JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.169.99.135

20.169.99.135

Recent Activity

48 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.169.99.135:

This IP address has been reported a total of 48 times from 42 distinct sources. 20.169.99.135 was first reported on August 4th 2026, and the most recent report was 12 minutes ago. In the last 60 days, the top reporter locations were: Germany with 25 reports; Finland with 12 reports; United States of America with 4 reports. The most common categories in these recent reports were: Brute-Force 38 times; SSH 32 times; Port Scan 10 times; Web App Attack 5 times; Hacking 3 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 DEV-DNS	2026-09-14 08:34:24 (12 minutes ago)	20.169.99.135 (US/United States/Arizona/Phoenix/-/[redacted]	Brute-Force
🇩🇪 schuh	2026-09-14 08:13:53 (32 minutes ago)	14-09-2026:08:13:22UTC [SSH] user:root port:3136 (1 attempt). sshd-session: Connection closed by aut ... show more 14-09-2026:08:13:22UTC [SSH] user:root port:3136 (1 attempt). sshd-session: Connection closed by authenticating user root 20.169.99.135 port 3136 [preauth] show less	Brute-Force SSH
🇫🇮 Voluna	2026-09-14 08:09:05 (37 minutes ago)	2026-09-14T08:09:03.314113+00:00 MailServer-Slave sshd[1189728]: pam_unix(sshd:auth): authentication ... show more 2026-09-14T08:09:03.314113+00:00 MailServer-Slave sshd[1189728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.169.99.135 user=root 2026-09-14T08:09:05.381539+00:00 MailServer-Slave sshd[1189728]: Failed password for root from 20.169.99.135 port 3136 ssh2 ... show less	Brute-Force SSH
🇫🇮 Phish.gg	2026-09-14 07:42:30 (1 hour ago)	Sep 14 07:41:39 obsidian sshd[1491439]: Failed password for root from 20.169.99.135 port 3136 ssh2 S ... show more Sep 14 07:41:39 obsidian sshd[1491439]: Failed password for root from 20.169.99.135 port 3136 ssh2 Sep 14 07:42:27 obsidian sshd[1496096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.169.99.135 user=root Sep 14 07:42:29 obsidian sshd[1496096]: Failed password for root from 20.169.99.135 port 3136 ssh2 ... show less	Brute-Force SSH
🇫🇮 hellasleeper	2026-09-14 07:41:05 (1 hour ago)	SSH honeypot attacker (Cowrie) on Hermes-NOC	Port Scan Brute-Force
🇩🇪 ZeroAttackVector	2026-09-14 07:29:03 (1 hour ago)	Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: ... show more Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-09-14..2026-09-14. Reported by an SSH honeypot network; no production service involved. show less	Brute-Force SSH
🇩🇪 AnonDrop	2026-09-14 07:23:21 (1 hour ago)	Privilege escalation attempt - Commands: printf 'COWRIE_DIR:%s\n' "$(ls -d /home/cowrie /opt/cowrie ... show more Privilege escalation attempt - Commands: printf 'COWRIE_DIR:%s\n' "$(ls -d /home/cowrie /opt/cowrie /srv/cowrie 2>/dev/null \| head -1)";printf 'PROC1_CMD:%s\n' "$(tr '\0' ' ' < /proc/1/cmdline 2>/dev/null \| head -c 120)";printf 'PASSWD_LINES:%s\n' "$(wc -l < /etc/passwd 2>/dev/null)";printf 'LOADAVG_RAW:%s\n' "$(cut -d' ' -f1-3 /proc/loadavg 2>/dev/null)";printf 'LOAD_CMD:%s\n' "$(uptime 2>/dev/null \| grep -oP 'load average: \K[\d., ]+')";printf 'ALPINE_REL:%s\n' "$(cat /etc/alpine-release 2>/dev/null \| tr -d '\n')";printf 'OS_ID:%s\n' "$(grep ^ID= /etc/os-release 2>/dev/null \| cut -d= -f2 \| tr -d '\"')";printf 'PROC1_COMM:%s\n' "$(cat /proc/1/comm 2>/dev/null \| tr -d '\n')";printf 'LBU_LIST:%s\n' "$(test -f /root/lbu.list && echo FOUND \|\| echo NOTFOUND)";printf 'SHELL_EXE2:%s\n' "$(cat /proc/$$/comm 2>/dev/null \| tr -d '\n')";printf 'ARP_MACS:%s\n' "$(awk 'NR>1 && $4!=\"00:00:00:00:00:00\"{printf $4\",\"}' /proc/net/arp 2>/dev/null)" show less	Hacking
Anonymous	2026-09-14 07:05:43 (1 hour ago)	20.169.99.135 (US/United States/-), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇩🇪 Bigbear3	2026-09-14 07:05:19 (1 hour ago)	Report-by-bigbear3	Brute-Force SSH
🇩🇪 mailox	2026-09-14 07:02:23 (1 hour ago)	SSH Unauthorized connection attempt ...	Brute-Force SSH
🇩🇪 LRob	2026-09-14 06:56:56 (1 hour ago)	Unauthorised SSH login attempts \| 2026-09-14 06:56 UTC	Brute-Force SSH
🇹🇷 Threat.live	2026-09-14 06:55:02 (1 hour ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-09-14 06:52:07 (1 hour ago)	2026-09-14T06:52:05.272103+00:00 mail sshd[170898]: Failed password for root from 20.169.99.135 port ... show more 2026-09-14T06:52:05.272103+00:00 mail sshd[170898]: Failed password for root from 20.169.99.135 port 3136 ssh2 2026-09-14T06:52:06.001020+00:00 mail sshd[170898]: Connection closed by authenticating user root 20.169.99.135 port 3136 [preauth] ... show less	Brute-Force SSH
🇩🇪 ecs.ge	2026-09-14 06:37:42 (2 hours ago)	Automatic Fail2Ban report from jail ssh: multiple matching events detected.	Brute-Force SSH
🇩🇪 Robbie	2026-09-14 06:27:29 (2 hours ago)	Sep 14 06:27:28 Ubuntu-2204-jammy-amd64-base sshd[1650848]: User root from 20.169.99.135 not allowed ... show more Sep 14 06:27:28 Ubuntu-2204-jammy-amd64-base sshd[1650848]: User root from 20.169.99.135 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.81.178.71

🇳🇱 213.206.207.162

🇮🇩 202.159.101.194

🇲🇾 47.250.129.126

🇺🇸 34.19.116.49

🇬🇧 2a06:4884:d000::df

🇯🇵 218.219.193.151

🇺🇸 192.34.58.185

🇲🇽 187.141.57.197

🇩🇪 185.104.184.230

🇷🇴 92.118.39.77

🇬🇧 87.192.99.246

🇩🇪 69.5.169.121

🇩🇪 69.5.169.77

🇩🇪 69.5.169.9

🇻🇳 61.14.233.194

🇮🇪 52.210.98.189

🇬🇧 51.195.223.192

🇩🇪 51.195.40.26

🇵🇾 45.234.86.59