JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.55.163.179

20.55.163.179 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 55%: ?

55%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.55.163.179

Whois 20.55.163.179

IP Abuse Reports for 20.55.163.179:

This IP address has been reported a total of 33 times from 21 distinct sources. 20.55.163.179 was first reported on June 2nd 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-11 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 xmission.com	2026-06-11 04:02:40 (4 weeks ago)	Blocked by UFW (TCP on 2087) Source port: 60769 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 60769 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 20.55.163.179) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-11 03:58:22 (4 weeks ago)	Honeypot hit: Empty payload (likely service probe); 2086 [1], 2083 [1], 2087 [1], 2082 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 2086 [1], 2083 [1], 2087 [1], 2082 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 xmission.com	2026-06-11 03:34:40 (4 weeks ago)	Blocked by UFW (TCP on 80) Source port: 61033 TTL: 53 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 61033 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 20.55.163.179) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇹🇼 kk_it_man	2026-06-11 03:13:01 (4 weeks ago)	ET WEB_SERVER WEB-PHP phpinfo access GPL WEB_SERVER .htpasswd access GPL WEB_SERVER 403 Forbidde ... show more ET WEB_SERVER WEB-PHP phpinfo access GPL WEB_SERVER .htpasswd access GPL WEB_SERVER 403 Forbidden show less	Port Scan
🇨🇿 Honzas	2026-06-11 01:55:43 (4 weeks ago)	Unsolicited connection attemp, port 443/TCP	Brute-Force
🇹🇭 Sawasdee	2026-06-11 01:39:11 (4 weeks ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇩🇪 Admins@FBN	2026-06-11 01:38:14 (4 weeks ago)	FW-PortScan: Traffic Blocked srcport=60864 dstport=80	Port Scan
🇧🇾 lns.bz	2026-06-11 01:17:16 (4 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇹🇷 Threat.live	2026-06-11 00:45:02 (4 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 00:27:25 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.55.163.179 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.55.163.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 20:27:20.837638 2026] [security2:error] [pid 18106:tid 18106] [client 20.55.163.179:60162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.184"] [uri "/.git/HEAD"] [unique_id "aioA6NQX9dUQASNN97b5uwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-11 00:21:32 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇳🇱 Savvii	2026-06-11 00:11:10 (4 weeks ago)	15 attempts against mh-modsecurity-ban on pf221103	Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-10 23:28:33 (4 weeks ago)	(mod_security-custom) mod_security (id:210492) triggered by 20.55.163.179 (US/United States/Wyoming/ ... show more (mod_security-custom) mod_security (id:210492) triggered by 20.55.163.179 (US/United States/Wyoming/Cheyenne/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇩🇪 maxpower	2026-06-10 23:20:57 (4 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.55.163.179 (US/United States/-): 2 in ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.55.163.179 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.55.163.179 - - [11/Jun/2026:01:20:51 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" host=51.77.95.119 20.55.163.179 - - [11/Jun/2026:01:20:52 +0200] "GET /.aws/credentials HTTP/1.1" 404 10392 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" host=51.77.95.119 show less	Port Scan

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.190.102.54

🇨🇳 222.137.106.162

🇦🇷 186.157.168.176

🇧🇷 131.196.28.1

🇮🇳 103.225.176.52

🇧🇬 79.124.56.202

🇷🇺 62.113.98.181

🇳🇱 45.148.10.157

🇺🇸 44.158.19.24

🇶🇦 34.153.64.29

🇭🇰 31.77.152.173

🇭🇰 223.197.153.143

🇬🇧 195.206.182.198

🇧🇴 181.115.192.10

🇮🇩 180.252.199.166

🇳🇱 172.253.82.222

🇺🇸 172.235.40.131

🇮🇳 160.250.204.33

🇧🇷 131.196.29.101

🇮🇩 110.136.175.169