172.210.149.51

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
46 reports
40 reporters · latest 2 months ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Boydton, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

172.210.149.51 has been reported 46 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
46 from 40 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 mnsf
Too many Status 40X (11)
Brute-Force Web App Attack
🇹🇷 neron
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking Web App Attack
🇹🇷 neron
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking Web App Attack
🇩🇪 www.fransveldman.world
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack
🇫🇷 Duggy_Tuxy🧱
[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
🇫🇷 thecocasio
HellPot honeypot: VCS metadata exposure probe — observed request "GET /.git/HEAD" against a honeypot host where no such application or resource exists. Detected at 2026-06-24T12:17:15Z.
Web App Attack
🇫🇷 masterguru
Host header is a numeric IP address. Pattern match "^ (920350-131)
Hacking Bad Web Bot
🇺🇸 RAP
2026-06-21 14:57:36 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 knock
Knock-Knock honeypot brute-force: proto8 (51 total hits)
Brute-Force
🇺🇸 MPL
tcp port scan (16 or more attempts)
Port Scan
🇫🇷 Nop Nop
CrowdSec ban: crowdsecurity/http-probing
Port Scan
🇧🇷 somosbr
[2026-06-21T12:46:34Z] Unsolicited scan from 172.210.149.51 to port 80/tcp
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 80) Source port: 20740 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 172.210.149.51) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇧🇪 sid3windr
GET /.git/config (Tarpitted for 1d15h8m27s, wasted 8.06MB)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.163.125.195
🇺🇸 185.180.141.74
🇺🇸 147.185.132.132
🇲🇾 120.141.29.9
🇭🇰 101.32.204.72
🇺🇸 98.174.60.4
🇺🇸 35.231.34.216
🇶🇦 34.18.176.54
🇸🇪 13.60.30.54
🇾🇪 176.123.23.96
🇳🇱 45.148.10.157
🇭🇰 43.132.180.127
🇨🇳 117.27.135.90
🇨🇭 104.251.180.156
🇫🇷 104.165.90.14
🇹🇭 43.152.247.148
feedback