JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.214.45.201

172.214.45.201 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 52%: ?

52%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.214.45.201

Whois 172.214.45.201

IP Abuse Reports for 172.214.45.201:

This IP address has been reported a total of 31 times from 24 distinct sources. 172.214.45.201 was first reported on September 14th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-07-25 10:04:37 (21 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: captive.apple.com:80 show less	Open Proxy Port Scan
🇲🇽 octageeks.com	2026-07-24 04:15:18 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇨🇭 backslash	2026-07-23 12:48:00 (2 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-07-23 12:46:15 (2 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇩🇪 lespbaj	2026-07-23 12:46:11 (2 days ago)	{"time":"2026-07-23T12:46:09+00:00","ip":"172.214.45.201","method":"GET","uri":"/wp/wp-login.php","u ... show more {"time":"2026-07-23T12:46:09+00:00","ip":"172.214.45.201","method":"GET","uri":"/wp/wp-login.php","ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15","referer":""} ... show less	Bad Web Bot Web App Attack
🇫🇷 service Informatique	2026-06-17 04:00:37 (1 month ago)	GET /wp-config	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 11:46:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.214.45.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.214.45.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:46:41.488722 2026] [security2:error] [pid 5449:tid 5449] [client 172.214.45.201:21540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.13"] [uri "/.git/HEAD"] [unique_id "ajE3odMWSf2jFRJip3VshQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rzk	2026-06-16 08:18:02 (1 month ago)	CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ... show more CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: MICROSOFT-CORP-MSN-AS-BLOCK. Country: US. Timestamp: 2026-06-16T08:18:02+00:00. show less	Bad Web Bot Web App Attack
🇦🇷 Bruno	2026-06-16 08:11:01 (1 month ago)	Port Scanner: 172.214.45.201	Port Scan
🇺🇸 Axel	2026-06-16 07:46:38 (1 month ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 21834 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 21834 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-14 15:10:57 (1 month ago)	tcp port scan (20 or more attempts)	Port Scan
🇩🇪 IVski	2026-06-14 14:54:45 (1 month ago)	IVski WAF \| Webshell probe detected - requesting common script extensions	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 13:49:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.214.45.201 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.214.45.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:49:39.487461 2026] [security2:error] [pid 15108:tid 15108] [client 172.214.45.201:48932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.187"] [uri "/.git/HEAD"] [unique_id "ai6xc3JNuI2Pvyssyl7NTQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 joharikop	2026-06-14 10:20:03 (1 month ago)	Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-cred ... show more Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail. show less	Web App Attack
🇺🇸 Axel	2026-06-14 09:42:41 (1 month ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 48392 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 48392 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 221.120.77.34

🇧🇷 186.235.193.170

🇮🇳 183.82.108.109

🇳🇱 160.119.76.24

🇺🇸 147.185.132.178

🇹🇼 101.13.5.63

🇳🇱 45.148.10.152

🇨🇳 223.99.63.35

🇸🇪 185.133.206.116

🇮🇳 172.232.108.36

🇫🇮 147.185.133.132

🇩🇪 147.90.209.40

🇻🇳 116.110.6.178

🇻🇳 103.75.183.57

🇷🇺 77.244.64.60

🇨🇳 58.17.128.7

🇮🇪 54.76.134.191

🇩🇪 47.245.139.154

🇱🇺 46.151.182.202

🇮🇪 34.255.117.138