JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.218.30.248

Recent Activity

Abuse confidence score ?

27% Elevated

16 reports

9 reporters · latest 5 days ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.218.30.248

Export CSV

This IP address has been reported a total of 16 times from 9 distinct sources. 20.218.30.248 was first reported on July 24th 2026, and the most recent report was 5 days ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; Spain with 1 report; United Kingdom of Great Britain and Northern Ireland with 1 report. The most common categories in these recent reports were: Bad Web Bot 4 times; Hacking 1 time; Web Spam 1 time; VPN IP 1 time; Brute-Force 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Mendip_Defender	2026-10-18 21:12:24 (5 days ago)	20.218.30.248 - - [18/Oct/2026:22:12:23 +0100] "GET /wp-content/uploads/2024/09/Phoenix-Magazine-Iss ... show more 20.218.30.248 - - [18/Oct/2026:22:12:23 +0100] "GET /wp-content/uploads/2024/09/Phoenix-Magazine-Issue-15-PRINT.pdf HTTP/1.1" 200 5571 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Bad Web Bot
🇮🇩 hermawan	2026-10-11 02:29:33 (1 week ago)	[Sun Oct 11 09:29:33.484787 2026] [security2:error] [pid 479266:tid 140630038668992] [client 20.218. ... show more [Sun Oct 11 09:29:33.484787 2026] [security2:error] [pid 479266:tid 140630038668992] [client 20.218.30.248:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan"] [unique_id "asr0jeedv-ziB6W5-OznjAAAAQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[479298] [79YTWoec2yc] [asr0jeedv-ziB6W5-OznjAAAAQU] keep_alive=[0] [2026-10-11 09:29 ... show less	Email Spam Hacking
🇺🇸 Alvino	2026-09-27 17:29:22 (3 weeks ago)	Blocked due to using a VPN or data center IP with abuse: 26	Web Spam VPN IP
Anonymous	2026-09-24 07:19:23 (1 month ago)	LH-Watcher: FAKE_ID [Fake ChatGPT-User]	Bad Web Bot
Anonymous	2026-09-20 11:26:15 (1 month ago)	LH-Watcher: FAKE_ID [Fake ChatGPT-User]	Bad Web Bot
🇪🇸 robotstxt	2026-09-16 08:27:43 (1 month ago)	20.218.30.248 - - [16/Sep/2026:08:26:59 +0000] "GET /educacio/personal-laboral/permisos-llicencies-e ... show more 20.218.30.248 - - [16/Sep/2026:08:26:59 +0000] "GET /educacio/personal-laboral/permisos-llicencies-excedencies-i-reduccions-de-jornada/ HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "20.218.30.248" edge="172.69.155.5" 20.218.30.248 - - [16/Sep/2026:08:26:59 +0000] "GET /educacio/ajuntament-de-barcelona/bressol/ HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "20.218.30.248" edge="172.69.155.4" 20.218.30.248 - - [16/Sep/2026:08:26:59 +0000] "GET /educacio/personal-laboral/funcions-del-personal-laboral/ HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "20.218.30.248" edge="172.69.155.5" 20.218.30.248 - - [16/Sep/2026:08:26:59 +0000] "GET /educacio/noticies/privada/no-reglada/permisos-llicencies-reduccions-de-jornada-i-excedencies/ HTTP/2.0" 403 ... show less	Web App Attack
Anonymous	2026-09-12 14:18:50 (1 month ago)	LH-Watcher: FAKE_ID [Fake ChatGPT-User]	Bad Web Bot
Anonymous	2026-09-05 07:39:32 (1 month ago)	WEB attack	Brute-Force
🇮🇩 David Koswari	2026-08-18 06:11:00 (2 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous	2026-08-13 20:15:08 (2 months ago)	LH-Watcher: FAKE_ID [Fake ChatGPT-User]	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-08-12 08:36:19 (2 months ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Tilellit.PRO	2026-08-11 06:22:41 (2 months ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Tilellit.PRO	2026-08-06 12:12:08 (2 months ago)	Malicious web traffic detected by CrowdSec	Hacking
🇬🇷 setupgr	2026-08-04 12:25:08 (2 months ago)	(mod_security) mod_security (id:990005) triggered by 20.218.30.248 (DE/Germany/State of Berlin/Berli ... show more (mod_security) mod_security (id:990005) triggered by 20.218.30.248 (DE/Germany/State of Berlin/Berlin/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Aug 04 15:25:04.735242 2026] [security2:error] [pid 2953:tid 3013] [remote 20.218.30.248:38854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "gyrosplace.gr"] [uri "/"] [unique_id "anHaIFaVVm9l4lmfMIHM2wADQgs"] show less	Port Scan
🇫🇷 Tilellit.PRO	2026-08-04 07:02:17 (2 months ago)	Malicious web traffic detected by CrowdSec	Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.117.7.182

🇺🇸 216.218.206.87

🇨🇱 200.86.168.7

🇧🇷 187.120.28.213

🇮🇳 125.23.203.138

🇨🇳 118.145.242.127

🇸🇬 118.139.164.171

🇩🇪 109.160.32.102

🇺🇸 104.143.77.9

🇷🇴 92.118.39.77

🇨🇦 51.222.95.103

🇫🇷 51.68.32.138

🇺🇸 20.169.49.246

🇸🇦 8.228.217.37

🇸🇪 5.198.253.239

🇬🇧 2a06:4882:1000::25

🇮🇳 2409:4090:f0d0:a208:655a:ac5f:c53e:3d12

🇦🇷 191.7.110.18

🇧🇷 181.220.127.89

🇺🇸 100.29.192.49