JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.104.53

172.214.104.53 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 69%: ?

69%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.104.53

Whois 172.214.104.53

IP Abuse Reports for 172.214.104.53:

This IP address has been reported a total of 31 times from 27 distinct sources. 172.214.104.53 was first reported on April 6th 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-07-05 07:51:10 (42 minutes ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.binance.com:443 show less	Open Proxy Port Scan
🇫🇮 [email protected]	2026-06-15 05:43:31 (2 weeks ago)	Attack attempt against Interwebbi servers; Port Scan detected from 172.214.104.53 (US/United State ... show more Attack attempt against Interwebbi servers; Port Scan detected from 172.214.104.53 (US/United States/-). 5 hits in the last 161 seconds; IP: 172.214.104.53; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇺🇸 xmission.com	2026-06-15 05:39:54 (2 weeks ago)	Blocked by UFW (TCP on 2083) Source port: 30479 TTL: 48 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2083) Source port: 30479 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 172.214.104.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 NordhTech	2026-06-15 05:15:23 (2 weeks ago)	More than 3 malicious connection attempts, trying port(s) 2078/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 MPL	2026-06-15 04:26:10 (2 weeks ago)	tcp port scan (8 or more attempts)	Port Scan
🇺🇸 sandap1	2026-06-15 04:10:01 (2 weeks ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,src_ip=172 ... show more Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,src_ip=172.214.104.53 show less	Port Scan Hacking
🇯🇵 S.O.B.A. Dev.	2026-06-15 03:51:28 (2 weeks ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 TPI-Abuse	2026-06-15 03:21:01 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.214.104.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.214.104.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:20:58.267163 2026] [security2:error] [pid 10906:tid 10906] [client 172.214.104.53:30276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.236"] [uri "/.git/HEAD"] [unique_id "ai9vmkI6-Q0pZnZqhyl94gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-06-15 02:30:37 (2 weeks ago)	1781490626.831883 172.214.104.53 103.166.156.58 64240_2-4-8-1-3_1440_10 2026-06-15 09:30:26 WIB ...	Email Spam Hacking
🇹🇭 Sawasdee	2026-06-15 02:00:17 (2 weeks ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇷🇴 Gigi	2026-06-15 01:40:44 (2 weeks ago)	CrowdSec automatic ban \| Scenario: local/persistent-scanner \| Duration: 4h \| Origin: crowdsec \| Dete ... show more CrowdSec automatic ban \| Scenario: local/persistent-scanner \| Duration: 4h \| Origin: crowdsec \| Detected by OPNsense firewall (Beast home network security) show less	Port Scan Hacking
🇺🇸 xxkodedxx	2026-06-15 01:36:57 (2 weeks ago)	[Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get, 12× edge-block ... show more [Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get, 12× edge-block in 10m window. Origin: US / AS8075 Microsoft Corporation Active: 01:36:30→01:36:56 UTC Volume: 12 HTTP req, 3 honeypot probe(s) Bait taken: /actuator/env, /wp-config.php, /.env.production Status mix: 444×12 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-15 01:32:08 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-15 01:23:09 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.214.104.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.214.104.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:23:04.483460 2026] [security2:error] [pid 19055:tid 19055] [client 172.214.104.53:61064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.175"] [uri "/.git/HEAD"] [unique_id "ai9T-CPMKVTHRfiHnqGFYwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-15 01:15:21 (2 weeks ago)	Scanning for web/db/file exploits on tpc-053.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 146.190.112.200

🇫🇷 2001:861:7a90:8d40:59c3:c070:c1c8:eefc

🇬🇭 197.251.249.75

🇲🇦 196.89.176.113

🇮🇩 163.7.1.218

🇺🇸 143.198.237.44

🇺🇸 143.198.236.205

🇺🇸 72.240.125.133

🇮🇳 59.185.230.105

🇳🇱 52.232.19.79

🇩🇪 43.165.3.187

🇦🇷 190.181.91.184

🇨🇳 182.119.225.190

🇺🇸 158.94.187.222

🇺🇸 143.198.235.55

🇺🇸 143.198.189.118

🇺🇸 143.198.161.123

🇫🇷 135.125.45.146

🇯🇵 118.194.229.94

🇸🇪 104.23.223.9