JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.197.112.228

20.197.112.228 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.197.112.228

Whois 20.197.112.228

IP Abuse Reports for 20.197.112.228:

This IP address has been reported a total of 88 times from 23 distinct sources. 20.197.112.228 was first reported on October 5th 2023, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2025-11-06 13:34:39 (8 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2025-10-31 07:40:03 (8 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-10-25 13:38:03 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 FeG Deutschland	2025-10-21 12:51:04 (8 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇦🇺 MAGIC	2025-10-21 02:22:12 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-10-18 18:08:34 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-17 19:01:03 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 20.197.112.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 20.197.112.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 15:00:56.692290 2025] [security2:error] [pid 28028:tid 28028] [client 20.197.112.228:65152] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nrvoutdoors.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nrvoutdoors.com"] [uri "/HAMILTON/Thumbs.db"] [unique_id "aPKSaJwjZDpQAkYJ2Yay6AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 1gz	2025-10-04 06:30:22 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 FeG Deutschland	2025-09-29 07:30:13 (9 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2025-09-26 15:58:02 (9 months ago)	Malicious activity detected	Hacking Web App Attack
🇮🇩 hermawan	2025-09-26 15:26:23 (9 months ago)	[Fri Sep 26 22:06:20.712692 2025] [security2:error] [pid 987214:tid 140708287604416] [client 20.197. ... show more [Fri Sep 26 22:06:20.712692 2025] [security2:error] [pid 987214:tid 140708287604416] [client 20.197.112.228:65472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/var/" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /var/ found within REQUEST_FILENAME: /var/www/index.php/profil/meteorologi/list-all-categories/3884-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian request_line = GET /var/www/index.php/profil/meteorologi/list-all-categories/3884-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/var/www/index.php/profil/meteorologi/list-all-categories/3884-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian"] [unique_id "aNar7Gs7Xp8bL77 ... show less	Hacking Web App Attack
Anonymous	2025-09-20 01:27:54 (9 months ago)	Malicious activity	Bad Web Bot Web App Attack
🇩🇪 kranem	2025-09-13 06:00:29 (9 months ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protoc ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-09-13T04:08:03Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 show less	Bad Web Bot
🇦🇺 MAGIC	2025-09-11 02:02:29 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 FeG Deutschland	2025-09-10 15:53:53 (9 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 213.55.79.195

🇭🇰 199.45.154.182

🇸🇬 194.5.82.128

🇺🇸 188.114.97.11

🇸🇦 176.44.144.100

🇧🇷 172.253.233.23

🇮🇶 169.224.38.172

🇮🇶 169.224.34.129

🇭🇰 104.208.67.157

🇦🇺 103.140.122.0

🇨🇳 58.245.210.70

🇨🇦 51.222.30.51

🇲🇽 46.250.169.223

🇳🇱 45.148.10.141

🇺🇸 45.130.83.194

🇫🇷 45.81.243.62

🇩🇪 45.3.44.218

🇧🇷 20.226.16.12

🇨🇦 20.104.74.38

🇺🇸 172.253.244.146