JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.255.210.114

172.255.210.114 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 54%: ?

54%

ISP	LEASEWEB SINGAPORE PTE. LTD.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59253
Domain Name	leaseweb.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.255.210.114

Whois 172.255.210.114

IP Abuse Reports for 172.255.210.114:

This IP address has been reported a total of 51 times from 9 distinct sources. 172.255.210.114 was first reported on August 28th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-09-19 07:00:53 (11 hours ago)	SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes, Active Response: IP 172.25 ... show more SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes, Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 7.2/10 (HIGH). Confidence: 65%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 96%. MITRE ATT&CK: T1057 (Process Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-19 06:00:55 (12 hours ago)	Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 4.6/10 (MEDIUM). Confid ... show more Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 4.6/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 88%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 soc-yk	2026-09-19 05:06:27 (12 hours ago)	Type: credential_attack Risk: 58 Events: 20387 Evidence: - Repeated authentication attack activity ... show more Type: credential_attack Risk: 58 Events: 20387 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified show less	Brute-Force SSH
🇮🇩 sockominfo	2026-09-19 05:01:07 (13 hours ago)	Active Response: IP 172.255.210.114 Blocked via Firewall Drop, SUPPRESSED: IP 172.255.210.114 Blocke ... show more Active Response: IP 172.255.210.114 Blocked via Firewall Drop, SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 7.3/10 (HIGH). Confidence: 65%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1057 (Process Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-19 03:01:02 (15 hours ago)	SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes, Active Response: IP 172.25 ... show more SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes, Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 7.4/10 (HIGH). Confidence: 80%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1057 (Process Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-19 01:00:09 (17 hours ago)	SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 5.2/10 (MEDI ... show more SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 5.2/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 bps-statistics	2026-09-19 00:45:58 (17 hours ago)	Web Application Attacks	Web App Attack
🇮🇩 sockominfo	2026-09-19 00:00:54 (18 hours ago)	Active Response: IP 172.255.210.114 Blocked via Firewall Drop, SUPPRESSED: IP 172.255.210.114 Blocke ... show more Active Response: IP 172.255.210.114 Blocked via Firewall Drop, SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 7.1/10 (HIGH). Confidence: 65%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 93%. MITRE ATT&CK: T1057 (Process Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-18 23:00:11 (19 hours ago)	SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 4.8/10 (MEDI ... show more SUPPRESSED: IP 172.255.210.114 Blocked - 5 times triggered in 30 minutes. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 bps-statistics	2026-09-18 21:34:40 (20 hours ago)	XML RPC Scan Activities: "2026-09-19T04:34:40.241+07:00" "/xmlrpc.php" "172.255.210.114" "Mozilla/5. ... show more XML RPC Scan Activities: "2026-09-19T04:34:40.241+07:00" "/xmlrpc.php" "172.255.210.114" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack Brute-Force
🇲🇾 Rizzy	2026-09-18 20:13:38 (21 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-09-18 18:00:53 (1 day ago)	Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 4.1/10 (MEDIUM). Confid ... show more Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-18 17:00:13 (1 day ago)	Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). R ... show more Active Response: IP 172.255.210.114 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 soc-yk	2026-09-18 16:54:11 (1 day ago)	Type: credential_attack Risk: 76 Events: 6475 Evidence: - Repeated authentication attack activity d ... show more Type: credential_attack Risk: 76 Events: 6475 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Brute-Force SSH
🇮🇩 soc-yk	2026-09-18 13:31:40 (1 day ago)	Type: suspicious_network_activity Risk: 52 Events: 2076 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 52 Events: 2076 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 74.82.47.3

🇮🇩 202.46.28.140

🇪🇨 181.119.227.157

🇦🇷 181.26.197.247

🇳🇱 91.92.42.57

🇧🇬 79.124.58.86

🇦🇷 45.187.90.2

🇬🇧 35.203.211.11

🇺🇸 20.83.52.5

🇨🇳 223.100.72.67

🇦🇺 210.185.110.56

🇧🇴 181.115.181.140

🇧🇷 138.0.113.96

🇨🇳 114.86.60.186

🇹🇼 114.34.130.221

🇬🇷 83.235.21.125

🇫🇷 76.13.51.38

🇺🇸 47.230.243.78

🇧🇷 186.236.11.156

🇪🇨 181.113.114.61