JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.55.223.209

20.55.223.209 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 94%: ?

94%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.55.223.209

Whois 20.55.223.209

IP Abuse Reports for 20.55.223.209:

This IP address has been reported a total of 35 times from 28 distinct sources. 20.55.223.209 was first reported on February 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-04 06:11:42 (2 days ago)	Illegitimate and/or suspicious requests.	Hacking
🇯🇵 jay hung	2026-06-03 08:16:10 (3 days ago)	2026-06-03T08:16:09.726815+00:00 quarktech kernel: [309409.938674] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-03T08:16:09.726815+00:00 quarktech kernel: [309409.938674] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=20.55.223.209 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=7142 DF PROTO=TCP SPT=28426 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-03 07:41:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 20.55.223.209 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.55.223.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:41:32.538079 2026] [security2:error] [pid 3801:tid 3801] [client 20.55.223.209:27028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.249"] [uri "/.git/HEAD"] [unique_id "ah_arLaaafwFoTIAJmNTJQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-03 07:04:08 (3 days ago)	Blocked by UFW (TCP on 2087) Source port: 27302 TTL: 48 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 27302 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 20.55.223.209) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 kexol	2026-06-03 07:03:06 (3 days ago)	multiport scan, 2 ports scanned: 443, 8443	Port Scan
🇺🇸 Starburst SysOp Team	2026-06-03 07:01:30 (3 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-3)	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 06:41:18 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 20.55.223.209 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.55.223.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:41:11.257639 2026] [security2:error] [pid 6496:tid 6496] [client 20.55.223.209:28283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/.git/HEAD"] [unique_id "ah_Mh5N8fDjEo_OPyrYorQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 soverin	2026-06-03 06:35:58 (3 days ago)	Network scan on port 80	Email Spam
🇩🇪 Phenix Info	2026-06-03 06:10:14 (3 days ago)	SmallGuard.fr - Forbidden Ext.	Web App Attack
🇯🇵 VXG-NET	2026-06-03 04:45:24 (3 days ago)	port=80, indicator_type=info-leak	Hacking
🇺🇸 ISPLtd	2026-06-03 04:29:16 (3 days ago)	Jun 3 01:29:03 20.55.223.209 TCP SPT=26639 DPT=2087 SYN Jun 3 01:29:03 20.55.223.209 TCP SPT=26634 ... show more Jun 3 01:29:03 20.55.223.209 TCP SPT=26639 DPT=2087 SYN Jun 3 01:29:03 20.55.223.209 TCP SPT=26634 DPT=2086 SYN Jun 3 01:29:03 20.55.223.209 TCP SPT=26642 DPT=2082 SYN ... show less	Port Scan
🇺🇸 Gabriel Camargo	2026-06-03 04:24:54 (3 days ago)	20.55.223.209 - - [02/Jun/2026:23:24:48 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (M ... show more 20.55.223.209 - - [02/Jun/2026:23:24:48 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 20.55.223.209 - - [02/Jun/2026:23:24:49 -0500] "GET /.git/config HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.55.223.209 - - [02/Jun/2026:23:24:54 -0500] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇫🇷 ISPLtd	2026-06-02 11:54:40 (3 days ago)	Jun 2 08:54:39 20.55.223.209 TCP SPT=55304 DPT=2087 SYN Jun 2 08:54:39 20.55.223.209 TCP SPT=55304 ... show more Jun 2 08:54:39 20.55.223.209 TCP SPT=55304 DPT=2087 SYN Jun 2 08:54:39 20.55.223.209 TCP SPT=55304 DPT=2083 SYN Jun 2 08:54:39 20.55.223.209 TCP SPT=55304 DPT=2082 ... show less	Port Scan
🇺🇸 RAP	2026-06-02 11:34:46 (3 days ago)	2026-06-02 11:34:46 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
Anonymous	2026-06-02 11:08:28 (3 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 54.39.203.8

🇸🇬 45.132.75.45

🇬🇧 35.203.211.192

🇺🇸 195.184.76.137

🇺🇸 165.154.254.11

🇺🇸 147.185.132.52

🇮🇩 103.154.231.122

🇺🇸 74.7.227.54

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇺🇸 34.228.104.231

🇩🇪 8.211.43.106

🇨🇦 3.97.204.24

🇱🇹 141.98.11.230

🇨🇳 119.53.253.2

🇺🇸 113.20.4.9

🇰🇪 102.213.92.30

🇮🇱 82.102.188.49

🇩🇪 69.5.169.203

🇩🇪 69.5.169.141