JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.200.183.242

172.200.183.242 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 73%: ?

73%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.200.183.242

Whois 172.200.183.242

IP Abuse Reports for 172.200.183.242:

This IP address has been reported a total of 20 times from 19 distinct sources. 172.200.183.242 was first reported on July 24th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-06-11 08:46:00 (6 hours ago)	FW-PortScan: Traffic Blocked srcport=2054 dstport=2087	Port Scan
🇧🇷 maviei	2026-06-11 08:26:46 (7 hours ago)	2026-06-11T05:26:45.544299-03:00 srv1251771 kernel: [933235.881027] [UFW BLOCK] IN=eth0 OUT= MAC=40: ... show more 2026-06-11T05:26:45.544299-03:00 srv1251771 kernel: [933235.881027] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.200.183.242 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=29528 DF PROTO=TCP SPT=2082 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T05:26:45.546385-03:00 srv1251771 kernel: [933235.883101] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.200.183.242 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=43408 DF PROTO=TCP SPT=2077 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T05:26:45.547217-03:00 srv1251771 kernel: [933235.883778] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.200.183.242 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=16866 DF PROTO=TCP SPT=2073 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-11 05:09:29 (10 hours ago)	[Thu Jun 11 01:09:19.711395 2026] [php7:error] [pid 741470] [client 172.200.183.242:1102] script '/v ... show more [Thu Jun 11 01:09:19.711395 2026] [php7:error] [pid 741470] [client 172.200.183.242:1102] script '/var/www/html/wp-config.php' not found or unable to stat [Thu Jun 11 01:09:29.424622 2026] [php7:error] [pid 741466] [client 172.200.183.242:1593] script '/var/www/html/phpinfo.php' not found or unable to stat ... show less	Brute-Force Web App Attack SSH
🇺🇸 xmission.com	2026-06-11 05:03:07 (10 hours ago)	Blocked by UFW (TCP on 2087) Source port: 1548 TTL: 49 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2087) Source port: 1548 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 172.200.183.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 pltcldvlpr	2026-06-11 04:49:43 (10 hours ago)	CMS/framework probe: 172.200.183.242 - - [11/Jun/2026:06:49:42 +0200] "GET /.git/HEAD HTTP/1.1" 301 ... show more CMS/framework probe: 172.200.183.242 - - [11/Jun/2026:06:49:42 +0200] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" asn=8075 org="Microsoft Corporation" country=US ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 04:49:35 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.200.183.242 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.200.183.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 00:49:30.758662 2026] [security2:error] [pid 30613:tid 30613] [client 172.200.183.242:2038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.186"] [uri "/.git/HEAD"] [unique_id "aio-WvmlTaaPYjUykPJjiAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-11 04:12:16 (11 hours ago)	Multiple WAF Violations	Web App Attack
🇦🇷 Bruno	2026-06-11 03:38:40 (12 hours ago)	Port Scanner: 172.200.183.242	Port Scan
🇫🇮 TrafficAnalyser	2026-06-03 08:04:58 (1 week ago)	Port scanning	Port Scan
🇬🇧 PeravixGroup	2026-06-03 05:46:05 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 marcel-knorr.de	2026-06-03 05:35:53 (1 week ago)	[MK-Root1] Blocked by UFW	Brute-Force Port Scan
Anonymous	2026-06-03 04:53:10 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 ghostwarriors	2026-04-26 14:50:07 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 2048	2026-01-07 18:41:10 (5 months ago)	2026-01-07T19:41:07.477678+01:00 machodeer.aeza.network kernel: [528218.110544] [UFW BLOCK] IN=ens3 ... show more 2026-01-07T19:41:07.477678+01:00 machodeer.aeza.network kernel: [528218.110544] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.200.183.242 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=22314 DF PROTO=TCP SPT=52306 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-07T19:41:08.504905+01:00 machodeer.aeza.network kernel: [528219.137777] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.200.183.242 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=22315 DF PROTO=TCP SPT=52306 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-07T19:41:09.528930+01:00 machodeer.aeza.network kernel: [528220.161727] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.200.183.242 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=44 ID=22316 DF PROTO=TCP SPT=52306 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇻🇳 VTCuong	2025-11-10 04:30:04 (7 months ago)	SSH Honeypot (vpssieutoc.1761226781): {"time":"2025-11-10T11:26:37+07:00","source":"172.200.183.242: ... show more SSH Honeypot (vpssieutoc.1761226781): {"time":"2025-11-10T11:26:37+07:00","source":"172.200.183.242:46105","event_type":"no_auth","event":{"user":"root","accepted":false}} show less	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.190.8.165

🇳🇱 204.76.203.51

🇦🇺 203.206.8.253

🇺🇸 174.35.25.181

🇬🇾 168.232.144.128

🇺🇸 162.216.150.238

🇮🇷 151.233.228.152

🇮🇳 117.203.104.74

🇮🇳 35.200.201.144

🇩🇪 185.220.101.99

🇳🇱 176.65.139.219

🇩🇪 167.94.145.23

🇸🇬 159.65.2.17

🇺🇸 143.244.165.59

🇨🇳 124.160.173.22

🇹🇭 110.49.6.37

🇧🇩 103.163.117.83

🇺🇸 91.132.125.228

🇲🇦 81.192.46.49

🇧🇬 78.128.112.6