JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.155.224

172.214.155.224 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.155.224

Whois 172.214.155.224

IP Abuse Reports for 172.214.155.224:

This IP address has been reported a total of 28 times from 21 distinct sources. 172.214.155.224 was first reported on April 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-06-03 01:01:12 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇷🇸 Scan	2026-06-03 00:14:32 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇦 Blinker73	2026-06-02 22:23:42 (1 day ago)	2026-06-02T18:23 kernel: OUT= SRC=172.214.155.224 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=19509 DF ... show more 2026-06-02T18:23 kernel: OUT= SRC=172.214.155.224 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=19509 DF PROTO=TCP SPT=42992 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-02T18:23 kernel: OUT= SRC=172.214.155.224 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=23002 DF PROTO=TCP SPT=42982 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-02T18:23 kernel: OUT= SRC=172.214.155.224 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=24255 DF PROTO=TCP SPT=42890 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
Anonymous	2026-06-02 22:13:58 (1 day ago)	git/env leak probe	Web App Attack
🇺🇸 alecj.com	2026-06-02 22:08:33 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 Axel	2026-06-02 21:17:29 (2 days ago)	[2026-06-02 21:17:28 UTC] Honeypot HTTP-Alt connection attempt \| AXFRA HONEYPOT	Web App Attack
🇮🇹 Fusty	2026-06-02 20:29:23 (2 days ago)	Unauthorized attempt on (TCP on port 2086). Source port: 42104 TTL: 41 Packet length: 60 Timestamp: ... show more Unauthorized attempt on (TCP on port 2086). Source port: 42104 TTL: 41 Packet length: 60 Timestamp: 2026-06-02 22:29:23 show less	Port Scan
🇧🇷 vfAcceloReporter	2026-06-02 20:20:02 (2 days ago)	172.214.155.224 - - [02/Jun/2026:17:20:01 -0300] "GET /.env HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Maci ... show more 172.214.155.224 - - [02/Jun/2026:17:20:01 -0300] "GET /.env HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" ... show less	Brute-Force Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-06-02 20:14:05 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.214.155.224 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.214.155.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 16:13:56.840908 2026] [security2:error] [pid 6541:tid 6541] [client 172.214.155.224:42057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.67"] [uri "/.git/HEAD"] [unique_id "ah85hFaT0ek-8NOrWdG83gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-06-02 20:11:13 (2 days ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-02 19:54:21 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 172.214.155.224 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.214.155.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:54:15.602923 2026] [security2:error] [pid 15489:tid 15489] [client 172.214.155.224:43663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.233"] [uri "/.env"] [unique_id "ah80576HB4D2mhJ4QfEB8QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Justin F. \| AS204464	2026-06-02 19:10:33 (2 days ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [4], 2082 [1], 2086 [1] TCP ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [4], 2082 [1], 2086 [1] TCP Reported by: Justin F. show less	Port Scan
🇺🇸 RAP	2026-06-02 18:42:52 (2 days ago)	2026-06-02 18:42:52 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-02 18:37:29 (2 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.126.107.84

🇦🇷 190.244.39.224

🇯🇵 118.194.229.94

🇬🇧 89.37.172.142

🇨🇳 58.47.48.178

🇺🇸 52.3.155.146

🇬🇧 35.203.211.254

🇳🇱 5.83.143.40

🇮🇷 2.187.251.214

🇨🇳 1.82.238.83

🇰🇷 221.155.237.108

🇧🇷 186.215.191.192

🇨🇳 180.184.132.211

🇳🇱 158.94.209.146

🇮🇳 103.49.102.32

🇳🇱 78.142.18.172

🇺🇸 68.2.140.93

🇨🇳 60.172.168.136

🇨🇿 46.135.138.242

🇧🇷 45.205.1.244