JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.55.210.138

Recent Activity

Abuse Confidence Score

13% Caution

22 reports

13 reporters · latest 19 hours ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Hostname(s): msnbot-65-55-210-138.search.msn.com
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Moses Lake, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 13 distinct reporters

First reported

July 23rd 2025

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 1 🇩🇪 Germany 1

Most common categories Hacking 1 Bad Web Bot 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 AetherFox	2026-11-07 10:22:39 UTC · (19 hours ago)	AetherFox VoidGuard detected: [Sat Nov 07 10:22:36.432582 2026] [security2:error] [pid 2425043:tid 2425061] [client 65.55.210.138:27716] [client 65.55.210.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(bingbot.bingbot\|Amazo ... show more AetherFox VoidGuard detected: [Sat Nov 07 10:22:36.432582 2026] [security2:error] [pid 2425043:tid 2425061] [client 65.55.210.138:27716] [client 65.55.210.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(bingbot.bingbot\|Amazonbot.Amazonbot\|Googlebot.Googlebot)" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/AetherFox.conf"] [line "79"] [id "100065"] [msg "spoofed bot UA blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/media/com_eventbooking/assets/js/eventbookingjq.min.js"] [unique_id "au777CT2J0c49UOebKaImwAAAE8"], referer: https://draconigen.net/index.php/de/reg/131-dn-ev-131.html [Sat Nov 07 10:22:38.835301 2026] [security2:error] [pid 2425043:tid 2425071] [client 65.55.210.138:27713] [client 65.55.210.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(bingbot.bingbot\|Amazonbot.Amazonbot\|Googlebot.*Googlebot)" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecuri ... show less	Hacking Bad Web Bot
Anonymous	2026-10-24 15:47:13 UTC · (2 weeks ago)	IP matched detection query Many sub paths, bad urls forwarding.	Brute-Force
🇨🇭 AlainR	2026-08-20 18:30:11 UTC · (2 months ago)	are-Wrong key : url__ =>/matomo/matomo.php?action_name=Alain%20Rihs%20-%20artisan%20du%20web%20-%20voici%20comment%20me%20contacter%20-%20Alain%20Rihs%20-%20Artisan%20du%20Web&idsite=1&rec=1&r=381784&h=11&m=30&s=10&url=htt ... show more are-Wrong key : url__ =>/matomo/matomo.php?action_name=Alain%20Rihs%20-%20artisan%20du%20web%20-%20voici%20comment%20me%20contacter%20-%20Alain%20Rihs%20-%20Artisan%20du%20Web&idsite=1&rec=1&r=381784&h=11&m=30&s=10&url=https%3A%2F%2Fwww.artisan-du-web.ch%2Fcontact&_id=&_idn=1&send_im... show less	Hacking
🇺🇸 TPI-Abuse	2026-07-06 19:57:51 UTC · (4 months ago)	(mod_security) mod_security (id:243420) triggered by 65.55.210.138 (msnbot-65-55-210-138.search.msn.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:57:47.102568 2026] [security2:error] [pid 19968:tid 199 ... show more (mod_security) mod_security (id:243420) triggered by 65.55.210.138 (msnbot-65-55-210-138.search.msn.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:57:47.102568 2026] [security2:error] [pid 19968:tid 19968] [client 65.55.210.138:40327] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.hodlmoser.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "akwIuBu-ja5-M3QwQoq2vAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-15 23:57:23 UTC · (4 months ago)	(mod_security) mod_security (id:11000010) triggered by 65.55.210.138: 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:22.159088 2026] [security2:error] [pid 1917071:tid 1917225] [remote 65.55.210.138 ... show more (mod_security) mod_security (id:11000010) triggered by 65.55.210.138: 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:22.159088 2026] [security2:error] [pid 1917071:tid 1917225] [remote 65.55.210.138:43649] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/revslider/public/js/libs/tptools.js"] [unique_id "ajCRYnbrIXpbmq-1FoWogAABEgk"], referer: https://asteriassantorini.com/ show less	Port Scan
🇬🇷 setupgr	2026-06-13 14:03:53 UTC · (4 months ago)	(mod_security) mod_security (id:11000010) triggered by 65.55.210.138: 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:03:47.812373 2026] [security2:error] [pid 864825:tid 864907] [remote 65.55.210.138:4 ... show more (mod_security) mod_security (id:11000010) triggered by 65.55.210.138: 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:03:47.812373 2026] [security2:error] [pid 864825:tid 864907] [remote 65.55.210.138:43649] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/plugins/elementor/assets/css/widget-heading.min.css"] [unique_id "ai1jQwVBLQZSEj16IO6vDQAASxc"], referer: https://sea-sound.com/ show less	Port Scan
Anonymous	2026-05-17 08:09:40 UTC · (5 months ago)	65.55.210.138 - - [17/May/2026:08:08:15 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/mountain/3057" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 65.55.2 ... show more 65.55.210.138 - - [17/May/2026:08:08:15 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/mountain/3057" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 65.55.210.138 - - [17/May/2026:08:08:57 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 65.55.210.138 - - [17/May/2026:08:09:37 +0000] "GET /svg/moon-phase-3.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-02-01 22:15:51 UTC · (9 months ago)	ThreatBook Intelligence: Search Engine Crawler,Whitelist more details on https://threatbook.io/ip/65.55.210.138 2026-02-01 21:10:34 /bower_components/eonasdan-bootstrap-datetimepicker/build/css/bootstrap-datetimepicker.min.css 2026-02-01 21:25:13 /bo ... show more ThreatBook Intelligence: Search Engine Crawler,Whitelist more details on https://threatbook.io/ip/65.55.210.138 2026-02-01 21:10:34 /bower_components/eonasdan-bootstrap-datetimepicker/build/css/bootstrap-datetimepicker.min.css 2026-02-01 21:25:13 /bower_components/jquery-ui/themes/base/jquery-ui.min.css show less	Web App Attack
🇦🇺 MAGIC	2025-12-22 03:06:12 UTC · (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 Progetto1	2025-11-28 20:20:03 UTC · (11 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 i-turnradio.nl	2025-10-24 08:29:42 UTC · (1 year ago)	2025-10-24 @ 10:29:41 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇨🇳 ThreatBook.io	2025-10-11 22:09:52 UTC · (1 year ago)	ThreatBook Intelligence: Search Engine Crawler,Whitelist more details on https://threatbook.io/ip/65.55.210.138 2025-10-11 10:14:08 /i18n/ko_KR/network.txt	Web App Attack
🇦🇺 MAGIC	2025-10-08 01:19:40 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 Progetto1	2025-09-29 15:38:02 UTC · (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2025-09-26 05:26:17 UTC · (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 172.68.159.153

🇺🇸 172.13.193.24

🇨🇳 120.198.23.233

🇷🇴 80.94.92.179

🇺🇸 68.235.46.206

🇪🇸 45.158.225.48

🇦🇺 2400:6180:10:200::f6a8:6000

🇨🇳 223.109.252.215

🇳🇱 185.242.226.11

🇨🇦 158.69.55.148

🇨🇳 113.88.79.111

🇳🇱 109.160.32.135

🇺🇸 47.196.22.78

🇬🇧 46.101.95.136

🇺🇸 24.7.232.158

🇺🇸 23.234.101.112

🇷🇴 193.46.255.86

🇵🇪 190.43.149.135

🇲🇽 187.222.255.111

🇺🇸 185.77.220.89