2 ms·

OP didn't say it was a DDOS, just that MS treated it as such. Given the ISP-level block, that makes sense.