JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.214.47.37

Neutral Activity

Abuse confidence score ?

0% Low Risk

20 reports

14 reporters · latest 2 months ago

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.214.47.37 has been reported 20 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.214.47.37

This IP address has been reported a total of 20 times from 14 distinct sources. 172.214.47.37 was first reported on September 14th 2025, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.fransveldman.world	2026-07-16 15:56:34 (2 months ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
Anonymous	2026-06-15 13:35:52 (3 months ago)	Spring.Boot.Actuator.Unauthorized.Access	Open Proxy
🇺🇸 TPI-Abuse	2026-06-09 20:48:23 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:48:17.918158 2026] [security2:error] [pid 20067:tid 20067] [client 172.214.47.37:21655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.145"] [uri "/.git/HEAD"] [unique_id "aih8EVr3d3Tmyd7l24tDEgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 juutis	2026-06-09 20:37:33 (3 months ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇫🇮 Some Body	2026-06-09 18:37:03 (3 months ago)	Aggressive web scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 18:27:40 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:27:33.493393 2026] [security2:error] [pid 7836:tid 7836] [client 172.214.47.37:21477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.10"] [uri "/.git/HEAD"] [unique_id "aihbFcNGo1HfG73grRjPLgAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 18:06:19 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:06:15.134138 2026] [security2:error] [pid 15889:tid 15889] [client 172.214.47.37:22431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.136"] [uri "/.git/HEAD"] [unique_id "aihWFxxBPtYe2bN-eLgpigAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jhuisi	2026-06-09 17:28:42 (3 months ago)	Mod Security Hit	Web App Attack
🇬🇧 djboddington	2026-06-09 16:35:01 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-09 16:32:26 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:32:19.729224 2026] [security2:error] [pid 26128:tid 26137] [client 172.214.47.37:21172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.178"] [uri "/.git/HEAD"] [unique_id "aihAE1IK1jRyHLWrY6m2dgAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 16:31:37 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇮 packetdropper	2026-05-25 14:32:38 (4 months ago)	Port scanning detected. Touched 1 different honeypot TCP ports within 300 seconds.	Port Scan
🇹🇷 Threat.live	2026-05-25 14:15:05 (4 months ago)	Threat.live: Web Scan	Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 12:43:09 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 08:43:03.889592 2026] [security2:error] [pid 3932464:tid 3932464] [client 172.214.47.37:26817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microscopedia.com"] [uri "/@fs/app/.git/config"] [unique_id "adjwV3qmkSXEBFlqr9G0gAAAAAE"], referer: https://www.reddit.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 12:24:41 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 172.214.47.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 08:24:37.913966 2026] [security2:error] [pid 2826640:tid 2826662] [client 172.214.47.37:26817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tmsx2.com"] [uri "/@fs/.git/config"] [unique_id "adjsBXJnLjWQdig-nv54HgAAABQ"], referer: https://www.reddit.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.26

🇬🇧 185.247.137.102

🇵🇰 182.189.42.141

🇮🇶 151.236.162.162

🇨🇳 123.149.74.95

🇺🇸 45.8.19.218

🇦🇺 34.40.241.117

🇺🇸 20.118.228.16

🇰🇷 14.63.217.28

🇮🇩 210.211.18.54

🇺🇸 205.210.31.50

🇹🇭 118.194.251.101

🇺🇸 104.234.53.3

🇭🇰 103.117.145.130

🇩🇪 69.5.169.177

🇦🇺 34.40.137.67

🇮🇩 202.77.109.243

🇹🇼 172.69.221.208

🇺🇸 147.185.132.172

🇨🇳 116.179.37.237