JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.197.216.248

172.197.216.248 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.197.216.248

Whois 172.197.216.248

IP Abuse Reports for 172.197.216.248:

This IP address has been reported a total of 43 times from 38 distinct sources. 172.197.216.248 was first reported on July 14th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mutebot.net	2026-07-21 17:53:40 (6 hours ago)	SRC=172.197.216.248, PROTO=TCP, SPT=52919, DPT=9060 SRC=172.197.216.248, PROTO=TCP, SPT=51808, DPT=9 ... show more SRC=172.197.216.248, PROTO=TCP, SPT=52919, DPT=9060 SRC=172.197.216.248, PROTO=TCP, SPT=51808, DPT=9151 SRC=172.197.216.248, PROTO=TCP, SPT=51808, DPT=9220 SRC=172.197.216.248, PROTO=TCP, SPT=51808, DPT=9090 SRC=172.197.216.248, PROTO=TCP, SPT=51808, DPT=9092 show less	Port Scan
🇩🇪 xserverx.ru	2026-07-21 16:53:45 (7 hours ago)	[UFW SCAN!!!!] SRC=172.197.216.248 LEN=40 TOS=0x00 PREC=0x00 TTL=46 DF PROTO=TCP SPT=44409 DPT=9229 ... show more [UFW SCAN!!!!] SRC=172.197.216.248 LEN=40 TOS=0x00 PREC=0x00 TTL=46 DF PROTO=TCP SPT=44409 DPT=9229 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇳 Parth Maniar	2026-07-21 04:19:15 (19 hours ago)	This IP address carried out 40 port scanning attempts on 20-07-2026. For more information or to repo ... show more This IP address carried out 40 port scanning attempts on 20-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2026-07-21 03:55:52 (20 hours ago)	This IP address carried out 10 SSH credential attack (attempts) on 20-07-2026. For more information ... show more This IP address carried out 10 SSH credential attack (attempts) on 20-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇫🇷 ✨	2026-07-19 23:29:10 (2 days ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 172.197.216.248 33682 show less	Port Scan Hacking Brute-Force
🇭🇺 szasa	2026-07-19 10:28:07 (2 days ago)	Jul 19 12:28:06 fw03 sshd[373648]: Invalid user test from 172.197.216.248 port 57944 Jul 19 12:28:06 ... show more Jul 19 12:28:06 fw03 sshd[373648]: Invalid user test from 172.197.216.248 port 57944 Jul 19 12:28:06 fw03 sshd[373648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 Jul 19 12:28:08 fw03 sshd[373648]: Failed password for invalid user test from 172.197.216.248 port 57944 ssh2 ... show less	Brute-Force SSH
🇩🇪 Rechenzentrum Winterthur	2026-07-19 05:17:42 (2 days ago)	2026-07-19T04:20:25.839364+00:00 de-ffm-lim02-mt01 sshd[94983]: pam_unix(sshd:auth): authentication ... show more 2026-07-19T04:20:25.839364+00:00 de-ffm-lim02-mt01 sshd[94983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 2026-07-19T04:20:27.727646+00:00 de-ffm-lim02-mt01 sshd[94983]: Failed password for invalid user deffmlim02mt01 from 172.197.216.248 port 41176 ssh2 2026-07-19T05:17:41.716695+00:00 de-ffm-lim02-mt01 sshd[97797]: Invalid user de-ffm-lim02-mt from 172.197.216.248 port 39270 ... show less	Brute-Force SSH
🇩🇪 nicosqc	2026-07-19 04:53:27 (2 days ago)	Invalid user guest from 172.197.216.248 port 43412	Brute-Force SSH
🇭🇺 szasa	2026-07-19 02:24:23 (2 days ago)	Jul 19 04:24:22 fw03 sshd[308464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 19 04:24:22 fw03 sshd[308464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 Jul 19 04:24:24 fw03 sshd[308464]: Failed password for invalid user administrator from 172.197.216.248 port 51184 ssh2 Jul 19 04:24:22 fw03 sshd[308464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 Jul 19 04:24:24 fw03 sshd[308464]: Failed password for invalid user administrator from 172.197.216.248 port 51184 ssh2 ... show less	Brute-Force SSH
🇧🇷 wagnerbocchi	2026-07-19 02:19:02 (2 days ago)	2026-07-18T23:18:58.569761-03:00 wazuh sshd[252672]: Invalid user administrator from 172.197.216.248 ... show more 2026-07-18T23:18:58.569761-03:00 wazuh sshd[252672]: Invalid user administrator from 172.197.216.248 port 40758 2026-07-18T23:18:58.576984-03:00 wazuh sshd[252672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 2026-07-18T23:19:00.421116-03:00 wazuh sshd[252672]: Failed password for invalid user administrator from 172.197.216.248 port 40758 ssh2 ... show less	Brute-Force SSH
🇵🇹 WebTejo	2026-07-19 01:59:43 (2 days ago)	Detected multiple authentication failures and invalid user attempts from IP address 172.197.216.248 ... show more Detected multiple authentication failures and invalid user attempts from IP address 172.197.216.248 on [PT] SP01 Node show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-19 01:50:18 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-07-19 00:27:53 (2 days ago)	2026-07-19T02:27:51.539807 localhost.localdomain sshd-session[29224]: pam_unix(sshd:auth): authentic ... show more 2026-07-19T02:27:51.539807 localhost.localdomain sshd-session[29224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.197.216.248 2026-07-19T02:27:53.120426 localhost.localdomain sshd-session[29224]: Failed password for invalid user ec2-user from 172.197.216.248 port 52964 ssh2 ... show less	Brute-Force SSH
🇫🇮 StopIt!	2026-07-19 00:20:10 (2 days ago)	Jul 19 01:04:46 master sshd[3559502]: Failed password for invalid user linuxuser from 172.197.216.24 ... show more Jul 19 01:04:46 master sshd[3559502]: Failed password for invalid user linuxuser from 172.197.216.248 port 45202 ssh2 show less	Brute-Force SSH
🇩🇪 Phenix Info	2026-07-19 00:06:02 (3 days ago)	SmallGuard.fr/Prestashop SSH Login failded	Brute-Force

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.115

🇱🇹 212.24.106.129

🇷🇺 195.122.253.45

🇬🇧 193.32.209.254

192.168.200.171

🇬🇧 188.240.59.53

🇬🇪 188.169.20.122

🇺🇸 188.114.96.11

🇧🇷 187.95.45.252

🇨🇳 180.76.234.93

🇨🇳 123.234.3.106

🇺🇸 107.173.195.144

🇳🇱 104.250.194.142

🇫🇷 85.217.140.4

🇪🇸 80.102.218.207

🇺🇸 66.132.172.230

🇩🇪 46.225.23.118

🇷🇺 46.44.0.185

🇬🇧 31.14.254.88

🇬🇧 2620:171:6c:f003:9999::242