JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.215.208.198

172.215.208.198 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 34%: ?

34%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.215.208.198

Whois 172.215.208.198

IP Abuse Reports for 172.215.208.198:

This IP address has been reported a total of 15 times from 14 distinct sources. 172.215.208.198 was first reported on October 8th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Martin Lundstrom	2026-06-03 05:00:46 (1 month ago)	https://www.eagleeye-intelligence.com — Web backup/database file probe. Automatically detected and b ... show more https://www.eagleeye-intelligence.com — Web backup/database file probe. Automatically detected and blocked. show less	Web App Attack
🇬🇧 gbzret4d	2026-06-03 03:57:56 (1 month ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 2087 [4], 2086 [1], 2083 [1], 2082 ... show more Honeypot [uk-production01]: Empty payload (likely service probe); 2087 [4], 2086 [1], 2083 [1], 2082 [1] TCP show less	Port Scan
🇬🇧 PeravixGroup	2026-06-03 03:11:53 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇷🇸 Scan	2026-06-03 02:13:27 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-06-03 01:25:47 (1 month ago)	tcp port scan (8 or more attempts)	Port Scan
🇯🇵 nhawsjones	2026-06-03 00:48:03 (1 month ago)	[Wed Jun 03 09:48:02.889316 2026] [authz_core:error] [pid 1504:tid 129054925625024] [client 172.215. ... show more [Wed Jun 03 09:48:02.889316 2026] [authz_core:error] [pid 1504:tid 129054925625024] [client 172.215.208.198:6182] AH01630: client denied by server configuration: /var/www/html/server-status ... show less	Brute-Force
🇺🇸 RAP	2026-06-03 00:47:49 (1 month ago)	2026-06-03 00:47:49 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 anon333	2026-06-03 00:36:10 (1 month ago)	Invalid HTTP port 80 probes to server T2036	Hacking Exploited Host
Anonymous	2026-06-03 00:32:08 (1 month ago)	Honeypot hit: Empty payload (likely service probe); 2087 [4], 2082 [1], 2083 [1], 2086 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 2087 [4], 2082 [1], 2083 [1], 2086 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-03 00:32:03 (1 month ago)	Bot / scanning and/or hacking attempts: GET /actuator/env HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /wp ... show more Bot / scanning and/or hacking attempts: GET /actuator/env HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /wp-config.php HTTP/1.1, GET /server-status HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.save HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.production HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env HTTP/1.1, GET /.env.local HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 PeravixGroup	2026-06-03 00:05:57 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-02 23:46:40 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 2048	2026-01-26 18:21:40 (5 months ago)	2026-01-26T19:21:36.564724+01:00 machodeer kernel: [1483928.514593] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-01-26T19:21:36.564724+01:00 machodeer kernel: [1483928.514593] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.215.208.198 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=54797 DF PROTO=TCP SPT=23685 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-26T19:21:37.588246+01:00 machodeer kernel: [1483929.543241] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.215.208.198 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=54798 DF PROTO=TCP SPT=23685 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-26T19:21:38.612200+01:00 machodeer kernel: [1483930.567218] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.215.208.198 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=54799 DF PROTO=TCP SPT=23685 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 Rayulcifer	2025-10-08 08:29:44 (8 months ago)	172.215.208.198 - - [08/Oct/2025:03:29:44 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 ... show more 172.215.208.198 - - [08/Oct/2025:03:29:44 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 "-" "-" 172.215.208.198 - - [08/Oct/2025:03:29:44 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 584 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.132.241.3

🇺🇸 199.47.82.21

🇳🇱 193.176.31.194

🇲🇽 189.218.49.77

🇳🇱 185.242.226.11

🇺🇸 165.232.61.133

🇮🇩 163.7.14.157

🇮🇩 163.7.13.251

🇪🇨 157.100.135.248

🇬🇧 134.209.186.182

🇧🇩 103.77.101.81

🇺🇿 84.54.70.84

🇺🇸 64.62.156.41

🇧🇷 45.182.123.193

🇲🇽 201.141.106.219

🇬🇧 193.163.125.77

🇸🇦 188.52.193.238

🇺🇸 162.216.149.101

🇫🇷 162.159.122.110

🇺🇸 157.55.39.6