700] "GET /.git/logs/HEAD HTTP/1.1" 401 381 "-" port=23327 "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" "-" "-" "<ipaddr>" 737 20.236.100.7 [22/Jul/2026:09:45:27 -0700] "GET /.git/refs/heads/master HTTP/1.1" 401 381 "-" port=23312 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" "-" "<ipaddr>" 1021 20.236.100.7 [22/Jul/2026:09:45:28 -0700 show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-22 16:00:52 (1 day ago)	(modsecurity) srv201 ModSecurity 20.236.100.7 (US/United States/-): 30 in the last 3600 secs; Ports: ... show more (modsecurity) srv201 ModSecurity 20.236.100.7 (US/United States/-): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 thororen	2026-07-22 15:54:45 (1 day ago)	Blocked by UFW [2086/tcp] Source port: 22859 TTL: 47 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2086/tcp] Source port: 22859 TTL: 47 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 TaKeN	2026-07-22 14:32:50 (1 day ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-07-22T16:32:50+02:00 and 2026-07-22T16:32:50+02:00. Sample requested paths: /.env.docker. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-22 14:32:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.236.100.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.236.100.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 10:32:14.324748 2026] [security2:error] [pid 2767:tid 2767] [client 20.236.100.7:22587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/.git/HEAD"] [unique_id "amDUbjBGDOly8bfWfVGDogAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 14:17:33 (1 day ago)	denied traffic to a honeypot network. destination port 2082.	Port Scan Hacking
🇩🇪 iNetWorker	2026-03-11 12:13:52 (4 months ago)	trying to access non-authorized port	Port Scan
🇺🇸 xmission.com	2026-03-11 08:33:23 (4 months ago)	Blocked by UFW (TCP on 25565) Source port: 30760 TTL: 243 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 25565) Source port: 30760 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 20.236.100.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-11 06:59:31 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 Rayulcifer	2025-09-30 16:18:27 (9 months ago)	20.236.100.7 - - [30/Sep/2025:11:18:26 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 "- ... show more 20.236.100.7 - - [30/Sep/2025:11:18:26 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 "-" "-" 20.236.100.7 - - [30/Sep/2025:11:18:26 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 584 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.186.115.35

🇧🇷 191.235.105.17

🇳🇱 178.16.54.74

🇫🇮 147.185.133.123

🇩🇪 213.209.159.242

🇧🇷 209.14.149.10

🇧🇷 191.240.225.66

🇨🇴 190.252.190.210

🇧🇷 168.228.244.190

🇫🇮 147.185.133.173

🇯🇵 118.158.227.189

🇯🇴 109.107.231.47

🇺🇸 104.28.166.241

🇺🇸 71.6.134.229

🇿🇦 41.76.209.240

🇺🇸 40.124.186.154

🇵🇰 39.53.206.253

🇨🇳 27.10.16.127

🇹🇼 198.235.24.81

🇹🇼 198.235.24.65