JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.185.79.15

20.185.79.15 was found in our database!

This IP was reported 328 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	duckduckbot-3.duckduckgo.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 20.185.79.15 is an IP address from within our whitelist, which we identify as "DuckDuckGo".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 20.185.79.15

Whois 20.185.79.15

IP Abuse Reports for 20.185.79.15:

This IP address has been reported a total of 328 times from 79 distinct sources. 20.185.79.15 was first reported on November 16th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-06-17 16:07:57 (5 days ago)	HTTP vulnerability scanning	Web App Attack
🇹🇷 SeczarSecureOps	2026-06-08 13:01:54 (2 weeks ago)	Auto-blocked by Seczar SecureOps — WAF Attack Burst (484 events in 10min) at 2026-06-08 13:01	Bad Web Bot Web App Attack
Anonymous	2026-06-07 19:40:01 (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 Dorian GRANDHAY	2026-05-24 19:03:21 (4 weeks ago)	(PERMBLOCK) 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com) has had more than 4 temp bl ... show more (PERMBLOCK) 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-24 16:29:43 (4 weeks ago)	20.185.79.15	Port Scan Hacking Brute-Force
🇬🇧 NotCool	2026-05-15 19:32:39 (1 month ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduck ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com): 50 in the last 3600 secs show less	Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-05-08 05:16:11 (1 month ago)	IDS Alert: SURICATA STREAM SHUTDOWN RST invalid ack === ATTACK === Signature: SURICATA STREAM SHUTDO ... show more IDS Alert: SURICATA STREAM SHUTDOWN RST invalid ack === ATTACK === Signature: SURICATA STREAM SHUTDOWN RST invalid ack \| SID: 2210046 \| Severity: 3 \| Category: Generic Protocol Command Decode === SOURCE === IP: 20.185.79.15 (IPv4) \| Port: 22474 \| Country: United States \| ISP: MSFT \| rDNS: duckduckbot-3.duckduckgo.com === TARGET === Host: lilys.ch \| IP: 185.54.81.50 \| Port: 443 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-05-08 07:16:10 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇬🇧 NotCool	2026-05-07 02:16:51 (1 month ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduck ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com): 50 in the last 3600 secs show less	Bad Web Bot
🇮🇹 Inartis	2026-05-05 13:02:00 (1 month ago)	20.185.79.15 - - [05/May/2026:15:01:59 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 302 465 "-" "'DuckDuckB ... show more 20.185.79.15 - - [05/May/2026:15:01:59 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 302 465 "-" "'DuckDuckBot-Https/1.1; (+https://duckduckgo.com/duckduckbot)'" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Dorian GRANDHAY	2026-04-23 12:38:10 (1 month ago)	(PERMBLOCK) 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com) has had more than 4 temp bl ... show more (PERMBLOCK) 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇧 NotCool	2026-04-21 18:32:12 (2 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduck ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com): 50 in the last 3600 secs show less	Bad Web Bot
🇬🇧 NotCool	2026-04-19 19:07:12 (2 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduck ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com): 50 in the last 3600 secs show less	Bad Web Bot
Anonymous	2026-03-29 15:04:20 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: SQL ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: SQL injection, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 DocNetzwerk	2026-02-25 17:31:12 (3 months ago)	(php-url-fopen) Failed php-url-fopen trigger from 20.185.79.15 (US/United States/duckduckbot-3.duckd ... show more (php-url-fopen) Failed php-url-fopen trigger from 20.185.79.15 (US/United States/duckduckbot-3.duckduckgo.com) show less	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-01-25 03:23:03 (4 months ago)	IDS Alert: 🐾 - 🚨 HTTPS 🕵 scan 🎩 Joomscan 👨‍💻 === ATTACK === Signature: 🐾 - 🚨 HTTPS 🕵 scan 🎩 Joomscan ... show more IDS Alert: 🐾 - 🚨 HTTPS 🕵 scan 🎩 Joomscan 👨‍💻 === ATTACK === Signature: 🐾 - 🚨 HTTPS 🕵 scan 🎩 Joomscan 👨‍💻 \| SID: 3300189 \| Severity: 1 \| Category: Potential Corporate Privacy Violation === SOURCE === IP: 20.185.79.15 (IPv4) \| Port: 20170 \| Country: United States \| ISP: MSFT \| rDNS: duckduckbot-3.duckduckgo.com === TARGET === Host: lilys.ch \| IP: 185.54.81.50 \| Port: 443 \| Protocol: TCP \| App: tls === RESPONSE === Time: 2026-01-25 04:23:00 \| Action: Blocked show less	Port Scan

Showing 1 to 15 of 328 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.74

🇩🇪 141.11.187.237

🇸🇬 103.134.154.138

🇫🇷 85.217.140.52

🇺🇸 2a04:c300:400::187

🇵🇰 223.123.36.77

🇺🇸 216.244.66.241

🇨🇦 85.217.149.41

🇸🇪 83.226.181.38

🇲🇳 66.181.185.135

🇸🇬 45.82.78.104

🇪🇸 34.175.86.178

🇰🇷 1.238.106.229

🇰🇷 221.162.63.153

🇺🇸 216.180.246.37

🇪🇬 197.42.194.202

🇺🇸 194.187.179.38

🇷🇺 178.207.10.91

🇳🇱 176.65.132.218

🇨🇦 138.197.143.91