172.183.91.44

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
2% Caution
12 reports
12 reporters · latest 2 weeks ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 1
Most common categories Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 8 application-level events across 3 target ports and 8 source port(s). Ports: 10808/service, 7890/service, 8081/HTTP. Sensors: Honeytrap.
Port Scan
🇩🇪 zerodaysystemde
Port (80 tcp) Scanner - WEB - HoneyPot
Port Scan Web App Attack
🇺🇸 RAP
2026-09-01 16:23:56 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 Teufel100
Bruteforce gegen Einstellungsdateien wie .env oder .git
Brute-Force Hacking Web App Attack
🇳🇱 maxxsense
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 172.183.91.44 (US/United States/-)
Port Scan
🇺🇸 kosada.com
Repeated requests for suspicious nonexistent URLs, for example: /.git/refs/heads/main (bogus vhost/SNI) (HTTP port 80)
Web App Attack
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443
Open Proxy Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Bad Web Bot Web App Attack
🇩🇪 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)
Hacking Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.164
🇫🇮 193.187.110.160
🇧🇷 189.113.249.175
🇵🇱 176.53.159.196
🇺🇸 162.216.149.249
🇳🇬 105.113.28.26
🇨🇭 104.251.181.114
🇭🇰 103.149.27.168
🇰🇿 95.59.34.107
🇺🇸 69.164.217.74
🇨🇳 47.97.2.138
🇺🇸 43.166.129.247
🇺🇸 20.118.204.38
🇳🇱 204.76.203.213
🇻🇪 200.8.40.88
🇺🇸 165.232.58.209
🇫🇷 90.52.105.32
🇳🇱 77.67.26.219
🇯🇲 72.27.53.217
🇺🇸 45.33.14.197
feedback