AbuseIPDB » 172.185.47.204
172.185.47.204
This IP was reported 7 times. Confidence of
Abuse
is 33% : ?
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 172.185.47.204 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
172.185.47.204 was first reported on
June 28th 2026 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
yitzhaq
2026-07-31 11:15:11
(13 hours ago)
172.185.47.204 - - [31/Jul/2026:13:13:58 +0200] "GET /.env.backup HTTP/1.1" 404 4462 "-" "Mozilla/5. ...
show more
172.185.47.204 - - [31/Jul/2026:13:13:58 +0200] "GET /.env.backup HTTP/1.1" 404 4462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
172.185.47.204 - - [31/Jul/2026:13:14:03 +0200] "GET /.env.prod HTTP/1.1" 404 4463 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
172.185.47.204 - - [31/Jul/2026:13:14:07 +0200] "GET /.env.old HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
172.185.47.204 - - [31/Jul/2026:13:14:11 +0200] "GET /.env.bak HTTP/1.1" 404 449 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.185.47.204 - - [31/Jul/2026:13:14:17 +0200] "GET /.env_production HTTP/1.1" 404 4462 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.185.47.204 - -
show less
Web App Attack
Hacking
2026-07-31 10:22:45
(14 hours ago)
Web Server Exposed Git Repository Information Disclosure.
Hacking
2026-07-31 07:53:38
(17 hours ago)
denied traffic to a honeypot network. destination port 2078.
Port Scan
Hacking
🇩🇪
www.fransveldman.world
2026-07-14 11:44:25
(2 weeks ago)
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇷🇸
Scan
2026-06-30 00:15:16
(1 month ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇩🇪
ghostwarriors
2026-06-28 21:20:20
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
HighWay
2026-06-28 21:02:14
(1 month ago)
172.185.47.204 - - [28/Jun/2026:21:02:12 +0000] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 40 ...
show more
172.185.47.204 - - [28/Jun/2026:21:02:12 +0000] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
172.185.47.204 - - [28/Jun/2026:21:02:13 +0000] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: