JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.169.53.36

20.169.53.36 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 93%: ?

93%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.169.53.36

Whois 20.169.53.36

IP Abuse Reports for 20.169.53.36:

This IP address has been reported a total of 28 times from 20 distinct sources. 20.169.53.36 was first reported on May 22nd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-14 12:51:32 (3 hours ago)	Blocked by UFW (TCP on 2078) Source port: 29069 TTL: 53 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 29069 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 20.169.53.36) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Ano_Nym	2026-06-14 12:45:53 (3 hours ago)	CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 MPL	2026-06-14 11:28:57 (5 hours ago)	tcp port scan (20 or more attempts)	Port Scan
Anonymous	2026-06-14 10:42:10 (6 hours ago)	Port Scan Attack.	Port Scan
🇫🇷 dynamix	2026-06-14 10:32:38 (6 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 D3monite	2026-06-14 10:31:38 (6 hours ago)	Attempted Brute Force (whostmgrd)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-14 09:55:25 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.169.53.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.169.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:55:21.468832 2026] [security2:error] [pid 29690:tid 29690] [client 20.169.53.36:5513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.66"] [uri "/.git/HEAD"] [unique_id "ai56iVEHBB24EfnedjrkzAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 08:54:50 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.169.53.36 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.169.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:54:46.004616 2026] [security2:error] [pid 2443:tid 2443] [client 20.169.53.36:28311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.51"] [uri "/.git/HEAD"] [unique_id "ai5sVjfTNj29d-B5Y_eSrgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2026-06-03 06:51:10 (1 week ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇷🇸 Scan	2026-06-03 00:29:19 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 xmission.com	2026-06-02 22:17:23 (1 week ago)	Blocked by UFW (TCP on 2087) Source port: 1249 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2087) Source port: 1249 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 20.169.53.36) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-02 22:08:39 (1 week ago)	tcp port scan (16 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-02 20:50:12 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 Floofie	2026-06-02 17:30:23 (1 week ago)	20.169.53.36 - - [02/Jun/2026:13:30:20 -0400] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ... show more 20.169.53.36 - - [02/Jun/2026:13:30:20 -0400] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 20.169.53.36 - - [02/Jun/2026:13:30:21 -0400] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.169.53.36 - - [02/Jun/2026:13:30:23 -0400] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 173.239.217.182

🇮🇳 4.224.59.75

🇨🇳 218.13.26.42

🇳🇱 193.176.31.205

🇻🇪 190.114.245.253

🇳🇱 173.239.217.184

🇺🇸 147.185.132.54

🇺🇸 107.172.116.24

🇳🇵 103.94.255.105

🇺🇸 52.234.1.102

🇻🇳 14.231.241.193

🇨🇳 14.103.118.150

🇺🇸 2604:a880:400:d1:0:4:9619:c001

🇹🇷 213.142.156.145

🇭🇰 199.45.155.102

🇳🇱 185.242.226.73

🇯🇵 124.18.182.99

🇨🇳 116.179.32.208

🇭🇰 114.111.54.189

🇩🇪 84.144.47.26