Azure Public IPs are identified as BOT Activity

Question

Azure Public IPs are identified as BOT Activity

Danan, Angelo (Citco) 0

Can MS please cleanup your side as AZURE public IPs are being tagged as BOT ACTIVITY. Some of your subscribers must be abusing your services and websites are now tagging your public IPs as BOT ACTIVITY.

Is there any way to expedite the cleanup process as it is affecting our users from using VDI hosted in Azure?

Ganesh Patapati 11,915 Reputation points Microsoft External Staff Moderator

2024-11-13T11:31:29.0633333+00:00
Hi Danan, Angelo (Citco)

Greetings!

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

It seems that Azure public IPs are facing issues with being flagged as bot activity, which can disrupt services like Virtual Desktop Infrastructure (VDI).

To address this, you can report the affected IPs to Microsoft through their support channels. Additionally, consider reaching out to the websites that are blocking these IP s to request a review of their blocking policies.

Open a support ticket with Microsoft Azure detailing the issue.

Go to the https://support.microsoft.com/en-us/topic/contact-microsoft-azure-support-2315e669-8b1f-493b-5fb1-d88a8736ffe4 and open a support ticket detailing the problem.

Also, you can refer the below document:

Refer: https://learn.microsoft.com/en-us/answers/questions/2076771/what-can-microsoft-do-to-clean-up-their-azure-virt

You can report the abuse of MS IPs here: MSRC reporting portal (microsoft.com)

Hope this clarifies,

Thanks

Ganesh

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Ganesh Patapati 11,915 Reputation points Microsoft External Staff Moderator

2024-11-15T14:10:32.7733333+00:00
Hey Danan, Angelo (Citco),

Greetings,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted answer.

If above is unclear and/or you are unsure about something add a comment below.

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Regards,

Ganesh
Ganesh Patapati 11,915 Reputation points Microsoft External Staff Moderator

2024-11-18T16:26:30.76+00:00
Hello Danan, Angelo (Citco),

Hope you are having a great day!

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Regards,

Ganesh
Anders 0 Reputation points

2025-06-11T15:44:21.78+00:00

I think the problem is that websites can't report bot activity to Microsoft. We are currently under attack by 13 different Azure servers and I've tried to report that at https://msrc.microsoft.com/report/ to no avail. There is no clear category for bot reports so I used the IP Address brute force category. My reports were dismissed immediately.

If Microsoft won't take these threats seriously site admin will block all Azure servers instead. It's as simple as that. (And site admins will avoid migrating to Azure server since their service might get blocked.)
Allison Kupatt 0 Reputation points

2026-04-07T17:06:59.8466667+00:00

I recognize that this is an older thread, but we're having the same issue on our VDIs and I don't have the ability to submit a support ticket. The guides linked in the response from @Anonymous don't take me to an area where I can submit an actual ticket.
Ganesh Patapati 11,915 Reputation points Microsoft External Staff Moderator

2026-04-07T18:58:38.8533333+00:00

Hello Allison Kupatt

This thread is outdated. Kindly start a new thread so that our community of experts can offer accurate and helpful responses to your question.

Q&A Forum: Ask a question