172.208.65.170
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- ๐บ๐ธ United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
61 from
41 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ง๐ฌ MazenHost |
1794722859 - 11/15/2026 08:07:39 Host: 172.208.65.170/172.208.65.170 Port: 6667 TCP Blocked
...
|
Port Scan | |
| ๐บ๐ธ Cherryh4ck |
Blocked by UFW [6667/tcp] | SPT: 33342 | TTL: 52 | LEN: 52 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ซ๐ฎ 6kilowatti |
|
Port Scan | |
| ๐ซ๐ท EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/5660
|
Port Scan | |
| Anonymous |
ZMap Security Scanner.
|
Port Scan | |
| ๐บ๐ธ overture.bar |
on bishop [3011/tcp] SPT: 56491 TTL: 46 LEN: 52 TOS: 0x00
|
Port Scan | |
| ๐ฎ๐น CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| ๐น๐ท Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| ๐บ๐ธ MPL |
tcp/5800 (2 or more attempts)
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/5094 (2 or more attempts)
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp ports: 2000,8088 (3 or more attempts)
|
Port Scan | |
| ๐ฆ๐น joe-abuse |
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (1433/tcp); first 2026-11-14 15:12:56 UTC, last 2026-11-14 15:12:56 UTC. Reported by ipdb-security/fitzgerald.eu
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/115
|
Port Scan | |
| ๐บ๐ธ sefinek.net |
Blocked by UFW on NY01 [5900/tcp] | SPT: 36380 | TTL: 47 | LEN: 52 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown