JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.169.43.9

20.169.43.9 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.169.43.9

Whois 20.169.43.9

IP Abuse Reports for 20.169.43.9:

This IP address has been reported a total of 13 times from 11 distinct sources. 20.169.43.9 was first reported on October 17th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ogbc-admin	2022-10-26 12:23:26 (3 years ago)	[Wed Oct 26 11:23:09.472519 2022] [proxy_fcgi:error] [pid 163812:tid 140275343144704] [client 20.169 ... show more [Wed Oct 26 11:23:09.472519 2022] [proxy_fcgi:error] [pid 163812:tid 140275343144704] [client 20.169.43.9:59168] AH01071: Got error 'Primary script unknown' [Wed Oct 26 11:23:10.702313 2022] [proxy_fcgi:error] [pid 163812:tid 140274747557632] [client 20.169.43.9:59396] AH01071: Got error 'Primary script unknown' [Wed Oct 26 11:23:11.791311 2022] [proxy_fcgi:error] [pid 163812:tid 140275864397568] [client 20.169.43.9:59518] AH01071: Got error 'Primary script unknown' [Wed Oct 26 11:23:14.446473 2022] [proxy_fcgi:error] [pid 163812:tid 140275729012480] [client 20.169.43.9:59844] AH01071: Got error 'Primary script unknown' [Wed Oct 26 11:23:25.629870 2022] [proxy_fcgi:error] [pid 163815:tid 140274906953472] [client 20.169.43.9:60890] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇦🇺 Ross Wheatley	2022-10-25 20:01:29 (3 years ago)	GET /.tmb/leaf.php HTTP/1.1 404 499 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ... show more GET /.tmb/leaf.php HTTP/1.1 404 499 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36 show less	Brute-Force Web App Attack
🇩🇪 ps-center	2022-10-24 13:12:38 (3 years ago)	MYH: Web Attack GET /wp-admin/leaf.php	Web Spam Hacking Bad Web Bot Web App Attack
🇬🇷 Yannis Ipsa	2022-10-23 20:58:02 (3 years ago)	Phoenix, Arizona, United States was blocked for UA/Hostname/Referrer/IP Range not allowed at https:/ ... show more Phoenix, Arizona, United States was blocked for UA/Hostname/Referrer/IP Range not allowed at https://...//blog//wp-login.php 10/23/2022 6:33:53 PM (9 hours 23 mins ago) IP: 20.169.43.9 Hostname: 20.169.43.9 Human/Bot: Human Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 show less	Hacking Web App Attack
🇩🇪 Public Admin	2022-10-21 09:40:10 (3 years ago)	2022/10/21 16:40:09 [error] 7525#7525: 1447 openat() "/etc/nginx/html/.env" failed (2: No such file ... show more 2022/10/21 16:40:09 [error] 7525#7525: 1447 openat() "/etc/nginx/html/.env" failed (2: No such file or directory), client: 20.169.43.9, server: localhost, request: "GET /.env HTTP/1.1", host: "vz171.rackset.com" ... show less	Brute-Force Web App Attack
🇦🇺 advena	2022-10-21 08:30:22 (3 years ago)	20.169.43.9 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-10-21T12:22:52Z after viola ... show more 20.169.43.9 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-10-21T12:22:52Z after violating WAF directive: bot_fight_mode. Pre-cautionary/corrective action applied: jschallenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TTWebhosting	2022-10-19 23:32:09 (3 years ago)	(mod_security) mod_security (id:430057) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/- ... show more (mod_security) mod_security (id:430057) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
🇺🇸 Starburst SysOp Team	2022-10-18 21:01:27 (3 years ago)	[Wed Oct 19 00:50:43.028071 2022] [:error] [pid 147995:tid 139667529770752] [client 20.169.43.9:6059 ... show more [Wed Oct 19 00:50:43.028071 2022] [:error] [pid 147995:tid 139667529770752] [client 20.169.43.9:60592] [client 20.169.43.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "Y09J44IfOlV6li6hI6FjrQAAAIY"] [Wed Oct 19 00:50:54.949716 2022] [:error] [pid 147967:tid 139667328444160] [client 20.169.43.9:60963] [client 20.169.43.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "Y09J7kTBAQlPw-PwqR58dgAAAFU"] show less	Hacking Brute-Force Web App Attack
🇧🇷 AC - Team	2022-10-18 17:25:01 (3 years ago)	20.169.43.9 - - [18/Oct/2022:18:24:59 -0300] "GET /.env HTTP/1.1" 301 602 "-" "Mozilla/5.0 (Linux; U ... show more 20.169.43.9 - - [18/Oct/2022:18:24:59 -0300] "GET /.env HTTP/1.1" 301 602 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Exploited Host Web App Attack
🇺🇸 Starburst SysOp Team	2022-10-18 11:17:21 (3 years ago)	[Tue Oct 18 08:54:47.790248 2022] [:error] [pid 3858364:tid 139971096733440] [client 20.169.43.9:588 ... show more [Tue Oct 18 08:54:47.790248 2022] [:error] [pid 3858364:tid 139971096733440] [client 20.169.43.9:58846] [client 20.169.43.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "Y05p19aWD5qiTQW8pTEfNQAAAAE"] [Tue Oct 18 08:55:08.161406 2022] [:error] [pid 3858392:tid 139971096733440] [client 20.169.43.9:59571] [client 20.169.43.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "Y05p7OJviGXVtPpKLvrMVAAAAIE"] show less	Hacking Brute-Force Web App Attack
🇦🇺 clapper	2022-10-18 10:23:11 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 20.169.43.9 (US/United States/-): 5 in the last ... show more (mod_security) mod_security (id:949110) triggered by 20.169.43.9 (US/United States/-): 5 in the last 14400 secs; ID: rub show less	Brute-Force Bad Web Bot
🇩🇪 nextweb	2022-10-18 01:17:19 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/- ... show more (mod_security) mod_security (id:210492) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇩🇪 nextweb	2022-10-17 21:12:43 (3 years ago)	(mod_security) mod_security (id:244600) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/- ... show more (mod_security) mod_security (id:244600) triggered by 20.169.43.9 (US/United States/Arizona/Phoenix/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.33

🇺🇸 136.80.164.134

🇺🇸 100.29.192.120

🇦🇿 94.20.62.126

🇺🇸 74.7.241.153

🇺🇸 74.7.230.47

🇺🇸 74.7.228.49

🇮🇳 68.183.92.206

🇲🇾 14.192.215.195

🇰🇷 211.200.11.218

🇺🇦 192.166.133.60

🇹🇼 180.176.211.166

🇺🇸 162.216.149.18

🇲🇾 118.101.205.240

🇮🇳 115.246.161.203

🇨🇿 82.118.30.26

🇺🇸 74.7.228.38

🇺🇸 74.7.175.146

🇺🇸 74.7.175.137

🇨🇳 49.75.185.71