JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.237.246

172.214.237.246 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.237.246

Whois 172.214.237.246

IP Abuse Reports for 172.214.237.246:

This IP address has been reported a total of 24 times from 23 distinct sources. 172.214.237.246 was first reported on August 31st 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 SkyDancer	2026-09-01 01:20:48 (20 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇳🇱 homeshowdomain.nl	2026-08-31 21:59:10 (23 hours ago)	Auto-ban: >3000 req/min op 2026-08-31	Web App Attack SSH Hacking
🇷🇴 iulianh	2026-08-31 20:18:28 (1 day ago)	80,443	Brute-Force SSH
🇩🇪 maxpower	2026-08-31 17:43:45 (1 day ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 172.214.237.246 (US/United States/-): 1 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 172.214.237.246 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 172.214.237.246 - - [31/Aug/2026:19:43:44 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" host=maylynlopez.com show less	Port Scan
🇫🇷 arsonist	2026-08-31 17:33:38 (1 day ago)	[fail2ban] 2026-08-31T17:33:38.676119+00:00 arson caddy[1890453]: {"level":"info","ts":1788197618.67 ... show more [fail2ban] 2026-08-31T17:33:38.676119+00:00 arson caddy[1890453]: {"level":"info","ts":1788197618.6760883,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.214.237.246","remote_port":"50323","client_ip":"172.214.237.246","proto":"HTTP/1.1","method":"GET","host":"weblate.alwaysoffline.studio","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0"],"Connection":["close"],"Accept-Encoding":["identity"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"weblate.alwaysoffline.studio","ech":false}},"bytes_read":0,"user_id":"","duration":0.000041007,"size":7,"status":418,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"],"Server":["Caddy"]}} ... show less	Bad Web Bot
🇵🇱 Budyn	2026-08-31 17:08:26 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.teddypot.space \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-08-31 16:45:05 (1 day ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇳🇱 Savvii	2026-08-31 15:14:38 (1 day ago)	20 attempts against mh-misbehave-ban on yeti	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 14:03:06 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 MPL	2026-08-31 13:34:07 (1 day ago)	tcp/80 (90 or more attempts)	Port Scan
🇩🇪 big-cloud.nl	2026-08-31 13:34:05 (1 day ago)	Try to access /.env	Web App Attack
🇩🇪 LRob	2026-08-31 13:26:06 (1 day ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Wi ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0 \| 2026-08-31 13:26 UTC show less	Port Scan Web App Attack
🇵🇱 Budyn	2026-08-31 13:03:19 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.online \| URI: /.env \| UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-31 12:55:34 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-31 12:18:57 (1 day ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 200.110.50.42

🇳🇱 94.154.46.247

🇺🇸 54.221.203.24

🇨🇱 186.10.86.130

🇺🇸 138.197.19.143

🇺🇿 91.240.14.24

🇷🇴 2.57.122.209

🇺🇸 195.184.76.196

🇫🇷 185.142.55.27

🇭🇰 152.32.191.226

🇫🇷 92.154.95.236

🇩🇪 47.254.177.253

🇮🇩 43.129.53.19

🇻🇳 36.50.176.139

🇰🇷 222.118.59.16

🇳🇱 195.178.110.30

🇵🇭 152.32.90.8

🇺🇸 136.64.215.100

🇺🇸 54.210.155.69

🇮🇳 45.40.57.23