AbuseIPDB » 20.161.75.211

20.161.75.211 was found in our database!

This IP was reported 261 times. Confidence of Abuse is 47%: ?

47%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 20.161.75.211

Whois 20.161.75.211

IP Abuse Reports for 20.161.75.211:

This IP address has been reported a total of 261 times from 14 distinct sources. 20.161.75.211 was first reported on May 14th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-03-15 21:06:07 (14 hours ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
MAGIC	2025-03-15 06:09:26 (1 day ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-03-14 20:41:41 (1 day ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-03-13 18:30:09 (2 days ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
SCHAPPY	2025-03-13 15:15:03 (2 days ago)	Bad bot identified by user agent	Bad Web Bot
hermawan	2025-03-13 06:56:10 (3 days ago)	[Thu Mar 13 06:37:34.507197 2025] [security2:error] [pid 3756:tid 140626196682432] [client 20.161.75 ... show more[Thu Mar 13 06:37:34.507197 2025] [security2:error] [pid 3756:tid 140626196682432] [client 20.161.75.211:31520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-prakiraan-puncak-musim-hujan-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-prakiraan-puncak-musim-hujan-dengan-normalnya"] [unique_id "Z9J9LotCKBYHGvauN-2riwABLAI"] [staklim-malang.info] [staklim-malang.info] top=[3759] [nCibjrsC+Fo] [Z9J9LotCKBYHGvauN-2riwABLA ... show less	Hacking Web App Attack
hermawan	2025-03-12 19:27:25 (3 days ago)	[Thu Mar 13 02:25:12.832459 2025] [security2:error] [pid 3725:tid 140529645815488] [client 20.161.75 ... show more[Thu Mar 13 02:25:12.832459 2025] [security2:error] [pid 3725:tid 140529645815488] [client 20.161.75.211:27179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "Z9HfmHKc75QZ_FJPwqXvrgAASiE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3759] [jiIOKmKDPR0] [Z9HfmHKc75QZ_FJPwqXvrgAASiE] keep_alive=[1] [2025-03-13 02:25:12.832461] [R:Z9HfmHKc75QZ_FJPwqXvrgAASiE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bo ... show less	Hacking Web App Attack
Anonymous	2025-03-12 17:18:13 (3 days ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-03-11 18:31:20 (4 days ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-03-10 12:33:58 (5 days ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-03-09 14:49:38 (6 days ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
MAGIC	2025-03-08 01:11:16 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
polido	2025-03-07 09:44:04 (1 week ago)	Unauthorized connection attempt to port 443 from 20.161.75.211	Port Scan
Anonymous	2025-03-06 16:48:07 (1 week ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-03-05 15:26:03 (1 week ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack