JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.44.5

172.214.44.5 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.44.5

Whois 172.214.44.5

IP Abuse Reports for 172.214.44.5:

This IP address has been reported a total of 44 times from 23 distinct sources. 172.214.44.5 was first reported on October 6th 2025, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-08-02 00:46:20 (24 minutes ago)	Rule : Security Rule: Security Event: Security 0 - %592 172.214.44.5 44037 *hidden-privacy* 8 ... show more Rule : Security Rule: Security Event: Security 0 - %592 172.214.44.5 44037 *hidden-privacy* 8080 6 Stealth 72115 %597 13 show less	Port Scan Hacking Brute-Force
🇩🇪 Tsumugi Kotobuki	2026-08-02 00:27:54 (42 minutes ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 46 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 46 \| Len: 60B \| Win: 64240(1) \| F2B/ufw-honeypot@2026-08-02T00:27:54Z show less	Port Scan Hacking
🇷🇸 Scan	2026-08-02 00:12:37 (58 minutes ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-08-01 23:28:19 (1 hour ago)	denied traffic to a honeypot network. destination port 2083.	Port Scan Hacking
Anonymous	2026-08-01 22:37:32 (2 hours ago)	denied traffic to a non-approved destination port. destination port 2087.	Port Scan
🇧🇷 chronos	2026-07-28 04:04:30 (4 days ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United S ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United States, Washington show less	Exploited Host Hacking Web App Attack
🇩🇪 www.fransveldman.world	2026-07-24 10:16:43 (1 week ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇩🇪 Prodscape	2026-06-25 11:09:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.214.44.5 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:210492) triggered by 172.214.44.5 (US/United States/-): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Port Scan
🇸🇪 www.remote24.se	2026-06-25 10:36:05 (1 month ago)	3389BruteforceStormFW21	Brute-Force
🇺🇸 MPL	2026-06-25 10:16:08 (1 month ago)	tcp port scan (10 or more attempts)	Port Scan
Anonymous	2026-06-25 08:18:57 (1 month ago)	[rustdesk.kdns.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.gi ... show more [rustdesk.kdns.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.git/logs/HEAD \| /.git/refs/heads/master \| /.git/refs/heads/main show less	Hacking Web App Attack
Anonymous	2026-06-25 08:01:41 (1 month ago)	[Thu Jun 25 08:00:57.925622 2026] [proxy_fcgi:error] [pid 1661938:tid 139076837549760] [client 172.2 ... show more [Thu Jun 25 08:00:57.925622 2026] [proxy_fcgi:error] [pid 1661938:tid 139076837549760] [client 172.214.44.5:22579] AH01071: Got error 'Primary script unknown' [Thu Jun 25 08:01:30.294531 2026] [proxy_fcgi:error] [pid 1661848:tid 139076862727872] [client 172.214.44.5:22575] AH01071: Got error 'Primary script unknown' [Thu Jun 25 08:01:41.243481 2026] [proxy_fcgi:error] [pid 1661848:tid 139076384573120] [client 172.214.44.5:22578] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 07:30:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.214.44.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 172.214.44.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:30:38.986066 2026] [security2:error] [pid 29274:tid 29274] [client 172.214.44.5:22661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.95"] [uri "/.git/HEAD"] [unique_id "ajzZHgoltGEttuFmWD7EDQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-25 06:22:53 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇯🇵 demonsword	2026-05-07 17:57:07 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: speed.hetzner.de:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.238.171.10

🇮🇩 163.7.13.17

🇺🇸 147.185.132.128

🇺🇸 146.88.240.181

🇺🇦 109.254.160.241

🇩🇪 104.207.52.197

🇷🇴 2.57.122.238

🇺🇦 194.44.72.179

🇺🇸 183.81.168.186

🇺🇸 172.202.117.177

🇺🇸 157.230.11.15

🇩🇪 151.243.11.233

🇺🇸 146.88.240.134

🇩🇪 104.207.51.239

🇳🇱 91.92.40.18

🇷🇺 81.211.72.167

🇬🇧 65.111.22.211

🇩🇪 47.254.154.160

🇹🇭 47.81.24.71

🇳🇱 45.153.34.71