172.178.68.104

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
229 reports
173 reporters · latest 4 hours ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
229 from 173 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 52 🇺🇸 United States of America 36 🇳🇱 Netherlands 20
Most common categories Web App Attack 146 Hacking 51 Bad Web Bot 51 Brute-Force 45 Port Scan 29
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇪🇸 IT Infraestructura
Several Illegal Resource Access Requests blocked
Bad Web Bot Web App Attack
🇺🇾 joelguerreroalvarado
Automated report from IR Platform. IP detected performing cloudflare multi zone attack attacks. 64 events detected in the last hour. Affected systems: costa-garzon.com, fundedu.ar, brisasdegarzon.com, abenapavalley.com, dievole.com
Web App Attack Bad Web Bot
🇨🇷 Klicks
Request URL: https://app.1.com:443/default.aspx Request path: /default.aspx User host address: 172.178.68.104
Exploited Host Web Spam
🇭🇺 miszterx.hu
XORP (haproxy): 52x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇳🇦 jacqueskruger
Web App Attack
🇺🇸 SYSMarshal
SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]
Port Scan Web App Attack Bad Web Bot
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=48154 dstport=443
Port Scan
Anonymous
Brute-Force
🇵🇱 dzpk
[09/Nov/2026:06:04:54 +0100] 179420069457.129447 172.178.68.104 52586 HOST 443 [09/Nov/2026:06:04:55 +0100] 179420069525.444371 172.178.68.104 52586 HOST 443 [09/Nov/2026:06:04:56 +0100] 179420069681.073788 172.178.68.104 52586 HOST 443
Web App Attack
🇩🇪 Viveronese
HTTP vulnerability scanning
Web App Attack
🇬🇧 ISPLtd
172.178.68.104 - - [09/Nov/2026:00:17:36 -0400] "POST / 172.178.68.104 [09/Nov/2026:00:17:36 -0400] claire.ixoye.ca:443 URL:/index.html "POST / ...
Hacking Web App Attack
🇫🇷 Zundapper
Web App Attack Port Scan
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ETN AGGRESSIVE IPs Group 17).
Hacking Web App Attack
🇫🇷 EDSL
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)
Port Scan Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 176.65.149.188
🇩🇪 167.94.146.48
🇫🇮 147.185.133.190
🇺🇸 147.185.132.44
🇨🇭 132.243.161.98
🇨🇳 14.103.118.186
🇺🇸 8.9.88.23
🇨🇳 223.167.206.38
🇳🇱 213.209.159.231
🇨🇳 182.138.158.95
🇵🇾 181.119.238.188
🇧🇷 154.80.128.124
🇨🇳 140.206.194.198
🇹🇭 110.77.138.72
🇩🇪 94.31.116.128
🇫🇷 91.231.89.96
🇫🇷 91.196.152.182
🇨🇳 220.250.11.205
🇨🇳 220.167.232.236
🇺🇸 216.25.90.15
feedback