JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.99.210.64

20.99.210.64 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.99.210.64

Whois 20.99.210.64

IP Abuse Reports for 20.99.210.64:

This IP address has been reported a total of 181 times from 37 distinct sources. 20.99.210.64 was first reported on December 12th 2022, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2025-11-13 11:46:58 (9 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -17.584 (Bad < -10 / Very Bad < -20) ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -17.584 (Bad < -10 / Very Bad < -20) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-10-26 21:48:19 (10 months ago)	[Mon Oct 27 04:48:18.256203 2025] [security2:error] [pid 1551195:tid 140450186913472] [client 20.99. ... show more [Mon Oct 27 04:48:18.256203 2025] [security2:error] [pid 1551195:tid 140450186913472] [client 20.99.210.64:55616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/var/" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /var/ found within REQUEST_FILENAME: /var/www/index.php/profil/meteorologi/list-all-categories/378-video/video-berita request_line = GET /var/www/index.php/profil/meteorologi/list-all-categories/378-video/video-berita HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/var/www/index.php/profil/meteorologi/list-all-categories/378-video/video-berita"] [unique_id "aP6XIltl19wy6vn85FysAwAAA4k"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1551231] [qPSYvRb9K2c] [aP6XIltl19wy6vn85FysAwAAA4k] keep_alive=[0] [2025-10-27 04:48:18.256208] [R:aP6XIltl19wy6vn85FysAwAAA ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2025-10-23 18:07:12 (10 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2025-10-22 07:03:43 (10 months ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 CommanderRoot	2025-10-19 13:13:54 (10 months ago)	Bot crawler	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-10-11 01:53:18 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-10-06 19:30:02 (10 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-09-23 05:23:03 (11 months ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 1gz	2025-09-07 23:36:15 (11 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 hermawan	2025-08-26 08:09:21 (1 year ago)	[Tue Aug 26 14:47:51.473945 2025] [security2:error] [pid 113515:tid 140504738027200] [client 20.99.2 ... show more [Tue Aug 26 14:47:51.473945 2025] [security2:error] [pid 113515:tid 140504738027200] [client 20.99.210.64:43136] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: type= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisa-dan-prospek-cuaca-di-jawa-timur-ditinjau-dari-dinamika-atmosfer?format=feed&type=rss HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/analisa-dan-prospek-cuaca-di-jawa-timur-ditinjau-dari-dinamika-atmosfer?format=feed&type=rss Request Basename = a..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisa- ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-08-21 13:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇪🇸 Global Cyber Police	2025-08-20 02:11:21 (1 year ago)	Part of botnet that all have no referrer and always use the exact spoofed agent: Mozilla/5.0 (compat ... show more Part of botnet that all have no referrer and always use the exact spoofed agent: Mozilla/5.0 (compatible; crawler) show less	Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack
🇮🇩 hermawan	2025-08-17 02:20:54 (1 year ago)	[Sun Aug 17 09:20:05.247277 2025] [security2:error] [pid 242755:tid 140375134025408] [client 20.99.2 ... show more [Sun Aug 17 09:20:05.247277 2025] [security2:error] [pid 242755:tid 140375134025408] [client 20.99.210.64:29955] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/buku?id=472 HTTP/1.1 Request URI RAW = /index.php/buku?id=472 Request Basename = buku"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku"] [unique_id "aKE8VQftTQluB5M4trZhDAAAAVI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[242800] [RuTSQsYpjAs] [aKE8VQftTQluB5M4trZhDAAAAVI] keep_alive=[0] [2025-08-17 09:20:05.247283] [R:aKE8VQftTQluB5M4trZhDAAAAVI] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2025-08-09 21:57:13 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2025-08-09 04:34:18 (1 year ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 117.217.127.100

🇯🇵 107.155.15.8

🇮🇩 103.187.165.26

🇺🇸 43.159.132.207

🇻🇪 38.159.49.90

🇺🇸 206.189.186.176

🇩🇪 172.217.33.154

🇺🇸 167.172.208.8

🇹🇼 162.158.243.30

🇲🇲 103.59.163.133

🇹🇼 61.216.144.79

🇫🇷 54.38.241.200

🇬🇧 35.203.210.58

🇺🇸 35.196.86.77

🇺🇸 34.16.234.68

🇺🇸 23.227.203.54

🇷🇺 2a00:1370:817c:1c1f:98c0:b037:f1e5:d38e

🇨🇳 221.233.88.110

🇰🇷 218.149.228.165

🇩🇪 213.209.159.154