JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.208.153.6

172.208.153.6 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 65%: ?

65%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.208.153.6

Whois 172.208.153.6

IP Abuse Reports for 172.208.153.6:

This IP address has been reported a total of 23 times from 17 distinct sources. 172.208.153.6 was first reported on September 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-04 15:09:21 (3 days ago)	tcp port scan (16 or more attempts)	Port Scan
🇮🇹 Inartis	2026-06-04 13:43:07 (3 days ago)	172.208.153.6 - - [04/Jun/2026:15:43:06 +0200] "GET /.git/HEAD HTTP/1.1" 302 418 "-" "Mozilla/5.0 (W ... show more 172.208.153.6 - - [04/Jun/2026:15:43:06 +0200] "GET /.git/HEAD HTTP/1.1" 302 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-04 13:06:57 (3 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 geeek	2026-06-04 12:04:15 (3 days ago)	Port scanning: 8080 TCP Blocked	Port Scan
🇵🇱 sefinek.net	2026-06-04 11:53:14 (3 days ago)	Blocked by UFW on PL02 [443/tcp] \| SPT: 32899 \| TTL: 40 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on PL02 [443/tcp] \| SPT: 32899 \| TTL: 40 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇮🇹 LTM	2026-06-04 06:20:01 (3 days ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 pscriptos	2026-05-24 20:55:04 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 paulo.apoloni	2026-05-24 19:38:47 (1 week ago)	172.208.153.6 - - [24/May/2026:16:38:37 -0300] "GET /.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintos ... show more 172.208.153.6 - - [24/May/2026:16:38:37 -0300] "GET /.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" 172.208.153.6 - - [24/May/2026:16:38:37 -0300] "GET /.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" 172.208.153.6 - - [24/May/2026:16:38:38 -0300] "GET /.env HTTP/2.0" 444 0 "https://docs.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" 172.208.153.6 - - [24/May/2026:16:38:38 -0300] "GET /.env HTTP/2.0" 444 0 "https://docs.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" 172.208.153.6 - - [24/May/2026:16:38:47 -0300] "GET /config/.env HTTP/2.0" 444 0 "https://www.notion.so/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" ... show less	Bad Web Bot Web App Attack
🇫🇷 HerrWolf	2026-05-24 17:00:03 (2 weeks ago)	CrowdSec Detection: crowdsecurity/http-sensitive-files	Web App Attack
🇧🇪 cmbplf	2026-05-22 12:36:07 (2 weeks ago)	144 requests with url.path /@fs/	Brute-Force Bad Web Bot
Anonymous	2026-05-22 10:18:24 (2 weeks ago)	(PERMBLOCK) 172.208.153.6 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 172.208.153.6 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-22 09:11:07 (2 weeks ago)	(caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:09:11:01 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:09:11:02 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:09:11:02 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:09:11:02 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:09:11:02 +0000] "GET /.env HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 07:47:29 (2 weeks ago)	(caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:07:47:28 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:07:47:28 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:07:47:28 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:07:47:28 +0000] "GET /@fs/.env?import&raw HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:07:47:29 +0000] "GET /@fs/.env.local?import&raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 06:44:24 (2 weeks ago)	(caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:06:44:21 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:06:44:21 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:06:44:21 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:06:44:21 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:06:44:21 +0000] "GET /@fs/.env?import&raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 05:32:50 (2 weeks ago)	(caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 172.208.153.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:05:32:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:05:32:45 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:05:32:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:05:32:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.208.153.6 - - [22/May/2026:05:32:45 +0000] "GET /@fs/.env?import&raw HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 202.8.43.111

🇺🇸 172.203.134.70

🇺🇸 157.245.81.16

🇹🇷 185.233.245.252

🇺🇸 168.100.149.90

🇺🇸 107.172.157.247

🇺🇸 34.150.150.94

🇮🇳 34.14.161.134

🇫🇮 185.148.3.161

🇧🇷 177.130.110.182

🇨🇳 124.236.16.163

🇳🇱 77.83.39.241

🇺🇸 72.253.251.7

🇮🇩 69.5.23.222

🇮🇩 202.148.31.118

🇳🇱 195.178.110.199

🇵🇭 136.158.79.9

🇺🇸 64.227.18.56

🇨🇳 36.133.130.103

🇺🇸 152.32.233.36