JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.97.189.96

20.97.189.96 was found in our database!

This IP was reported 618 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.97.189.96

Whois 20.97.189.96

IP Abuse Reports for 20.97.189.96:

This IP address has been reported a total of 618 times from 41 distinct sources. 20.97.189.96 was first reported on May 14th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-04 02:18:52 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-10 14:21:37 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-04-05 13:23:05 (3 months ago)	1775395377.261107 CvPQQE4GgDTGoeZhnk 20.97.189.96 1138 103.166.156.58 443 tcp - - - - S0 F F 0 S 1 6 ... show more 1775395377.261107 CvPQQE4GgDTGoeZhnk 20.97.189.96 1138 103.166.156.58 443 tcp - - - - S0 F F 0 S 1 60 0 0 - 6 (empty) (empty) 64860_2-4-8-1-3_1368_9 (empty) 04/05/2026-20:22:57.261107 ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-03-12 17:42:47 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-01-20 03:20:11 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 conseilgouz	2025-12-07 14:40:38 (7 months ago)	lae-88 : Bloc AI bots=>/images/histoire/Partie-de-Campagne-TOME-2-un-siecle-de-revolutions-agricoles ... show more lae-88 : Bloc AI bots=>/images/histoire/Partie-de-Campagne-TOME-2-un-siecle-de-revolutions-agricoles.pdf(ai.) show less	Hacking
🇮🇩 hermawan	2025-12-03 01:33:49 (7 months ago)	[Wed Dec 03 08:32:42.613430 2025] [security2:error] [pid 679185:tid 140357697173184] [client 20.97.1 ... show more [Wed Dec 03 08:32:42.613430 2025] [security2:error] [pid 679185:tid 140357697173184] [client 20.97.189.96:57762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/buku/479-buku-edisi-setiap-1-bulan-sekali/555558934-e-buletin-prakiraan-sifat-dan-curah-hujan-di-kabupaten-ngawi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/buku/479-buku-edisi-setiap-1-bulan-sekali/555558934-e-buletin-prakiraan-sifat-dan-curah-hujan-di-kabupaten-ngawi"] [unique_id "aS-TOnZSPOCbJ576D96z_AAAgBg"] [staklim-malang.info] [staklim-malang.info] top=[679210] [/wNDMMLVltQ] [a ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-01 02:10:46 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2025-11-17 23:09:56 (7 months ago)	UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method= ... show more UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method=GET path=/xb-led-smoked-sidemarkers.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2025-11-14 20:35:48 (8 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 96.189.97.20.rbl.malwar ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 96.189.97.20.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-1) show less	Hacking
🇺🇸 nodepile	2025-11-14 14:09:43 (8 months ago)	UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method= ... show more UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method=GET path=/2002-2005-audi-a4-b6-03-05-s4-4d-sedan-5d-wagon-depo-xenon-d1s-model-r8-led-strip-projector-headlight.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-06 12:33:01 (8 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/93-99-vw-jetta-vento-mk3-e-code-an ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/93-99-vw-jetta-vento-mk3-e-code-angel-eye-headlights-black.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Open Proxy VPN IP
🇮🇩 hermawan	2025-11-05 17:30:45 (8 months ago)	[Thu Nov 06 00:30:14.218675 2025] [security2:error] [pid 2228724:tid 139655683970752] [client 20.97. ... show more [Thu Nov 06 00:30:14.218675 2025] [security2:error] [pid 2228724:tid 139655683970752] [client 20.97.189.96:37993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "246"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562502-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-september-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562502-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-an ... show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2025-10-26 23:44:49 (8 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 96.189.97.20.rbl.malwar ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 96.189.97.20.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇩🇪 SCHAPPY	2025-10-20 06:53:40 (8 months ago)	Bad bot identified by user agent	Bad Web Bot

Showing 1 to 15 of 618 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.175

🇺🇸 157.245.3.59

🇺🇸 91.230.168.180

🇫🇷 85.217.140.41

🇺🇸 64.62.197.51

🇬🇧 35.203.210.38

🇺🇸 34.224.168.204

🇬🇧 5.252.83.245

🇹🇼 198.235.24.6

🇲🇦 197.153.57.103

🇩🇪 194.88.98.118

🇩🇪 185.240.193.32

🇳🇱 185.223.235.38

🇺🇸 174.137.29.175

🇮🇳 152.58.178.96

🇨🇳 123.96.14.167

🇮🇳 106.215.162.15

🇩🇪 64.43.199.128

🇮🇳 205.254.174.43

🇮🇷 194.5.188.91