JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.215.210.114

172.215.210.114 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 45%: ?

45%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.215.210.114

Whois 172.215.210.114

IP Abuse Reports for 172.215.210.114:

This IP address has been reported a total of 35 times from 27 distinct sources. 172.215.210.114 was first reported on October 20th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 06:46:58 (3 weeks ago)	Unauthorized access (tcp/443/https)	Port Scan Web App Attack
🇫🇷 EDSL	2026-06-03 05:34:46 (3 weeks ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
Anonymous	2026-06-03 04:42:26 (3 weeks ago)	[03/Jun/2026:07:42:23 +0300] 17804617436.739678 172.215.210.114 38084 148.251.76.218 80 [03/Jun/2026 ... show more [03/Jun/2026:07:42:23 +0300] 17804617436.739678 172.215.210.114 38084 148.251.76.218 80 [03/Jun/2026:07:42:25 +0300] 17804617458.872045 172.215.210.114 38118 148.251.76.218 80 show less	Web App Attack
🇺🇸 RAP	2026-06-03 04:31:35 (3 weeks ago)	2026-06-03 04:31:35 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 Matthew Ping	2026-06-03 04:30:02 (3 weeks ago)	ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇧🇾 lns.bz	2026-06-03 04:14:45 (3 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇬🇧 PeravixGroup	2026-06-03 04:07:19 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇹🇭 Sawasdee	2026-06-03 03:54:05 (3 weeks ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 kosada.com	2026-06-03 03:51:36 (3 weeks ago)	Web vulnerability probing: /___proxy_subdomain_whm/login/ (bogus vhost/SNI)	Web App Attack
🇪🇸 pipeline.es	2026-05-23 21:44:37 (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /@fs/etc/passwd?import?raw \| Evidence: alcoaviage ... show more Web scanning / probing for vulnerable paths \| URL: /@fs/etc/passwd?import?raw \| Evidence: alcoaviagens.com 172.215.210.114 - - [23/May/2026:23:42:52 +0200] \"GET /@fs/etc/passwd?import?raw HTTP/1.1\" 404 20777 \"-\" \"Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: MICROSOFT-CORP-MSN-AS-BLOCK \| Country: US show less	Port Scan Web App Attack
🇺🇦 URAN Publishing Service	2026-05-23 20:55:10 (1 month ago)	172.215.210.114 - - [23/May/2026:23:55:09 +0300] "GET /.env HTTP/1.1" 404 3344 "https://twitter.com/ ... show more 172.215.210.114 - - [23/May/2026:23:55:09 +0300] "GET /.env HTTP/1.1" 404 3344 "https://twitter.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-05-23 20:12:42 (1 month ago)	(PERMBLOCK) 172.215.210.114 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ... show more (PERMBLOCK) 172.215.210.114 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-23 19:08:00 (1 month ago)	(caddyscan) Scanner path probe from 172.215.210.114 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.215.210.114 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:19:07:54 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:19:07:54 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:19:07:55 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:19:07:55 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:19:07:56 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-23 18:07:53 (1 month ago)	(caddyscan) Scanner path probe from 172.215.210.114 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.215.210.114 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:18:07:50 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:18:07:50 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:18:07:50 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:18:07:50 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.215.210.114 - - [23/May/2026:18:07:50 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-23 17:38:29 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.215.210.114 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.215.210.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 13:38:24.601815 2026] [security2:error] [pid 11534:tid 11546] [client 172.215.210.114:5143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultbaja.com"] [uri "/.env"] [unique_id "ahHmEOjGeQHjrh2IoHhy4QAAAAo"], referer: https://www.notion.so/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.190.35.163

🇬🇧 159.65.63.103

🇩🇿 154.242.210.159

🇺🇸 104.22.20.130

🇨🇦 85.217.149.19

🇻🇳 27.79.43.34

🇧🇷 18.228.46.4

🇺🇸 195.184.76.120

🇺🇸 172.200.228.35

🇩🇪 165.227.159.13

🇺🇸 158.94.187.41

🇮🇳 139.59.27.121

🇳🇱 134.209.198.188

🇺🇸 104.243.35.120

🇬🇧 74.125.18.219

🇳🇱 64.227.64.224

🇳🇱 45.153.34.15

🇮🇳 13.234.40.169

🇮🇷 5.160.118.74

🇺🇸 216.180.246.210