172.172.161.38

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
71 reports
43 reporters · latest 20 minutes ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
71 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 27 🇫🇷 France 11 🇧🇷 Brazil 6
Most common categories Port Scan 58 Web App Attack 10 Hacking 8 Brute-Force 6 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇳 CyberFox
8445/tcp (1 or more attempts)
Port Scan
🇫🇮 6kilowatti
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/9990 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇺🇸 MPL
tcp/8085
Port Scan
🇨🇳 鹏鹏
monitor: on VM-0-7-ubuntu | port: 135 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp ports: 4118,143 (2 or more attempts)
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/30001 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 21
Port Scan Hacking Exploited Host
Anonymous
8291/tcp (1 or more attempts)
Port Scan
🇺🇸 MPL
tcp/7000
Port Scan
🇺🇸 MPL
tcp/11743
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/11742 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇳🇱 donarev419
Connection to port 4000 with data transfer. Data preview: NXSH-5.6.7\n
Port Scan Hacking
🇹🇷 Threat.live
Threat.live: Web Scan
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 167.71.48.103
🇳🇱 77.67.26.129
🇷🇴 2.57.121.112
🇦🇿 216.147.123.216
🇵🇰 182.185.71.120
🇵🇦 181.178.142.70
🇨🇴 181.79.157.168
🇺🇸 172.237.150.127
🇺🇸 162.216.150.209
🇨🇳 106.12.177.73
🇻🇳 103.9.204.84
🇺🇸 97.170.99.36
🇺🇸 76.119.155.2
🇬🇧 45.133.173.176
🇬🇧 35.203.210.223
🇧🇪 34.38.19.77
🇮🇳 13.232.93.65
🇵🇹 188.250.218.198
🇵🇪 179.6.1.62
🇺🇸 174.172.241.207
feedback