JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.184.214.216

172.184.214.216 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 59%: ?

59%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.184.214.216

Whois 172.184.214.216

IP Abuse Reports for 172.184.214.216:

This IP address has been reported a total of 14 times from 12 distinct sources. 172.184.214.216 was first reported on April 21st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Andrew	2026-06-22 21:31:00 (5 days ago)	Blocked by UFW (TCP on port 5555). Source port: 25600 TTL: 100 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 5555). Source port: 25600 TTL: 100 Packet length: 40 TOS: 0x00 This report (for 172.184.214.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 BIV	2026-06-22 19:35:27 (5 days ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 5555. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 5555. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇫🇷 Duggy_Tuxy🧱	2026-06-22 18:00:52 (5 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇺🇸 sumnone	2026-06-22 17:21:45 (5 days ago)	Port probing on unauthorized port 5555	Port Scan Hacking Exploited Host
Anonymous	2026-06-22 16:46:17 (5 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-06-22 16:02:11 (5 days ago)	Blocked by UFW (TCP on 5555) Source port: 25600 TTL: 243 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5555) Source port: 25600 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 172.184.214.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-22 15:49:38 (5 days ago)	2026-06-22T18:49:38.229229+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-22T18:49:38.229229+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=172.184.214.216 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=4841 PROTO=TCP SPT=25600 DPT=5555 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Som1ght3n	2026-06-09 16:27:03 (2 weeks ago)	Attempted to access sensitive Git repository files on our server via an HTTP GET request to `/.git/H ... show more Attempted to access sensitive Git repository files on our server via an HTTP GET request to `/.git/HEAD`. show less	Hacking
Anonymous	2026-06-09 16:04:20 (2 weeks ago)	PORT & IP Scan.	Port Scan Brute-Force
Anonymous	2026-06-09 15:53:25 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-09 15:51:23 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.184.214.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.214.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:51:19.206633 2026] [security2:error] [pid 26603:tid 26603] [client 172.184.214.216:33094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.148"] [uri "/.git/HEAD"] [unique_id "aig2dx2iacjAxBnpI_t30QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-09 15:16:13 (2 weeks ago)	Blocked by UFW (TCP on 8080) Source port: 31839 TTL: 115 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 31839 TTL: 115 Packet length: 40 TOS: 0x00 This report (for 172.184.214.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 masterguru	2026-06-09 15:09:58 (2 weeks ago)	. Matched phrase "/.git/" at REQUEST_URI. (210492-128)	Web App Attack
🇺🇸 Rayulcifer	2026-04-21 18:12:18 (2 months ago)	172.184.214.216 - - [21/Apr/2026:13:12:17 -0500] "GET http://clients2.google.com/time/1/current?cup2 ... show more 172.184.214.216 - - [21/Apr/2026:13:12:17 -0500] "GET http://clients2.google.com/time/1/current?cup2key=9:6iR40nHoLN3i-i7Cp9kUIgBaPzL47gxFypzEol1XOeQ&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1" 200 855 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 172.184.214.216 - - [21/Apr/2026:13:12:17 -0500] "CONNECT www.google.com:443 HTTP/1.1" 502 488 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.251.103

🇫🇷 164.68.98.224

🇺🇸 44.189.132.76

🇬🇧 35.203.210.117

🇻🇳 14.224.132.87

🇪🇬 197.44.33.58

🇩🇪 194.187.176.144

🇺🇸 162.216.149.35

🇨🇦 149.56.26.193

🇻🇳 123.21.189.66

🇻🇳 118.71.213.36

🇺🇸 72.63.20.115

🇨🇦 67.231.24.5

🇸🇬 47.84.140.197

🇳🇱 45.198.224.46

🇺🇸 44.215.50.157

🇨🇳 36.138.134.121

🇺🇸 20.14.89.71

🇮🇳 202.164.149.37

🇦🇷 201.190.176.246