JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.40.213.246

20.40.213.246 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 79%: ?

79%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.40.213.246

Whois 20.40.213.246

IP Abuse Reports for 20.40.213.246:

This IP address has been reported a total of 13 times from 13 distinct sources. 20.40.213.246 was first reported on July 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 11:36:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.40.213.246 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.40.213.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:36:18.857928 2026] [security2:error] [pid 2671502:tid 2671502] [client 20.40.213.246:37468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.100"] [uri "/.git/HEAD"] [unique_id "amH8soLS_HseygaOl68EZAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 cybertailor	2026-07-23 11:33:21 (1 day ago)	20.40.213.246 - - [23/Jul/2026:16:33:14 +0500] "GET /.git/HEAD HTTP/1.1" 404 178 "-" "Mozilla/5.0 (W ... show more 20.40.213.246 - - [23/Jul/2026:16:33:14 +0500] "GET /.git/HEAD HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 20.40.213.246 - - [23/Jul/2026:16:33:15 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 20.40.213.246 - - [23/Jul/2026:16:33:17 +0500] "GET /.git/logs/HEAD HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.40.213.246 - - [23/Jul/2026:16:33:18 +0500] "GET /.git/refs/heads/master HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.40.213.246 - - [23/Jul/2026:16:33:19 +0500] "GET /.git/refs/heads/main HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Port Scan
🇩🇪 bescared	2026-07-23 11:18:48 (1 day ago)	F2B - Malicious activity detected. Excessive port scans. -8ff06ede-	Port Scan
Anonymous	2026-07-23 11:14:23 (1 day ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 Nightreaver	2026-07-23 10:40:27 (1 day ago)	20.40.213.246 - - [23/Jul/2026:12:40:24 0200] "GET /.git/refs/heads/main HTTP/1.1" 404 456 "-" "Moz ... show more 20.40.213.246 - - [23/Jul/2026:12:40:24 0200] "GET /.git/refs/heads/main HTTP/1.1" 404 456 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" 20.40.213.246 - - [23/Jul/2026:12:40:24 0200] "GET /.git/index HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 20.40.213.246 - - [23/Jul/2026:12:40:25 0200] "GET /.env HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.40.213.246 - - [23/Jul/2026:12:40:26 0200] "GET /.env.local HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 20.40.213.246 - - [23/Jul/2026:12:40:26 0200] "GET /.env.production HTTP/1.1" 404 456 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"[...] show less	Bad Web Bot Web App Attack
Anonymous	2026-07-23 10:39:12 (1 day ago)	Web Server Exposed Git Repository Information Disclosure.	Hacking
🇬🇧 PeravixGroup	2026-07-23 10:00:02 (1 day ago)	Imunify360 WAF block (graylisted)	Web App Attack
🇧🇪 voormedia	2026-07-23 09:33:58 (1 day ago)	Accessed trap at '/___proxy_subdomain_whm/login/'	Web App Attack
🇺🇸 Sockets-AR	2026-07-23 09:09:41 (1 day ago)	CrowdSec: HTTP DoS detected (crowdsecurity/http-dos-swithcing-ua) at 2026-07-23T09:09:40.986Z	DDoS Attack Web App Attack
🇮🇹 mediarama.com	2026-07-23 08:45:04 (1 day ago)	Banned by Fail2Ban	Web App Attack
Anonymous	2026-07-23 08:20:09 (1 day ago)	denied traffic to a honeypot network. destination port 2078.	Port Scan Hacking
🇬🇧 Smish	2026-07-23 08:18:04 (1 day ago)	HONEYPOT HIT --> Fail2ban time=1784794682 log=2026-07-23T09:18:02+01:00 ip=20.40.213.246 host=89.39. ... show more HONEYPOT HIT --> Fail2ban time=1784794682 log=2026-07-23T09:18:02+01:00 ip=20.40.213.246 host=89.39.211.7 method=GET uri="/.env" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ref="-" rid=8a7f615fa64b5d0b0753cee66ac0251c show less	Web App Attack
🇺🇸 CBJ	2026-07-23 08:16:48 (1 day ago)	fail2ban: apache-filepath-recon ...	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.186.115.35

🇺🇸 152.163.17.111

🇺🇸 35.236.66.236

🇬🇧 194.50.235.135

🇵🇱 176.53.159.198

🇳🇱 91.92.40.45

🇩🇪 64.89.163.79

🇺🇸 52.186.178.175

🇮🇷 37.202.236.238

🇰🇷 183.103.146.250

🇲🇾 121.122.73.243

🇮🇳 103.224.245.5

🇮🇩 36.94.137.175

🇬🇧 35.203.210.148

🇬🇧 2a06:4880:a000::d2

🇺🇦 178.158.206.131

🇮🇩 103.147.159.91

🇺🇸 23.21.250.48

🇧🇷 205.210.31.255

🇳🇱 172.94.9.43