JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.156.83

172.214.156.83 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 12%: ?

12%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.156.83

Whois 172.214.156.83

IP Abuse Reports for 172.214.156.83:

This IP address has been reported a total of 39 times from 30 distinct sources. 172.214.156.83 was first reported on May 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 helouism	2026-09-23 08:50:36 (1 day ago)	Fail2Ban: Blocked by UFW for port scanning.	Port Scan DDoS Attack
🇮🇹 LTM	2026-09-06 06:20:01 (2 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇪🇸 yvoictra	2026-07-01 09:20:24 (2 months ago)	172.214.156.83 - - [01/Jul/2026:11:20:05 +0200] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 ( ... show more 172.214.156.83 - - [01/Jul/2026:11:20:05 +0200] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.214.156.83 - - [01/Jul/2026:11:20:07 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.214.156.83 - - [01/Jul/2026:11:20:16 +0200] "GET /.git/index HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 172.214.156.83 - - [01/Jul/2026:11:20:19 +0200] "GET /.env.local HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.214.156.83 - - [01/Jul/2026:11:20:23 +0200] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Brute-Force Web App Attack
🇺🇸 cwytech	2026-07-01 06:32:13 (2 months ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇺🇸 xmission.com	2026-07-01 06:05:10 (2 months ago)	Blocked by UFW (TCP on 443) Source port: 2392 TTL: 48 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 2392 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 172.214.156.83) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Holger	2026-06-21 19:18:12 (3 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇧🇷 SOC-BR	2026-06-15 07:25:15 (3 months ago)	Attack detected by Fortinet - applications3: Spring.Boot.Actuator.Unauthorized.Access - 2026-06-14 2 ... show more Attack detected by Fortinet - applications3: Spring.Boot.Actuator.Unauthorized.Access - 2026-06-14 22:04:11 - Source Port 21847 show less	Port Scan Hacking
Anonymous	2026-06-15 06:28:26 (3 months ago)	Portscan: TCP/2096, TCP/2082, TCP/2078, TCP/2086, TCP/80, TCP/2083, TCP/2095, TCP/443, TCP/2087, TCP ... show more Portscan: TCP/2096, TCP/2082, TCP/2078, TCP/2086, TCP/80, TCP/2083, TCP/2095, TCP/443, TCP/2087, TCP/2077 show less	Port Scan
Anonymous	2026-06-15 05:17:54 (3 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 Axel	2026-06-15 04:08:03 (3 months ago)	Blocked by UFW on MVI [80/tcp] \| SPT: 22145 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [80/tcp] \| SPT: 22145 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 ufn.edu.br	2026-06-15 03:39:12 (3 months ago)	[Mon Jun 15 00:28:44.672412 2026] [access_compat:error] [pid 5540] [client 172.214.156.83:20806] AH0 ... show more [Mon Jun 15 00:28:44.672412 2026] [access_compat:error] [pid 5540] [client 172.214.156.83:20806] AH01797: client denied by server configuration: /var/www/html/wp-config.php [Mon Jun 15 00:28:50.211458 2026] [access_compat:error] [pid 24570] [client 172.214.156.83:20853] AH01797: client denied by server configuration: /var/www/html/phpinfo.php [Mon Jun 15 00:28:51.292381 2026] [authz_core:error] [pid 13562] [client 172.214.156.83:20827] AH01630: client denied by server configuration: /var/www/html/server-status ... show less	Exploited Host Web App Attack
🇫🇷 ✨	2026-06-15 02:08:17 (3 months ago)	Domain : parex.co.uk Rule : env 2026-06-15 02:07:00 W3SVC794 PLESK72 79.171.39.172 GET /.env.product ... show more Domain : parex.co.uk Rule : env 2026-06-15 02:07:00 W3SVC794 PLESK72 79.171.39.172 GET /.env.production - 80 - 172.214.156.83 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0 - - 79.171.39.172 503 0 0 257 235 140 - - show less	Hacking SQL Injection
🇺🇸 Choice Tech LLC	2026-06-15 01:50:02 (3 months ago)	Blocked by OPNsense firewall; 10 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,443, ... show more Blocked by OPNsense firewall; 10 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,443,80 show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-15 01:19:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.156.83 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.214.156.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:19:13.098596 2026] [security2:error] [pid 29652:tid 29652] [client 172.214.156.83:22316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.168"] [uri "/.git/HEAD"] [unique_id "ai9TEbnLPss-BttpZBF6pgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-15 00:59:57 (3 months ago)	tcp port scan (10 or more attempts)	Port Scan

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 103.203.59.16

🇮🇳 103.70.40.36

🇫🇷 91.196.152.71

🇧🇷 16.5.0.241

🇧🇷 205.210.31.183

🇬🇧 193.163.125.224

🇳🇱 178.62.216.118

🇳🇬 152.32.141.172

🇩🇪 147.45.39.4

🇨🇳 120.82.83.240

🇹🇼 111.70.32.210

🇨🇳 106.117.114.19

🇨🇳 106.117.110.187

🇨🇭 104.244.79.113

🇧🇬 79.124.62.134

🇨🇳 36.106.167.61

🇺🇸 35.229.65.180

🇺🇸 20.46.228.204

🇲🇺 197.227.8.186

🇨🇳 182.119.224.45