JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.158.105.223

158.158.105.223

Neutral Activity

48 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Singapore Pte. Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇪🇸 Spain

City

Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

158.158.105.223 has been reported 48 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 158.158.105.223:

This IP address has been reported a total of 48 times from 27 distinct sources. 158.158.105.223 was first reported on March 30th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-04-26 07:51:08 (4 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
Anonymous	2026-04-26 03:55:05 (4 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 2048	2026-04-25 12:58:44 (4 months ago)	2026-04-25T14:58:41.118403+02:00 machodeer kernel: [64201.971094] [UFW BLOCK] IN=ens3 OUT= MAC=REDAC ... show more 2026-04-25T14:58:41.118403+02:00 machodeer kernel: [64201.971094] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20646 DF PROTO=TCP SPT=12188 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-25T14:58:42.179597+02:00 machodeer kernel: [64203.032090] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20647 DF PROTO=TCP SPT=12188 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-25T14:58:43.204377+02:00 machodeer kernel: [64204.055781] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20648 DF PROTO=TCP SPT=12188 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇷🇸 Smel	2026-04-25 00:45:03 (4 months ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 2048	2026-04-24 14:58:21 (4 months ago)	2026-04-24T15:58:18.147110+01:00 machodeer kernel: [5299519.089609] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-04-24T15:58:18.147110+01:00 machodeer kernel: [5299519.089609] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=5575 DF PROTO=TCP SPT=47884 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-24T15:58:19.210806+01:00 machodeer kernel: [5299520.152815] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=5576 DF PROTO=TCP SPT=47884 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-24T15:58:20.232955+01:00 machodeer kernel: [5299521.171941] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.158.105.223 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=5577 DF PROTO=TCP SPT=47884 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇯🇵 mkaraki	2026-04-24 01:50:33 (4 months ago)	1776995428 # Service_probe # SIGNATURE_SEND # source_ip:158.158.105.223 # dst_port:80 ...	Port Scan
🇨🇳 ThreatBook.io	2026-04-23 23:37:38 (4 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.105.223 2026-04 ... show more ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.105.223 2026-04-23 01:13:25 / 2026-04-23 10:41:14 / 2026-04-23 13:56:22 / show less	Web App Attack
🇺🇸 MPL	2026-04-23 16:51:25 (4 months ago)	tcp/80 (5 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-04-23 16:02:09 (4 months ago)	HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.113 User-Ag ... show more HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.113 User-Agent: Go-http-client/1.1 Connection: close show less	Web App Attack
🇺🇸 MPL	2026-04-23 15:13:51 (4 months ago)	tcp/80 (10 or more attempts)	Port Scan
🇨🇦 lakered	2026-04-23 10:32:44 (4 months ago)	Honeypot Lakered: Nginx: Default server trap hit (Pattern: unauthorized_host_access). IP automatical ... show more Honeypot Lakered: Nginx: Default server trap hit (Pattern: unauthorized_host_access). IP automatically banned. show less	Port Scan Exploited Host
🇬🇧 PeravixGroup	2026-04-23 09:22:06 (4 months ago)	HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.109 User-Ag ... show more HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.109 User-Agent: Go-http-client/1.1 Connection: close show less	Web App Attack
🇬🇧 PeravixGroup	2026-04-23 02:50:13 (4 months ago)	HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.105 User-Ag ... show more HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.74.105 User-Agent: Go-http-client/1.1 Connection: close show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-22 23:45:39 (4 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.105.223 2026-04 ... show more ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.105.223 2026-04-22 03:36:54 / 2026-04-22 05:01:30 / 2026-04-22 08:01:17 / 2026-04-22 01:30:03 / show less	Web App Attack
🇬🇧 PeravixGroup	2026-04-22 20:10:28 (4 months ago)	HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.72.106 User-Ag ... show more HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.1 Host: 103.1.72.106 User-Agent: Go-http-client/1.1 Connection: close show less	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a10:3c0:5:0:1:24:0:3

🇰🇬 217.29.30.135

🇧🇷 186.248.218.3

🇭🇰 183.179.44.89

🇬🇧 159.65.83.171

🇺🇸 148.135.71.195

🇺🇸 147.185.132.76

🇮🇩 117.102.87.140

🇺🇸 107.170.6.160

🇳🇱 85.148.65.156

🇨🇳 14.145.193.83

🇺🇸 8.229.167.164

🇮🇪 3.252.218.156

🇩🇪 213.209.159.26

🇵🇾 181.94.225.169

🇺🇸 179.61.137.23

🇺🇸 162.243.127.206

🇻🇳 123.30.238.247

🇮🇳 103.216.145.2

🇮🇳 103.178.159.161