JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.55.222.88

20.55.222.88 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 61%: ?

61%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.55.222.88

Whois 20.55.222.88

IP Abuse Reports for 20.55.222.88:

This IP address has been reported a total of 14 times from 13 distinct sources. 20.55.222.88 was first reported on August 22nd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-06-16 14:46:04 (3 days ago)	Port scan to tcp/2087 from 20.55.222.88	Brute-Force
🇱🇹 NotACaptcha	2026-06-16 14:39:31 (3 days ago)	webserver:443 [16/Jun/2026] "GET /.git/HEAD HTTP/1.1" 403 5602 "-" "Mozilla/5.0 (Macintosh; Intel M ... show more webserver:443 [16/Jun/2026] "GET /.git/HEAD HTTP/1.1" 403 5602 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" show less	Web App Attack
🇺🇸 Axel	2026-06-16 12:20:22 (3 days ago)	Blocked by UFW on MVI [2087/tcp] \| SPT: 40572 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2087/tcp] \| SPT: 40572 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 todix	2026-06-10 20:03:58 (1 week ago)	Web App Attack Exploid from 20.55.222.88	Web App Attack
Anonymous	2026-06-10 20:00:01 (1 week ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 19:29:32 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 20.55.222.88 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.55.222.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:29:25.789452 2026] [security2:error] [pid 17272:tid 17272] [client 20.55.222.88:55117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.179"] [uri "/.git/HEAD"] [unique_id "aim7FYN6T7uDi0aJhrA5HAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-10 19:27:40 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 2083 [1], 2082 [1], 2087 [1], 2086 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 2083 [1], 2082 [1], 2087 [1], 2086 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-10 18:35:21 (1 week ago)	automatically banned	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-10 18:05:47 (1 week ago)	Too many Status 50X (16)	Brute-Force Web App Attack
🇫🇷 Hiigara	2026-06-10 18:01:00 (1 week ago)	connection attempt : 20.55.222.88 on port : tcp/8080 (HTTP-alt)	Port Scan
Anonymous	2026-06-10 17:50:33 (1 week ago)	Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ... show more Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Jun 10, 17:50 UTC. Origin: United States, Boydton. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 17:15:28 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 20.55.222.88 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.55.222.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 13:15:22.901719 2026] [security2:error] [pid 24492:tid 24492] [client 20.55.222.88:55569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.40"] [uri "/.git/HEAD"] [unique_id "aimbqvocR25NgYpgO8QR4QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-10 16:17:35 (1 week ago)	Blocked by UFW (TCP on 2087) Source port: 54668 TTL: 48 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 54668 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 20.55.222.88) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-08-22 00:37:08 (9 months ago)	Excessive crawling/scraping	Hacking Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.5.82.108

🇺🇸 172.253.221.144

🇩🇪 172.69.150.183

🇩🇪 172.69.150.24

🇻🇳 171.244.201.80

🇵🇰 153.117.15.166

🇺🇸 135.237.127.71

🇹🇭 118.172.227.127

🇨🇳 112.27.38.203

🇺🇸 91.193.232.12

🇺🇸 66.132.186.175

🇯🇵 58.98.197.137

🇨🇳 220.202.112.229

🇳🇱 204.76.203.49

🇪🇨 186.68.83.104

🇰🇷 183.97.63.198

🇰🇷 182.210.76.170

🇨🇳 182.138.158.13

🇺🇸 162.216.150.58

🇦🇷 162.12.196.211