20.223.166.139
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇮🇪 Ireland
- City
- Dublin, Leinster
No reports in the last 60 days
20.223.166.139 has been reported 160 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
160 from
142 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇮 nNordic |
Connection attempt blocked by IDS/IPS from 20.223.166.139/32
|
Hacking | |
| Anonymous |
Bad Web Bot(s) + Brute-Force Web App Attack(s) "Out The Wazoo!"
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇮🇩 David Koswari |
REQ_BLOCKED_ACL
|
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 232 malicious requests on 2026-04-15 (e.g., env/backup probes, brute-force, or error bursts).
|
Web App Attack SSH Hacking | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IE, Attack patterns: WordPress scanning, Malicious User-Agent
|
Bad Web Bot Web App Attack | |
| 🇭🇺 DumaNet |
|
Web App Attack | |
| 🇩🇪 paprika |
Automated report #1: 6 attacks detected. Types: Brute-force (login).
|
Brute-Force Email Spam | |
| 🇷🇴 andreighitan |
Microsoft Azure AS8075. Webshell scanning and PHP exploitation. Part of coordinated attack campaign against Germany-hosted server 84.46.253.134
|
Port Scan Hacking Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-04-15
|
Web App Attack SSH Hacking | |
| 🇩🇪 Vegascosmetics |
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
|
Hacking Bad Web Bot Web App Attack | |
| 🇫🇮 YF |
404 errors (Vulnerability scan)
|
Brute-Force Web App Attack | |
| 🇳🇱 JCB |
20.223.166.139 - - [15/Apr/2026:17:54:35 +0300] "GET /a7.php HTTP/1.1" 404 416 "-" "-"
20.223.166.139 - - [15/Apr/2026:17:54:35 +0300] "GET /doc.php HTTP/1.1" 404 416 "-" "-"
...
|
Web App Attack | |
| 🇺🇸 antlac1 |
crowdsecurity/http-probing
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown