172.202.115.25

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
40 reports
35 reporters Β· latest 36 minutes ago
ISP Microsoft Limited
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country πŸ‡ΊπŸ‡Έ United States of America
City Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.202.115.25

This IP address has been reported a total of 40 times from 35 distinct sources. 172.202.115.25 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 13 reports; Germany with 5 reports; Netherlands with 3 reports. The most common categories in these recent reports were: Port Scan 33 times; Hacking 9 times; Brute-Force 5 times; Web App Attack 2 times; SSH 1 time; Other 4 times.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ donarev419
Connection to port 264 with data transfer. Data preview: Q
Port Scan Hacking
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡΅πŸ‡± genokrad
Unauthorized connection attempt on TCP/88 (Kerberos)
Port Scan
πŸ‡ΊπŸ‡Έ sumnone
Port probing on unauthorized port 7574
Port Scan Hacking Exploited Host
πŸ‡ΊπŸ‡Έ Aurealize
Port Scan
πŸ‡·πŸ‡Έ Smel
SIP/5060 Probe, Scan, BF, Hack -
Fraud VoIP Port Scan Hacking Brute-Force
πŸ‡¦πŸ‡· Bruno
Port Scanner: 172.202.115.25
Port Scan
πŸ‡©πŸ‡ͺ Admins@FBN
FW-PortScan: Traffic Blocked srcport=45179 dstport=10024
Port Scan
πŸ‡­πŸ‡° CyberFox
161/udp (1 or more attempts)
Port Scan
πŸ‡¬πŸ‡§ andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
πŸ‡©πŸ‡ͺ iNetWorker
firewall-block, port(s): 28017/tcp
Port Scan
πŸ‡ΊπŸ‡Έ drewf.ink
[23:21] Connected to RDP honeypot
Brute-Force Hacking
πŸ‡¨πŸ‡¦ senkodev
Brute-Force SSH
πŸ‡ΊπŸ‡Έ RAP
2026-10-13 22:41:47 UTC Unauthorized activity to TCP port 9200.
Port Scan
πŸ‡©πŸ‡ͺ Jochen Pretli
connection to honeypot
Email Spam Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡³πŸ‡± 192.42.116.104
πŸ‡ΊπŸ‡¦ 31.31.122.141
πŸ‡¬πŸ‡§ 194.50.235.154
πŸ‡§πŸ‡· 186.251.71.202
πŸ‡©πŸ‡ͺ 172.70.248.56
πŸ‡ΊπŸ‡Έ 147.185.132.106
πŸ‡°πŸ‡· 119.201.147.249
πŸ‡«πŸ‡· 91.231.89.144
πŸ‡·πŸ‡Έ 79.101.97.158
πŸ‡ΊπŸ‡Έ 63.135.161.133
πŸ‡·πŸ‡Ί 46.191.197.143
πŸ‡§πŸ‡· 45.229.91.2
πŸ‡ΈπŸ‡¬ 34.177.100.68
πŸ‡³πŸ‡± 31.77.13.178
πŸ‡ΊπŸ‡Έ 216.25.89.131
πŸ‡¬πŸ‡§ 185.247.137.157