AbuseIPDB » 172.202.114.239

172.202.114.239 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 100%: ?

100%
ISP Microsoft Limited
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 172.202.114.239:

This IP address has been reported a total of 94 times from 65 distinct sources. 172.202.114.239 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ง๐Ÿ‡ท SOC-BR
Attack detected by Fortinet - applications3: ZGrab.Scanner - 2026-10-16 21:52:19 - Source Port 54078
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช DasDuo
FTP Brute-Force Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=42503 dstport=995
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช IVski.com
IVski WAF | Sensitive file probe detected - looking for .env
Hacking Brute-Force Web App Attack
๐Ÿ‡ฆ๐Ÿ‡บ sel
UFW blocked 1 connection attempts. Ports targeted:
Port Scan Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 541/tcp
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
trying to access non-authorized port
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ VMHeaven.io
Blocked by UFW [9030/tcp] Source port: 48903 TTL: 37 Packet length: 52
Port Scan
Anonymous
Drop from IP address 172.202.114.239 to tcp-port 5985
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Jochen Pretli
connection to honeypot
Email Spam Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 1930 [1] TCP
Port Scan
Anonymous
172.202.114.239 detected and blocked by apache-modsecurity after 1 try
Brute-Force
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ณ ใ•ใ„ใจใ†ใ‚ใ™ใ‹
Oct 16 08:43:24 pbs sshd[3247841]: Connection closed by 172.202.114.239 port 52848 [preauth] ...
Brute-Force SSH

Showing 1 to 15 of 94 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ช 207.175.220.59
๐Ÿ‡ฐ๐Ÿ‡ท 183.104.220.152
๐Ÿ‡บ๐Ÿ‡ธ 172.252.184.156
๐Ÿ‡บ๐Ÿ‡ธ 172.121.76.246
๐Ÿ‡บ๐Ÿ‡ธ 172.121.75.149
๐Ÿ‡ง๐Ÿ‡ช 104.155.120.241
๐Ÿ‡ป๐Ÿ‡ณ 103.237.144.204
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.155.47.50
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.24
๐Ÿ‡ซ๐Ÿ‡ฎ 80.223.201.173
๐Ÿ‡ฎ๐Ÿ‡ณ 49.204.74.149
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.195
๐Ÿ‡ฌ๐Ÿ‡ง 185.91.69.248
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.207
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.186
๐Ÿ‡ง๐Ÿ‡ฉ 160.191.115.165
๐Ÿ‡ต๐Ÿ‡ฐ 103.166.103.173
๐Ÿ‡ฎ๐Ÿ‡น 81.56.174.237
๐Ÿ‡บ๐Ÿ‡ธ 64.62.156.137
๐Ÿ‡ฑ๐Ÿ‡น 62.60.130.253