JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.169.72.160

20.169.72.160 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 51%: ?

51%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.169.72.160

Whois 20.169.72.160

IP Abuse Reports for 20.169.72.160:

This IP address has been reported a total of 16 times from 16 distinct sources. 20.169.72.160 was first reported on November 30th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-17 07:58:57 (5 days ago)	[WedJun1709:58:51.8988452026][security2:error][pid2757563:tid2757622][client20.169.72.160:0]ModSecur ... show more [WedJun1709:58:51.8988452026][security2:error][pid2757563:tid2757622][client20.169.72.160:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ppinvestment.ch\"][uri\"/\"][unique_id\"ajJTu59mPifo32Ffn49SRQAAAI0\"] show less	Port Scan Brute-Force Web App Attack
🇬🇷 Staging	2026-06-17 07:17:00 (5 days ago)	naaah !	Bad Web Bot Hacking
🇳🇿 Tripwire	2026-06-17 06:45:04 (5 days ago)	Probing for Wordpress - /wp/xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 02:54:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 20.169.72.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.169.72.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:54:50.822035 2026] [security2:error] [pid 21221:tid 21221] [client 20.169.72.160:50327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/.git/HEAD"] [unique_id "ai9peiw4SFwX4MfcPijHlQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Niko's Stuff	2026-06-15 01:53:02 (1 week ago)	Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/20.1 ... show more Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/20.169.72.160 show less	Web App Attack Hacking
Anonymous	2026-06-15 01:50:13 (1 week ago)	2026-06-15 01:50:13 warning[1251496]: host unknown[20.169.72.160]: unauthorized access att ... show more 2026-06-15 01:50:13 warning[1251496]: host unknown[20.169.72.160]: unauthorized access attempted: tcp/2078 show less	Port Scan Brute-Force
🇷🇸 Scan	2026-06-15 01:33:10 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇮 kumiko	2026-06-15 01:31:53 (1 week ago)	[2026-06-15 04:31:53] Probing for dotfiles "GET /.git/HEAD HTTP/1.1" 403	Bad Web Bot Web App Attack
🇯🇵 jay hung	2026-06-05 05:32:22 (2 weeks ago)	2026-06-05T05:32:22.012468+00:00 quarktech kernel: [472382.784781] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-05T05:32:22.012468+00:00 quarktech kernel: [472382.784781] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=20.169.72.160 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=1 DF PROTO=TCP SPT=60420 DPT=443 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Port Scan
🇩🇪 2048	2026-03-01 17:17:51 (3 months ago)	2026-03-01T18:17:47.954800+01:00 machodeer kernel: [642283.455906] [UFW BLOCK] IN=ens3 OUT= MAC=REDA ... show more 2026-03-01T18:17:47.954800+01:00 machodeer kernel: [642283.455906] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.169.72.160 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=53296 DF PROTO=TCP SPT=17408 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-01T18:17:49.010840+01:00 machodeer kernel: [642284.511385] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.169.72.160 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=53297 DF PROTO=TCP SPT=17408 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-01T18:17:50.034910+01:00 machodeer kernel: [642285.535869] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=20.169.72.160 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=53298 DF PROTO=TCP SPT=17408 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇺 Block Rockin' Beats	2026-01-10 16:54:04 (5 months ago)	Attempted connection to TCP port 23	Port Scan
🇺🇸 MPL	2026-01-10 16:45:27 (5 months ago)	tcp/23	Port Scan
🇩🇪 ps-center	2026-01-06 21:24:21 (5 months ago)	C2-W: TCP-Scanner. Port: 23	Port Scan
🇺🇸 RAP	2026-01-06 20:33:23 (5 months ago)	2026-01-06 20:33:23 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 Rayulcifer	2025-12-21 20:23:47 (6 months ago)	20.169.72.160 - - [21/Dec/2025:15:23:46 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 " ... show more 20.169.72.160 - - [21/Dec/2025:15:23:46 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" 20.169.72.160 - - [21/Dec/2025:15:23:46 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.50

🇨🇳 221.226.17.34

🇺🇸 205.210.31.99

🇺🇸 205.210.31.25

🇩🇿 197.119.49.196

🇮🇳 168.144.158.171

🇫🇮 147.185.133.202

🇨🇳 114.231.136.104

🇺🇸 108.178.7.34

🇮🇪 108.129.112.140

🇨🇳 101.96.192.45

🇮🇷 89.199.16.215

🇩🇪 89.23.108.134

🇵🇱 87.101.73.60

🇩🇪 69.5.169.134

🇮🇶 65.20.146.109

🇺🇸 62.132.18.142

🇧🇷 45.205.1.73

🇸🇬 43.156.129.84

🇬🇧 35.203.210.3