172.178.113.42
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
83 from
48 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/10024 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 4911)
Source port: 40923
TTL: 51
Packet length: 52
TOS: 0x00
This report (for 172.178.113.42) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Admins@Storch |
IPS:drop <match> dstport=995
|
Brute-Force Exploited Host | |
| 🇫🇷 uthul |
T-Pot honeypot: 20 hits on ports [162, 443] (automated)
|
Port Scan Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /developmentserver/metadatauploader | seen at 2026-11-15 09:57:47.179 |
|
Web App Attack | |
| 🇺🇸 RAP |
2026-11-15 09:30:16 UTC Unauthorized activity to TCP port 139. SMB
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8983
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 3000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:3000
User-Agent: Mozilla/5.0 zgrab/0.x
Accept: */*
Accept-En
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp ports: 20547,3479 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/587
|
Port Scan | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack)
|
Brute-Force Hacking Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 3 hits on ports [162] (automated)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 139,9042 (2 or more attempts)
|
Port Scan | |
| 🇮🇩 solusi247.com |
Wazuh rule 31178: L3: Active Response Trigger by ET CINS Active Threat Intelligence Poor Reputation IP group 241: CINS Poor Reputation IP Blocked.
|
Hacking | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 15672 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown