AbuseIPDB » 20.29.206.232
20.29.206.232
This IP was reported 8 times. Confidence of
Abuse
is 52% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Moses Lake, Washington
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.29.206.232 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
20.29.206.232 was first reported on
July 24th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
MPL
2026-07-24 16:33:46
(1 day ago)
tcp port scan (10 or more attempts)
Port Scan
🇬🇧
OptimusGO
2026-07-24 13:59:58
(1 day ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-24 14:59:58 UTC
Log evidence:
07/24/2026-14:59:56.594198 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 20.29.206.232:16713 -> 185.127.18.66:2077
07/24/2026-14:59:56.594198 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 20.29.206.232:16716 -> 185.127.18.66:2096
show less
Port Scan
Brute-Force
🇺🇸
eber965
2026-07-24 13:35:30
(1 day ago)
[Fri Jul 24 09:35:23 2026] [authz_core:error] [pid 2697734:tid 140216119588608] [client 20.29.206.23 ...
show more
[Fri Jul 24 09:35:23 2026] [authz_core:error] [pid 2697734:tid 140216119588608] [client 20.29.206.232:17604] AH01630: client denied by server configuration: /var/www/html/.git
[Fri Jul 24 09:35:26 2026] [authz_core:error] [pid 2718548:tid 140215976978176] [client 20.29.206.232:17611] AH01630: client denied by server configuration: /var/www/html/.env.local
[Fri Jul 24 09:35:26 2026] [authz_core:error] [pid 2718548:tid 140216505456384] [client 20.29.206.232:17609] AH01630: client denied by server configuration: /var/www/html/.env.production
[Fri Jul 24 09:35:28 2026] [authz_core:error] [pid 2718548:tid 140215851153152] [client 20.29.206.232:17603] AH01630: client denied by server configuration: /var/www/html/.env.save
[Fri Jul 24 09:35:29 2026] [authz_core:error] [pid 2718548:tid 140215800796928] [client 20.29.206.232:17600] AH01630: client denied by server configuration: /var/www/html/.env.prod
...
show less
Brute-Force
2026-07-24 13:09:16
(1 day ago)
denied traffic to a honeypot network. destination port 2086.
Port Scan
Hacking
2026-07-24 11:54:29
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇬🇧
gws-hostmaster
2026-07-24 11:37:33
(1 day ago)
ModSecurity OWASP CRS (Anomaly Score: 13): Host header is a numeric IP address;Restricted File Acces ...
show more
ModSecurity OWASP CRS (Anomaly Score: 13): Host header is a numeric IP address;Restricted File Access Attempt;URL file extension is restricted by policy;
show less
Web App Attack
🇩🇪
Admins@FBN
2026-07-24 11:33:43
(1 day ago)
FW-PortScan: Traffic Blocked srcport=17856 dstport=2078
Port Scan
🇸🇬
Starburst SysOp Team
2026-07-24 10:51:33
(1 day ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)
Hacking
Bad Web Bot
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: