JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

217.19.214.155

Recent Activity

Abuse confidence score ?

100% Critical

35 reports

28 reporters · latest 2 days ago

ISP	Aggregate for ISP Interdnestrcom.
Usage Type	Fixed Line ISP
ASN	AS1547
Hostname(s)	155.214.19.217.sta.idknet.com
Domain Name	idc.md
Country	🇲🇩 Moldova (the Republic of)
City	Tiraspol, Transnistria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 217.19.214.155

Export CSV

This IP address has been reported a total of 35 times from 28 distinct sources. 217.19.214.155 was first reported on December 10th 2025, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 17 reports; France with 9 reports; United States of America with 4 reports. The most common categories in these recent reports were: Web App Attack 21 times; Port Scan 10 times; Bad Web Bot 9 times; Hacking 6 times; Brute-Force 5 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Bensay	2026-10-08 19:58:50 (2 days ago)	Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ... show more Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=unknown show less	Port Scan
🇩🇪 HoneyPotFRI	2026-10-08 02:52:57 (3 days ago)	217.19.214.155 - - [08/Oct/2026:04:52:41 +0200] "x05x01x02" 400 157 "-" "-" ...	Bad Web Bot Web App Attack
🇩🇪 Philister11	2026-10-08 02:13:49 (3 days ago)	CrowdSec: crowdsecurity/http-open-proxy (MD/AS1547)	Open Proxy
🇫🇷 LRNP	2026-10-08 01:51:36 (3 days ago)	_:80 217.19.214.155 - - [08/Oct/2026:01:51:36 +0000] "\x05\x01\x02" 400 150 "-" "-" ...	Bad Web Bot Web App Attack
🇸🇬 itachi1706	2026-10-08 01:37:09 (3 days ago)	217.19.214.155 - - [08/Oct/2026:09:37:07 +0800] "\x05\x01\x02" 400 166 "-" "-" 217.19.214.155 - - [0 ... show more 217.19.214.155 - - [08/Oct/2026:09:37:07 +0800] "\x05\x01\x02" 400 166 "-" "-" 217.19.214.155 - - [08/Oct/2026:09:37:08 +0800] "\x05\x01\x00" 400 166 "-" "-" 217.19.214.155 - - [08/Oct/2026:09:37:08 +0800] "\x04\x01\x00P\x00\x00\x00\x01\x00example.com\x00" 400 166 "-" "-" 217.19.214.155 - - [08/Oct/2026:09:37:08 +0800] "\x04\x01\x00P\x01\x01\x01\x01\x00" 400 166 "-" "-" 217.19.214.155 - - [08/Oct/2026:09:37:09 +0800] "CONNECT example.com:443 HTTP/1.1" 400 166 "-" "-" ... show less	Brute-Force Web App Attack
🇳🇱 taivas.nl	2026-10-08 00:30:06 (3 days ago)	General_bad_requests	Bad Web Bot
🇫🇷 Kejult	2026-10-07 20:35:24 (3 days ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 4 application-level events across 4 ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 4 application-level events across 4 source port(s). Sensor(s): Tanner. show less	Port Scan
🇩🇪 NxtGenIT	2026-10-07 20:34:26 (3 days ago)	Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /search?q={query}{unique_id} ... show more Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /search?q={query}{unique_id}&ie=UTF-8&oe=UTF-8&hl=en show less	SSH
🇩🇪 LRob	2026-10-07 20:30:25 (3 days ago)	Open proxy probe \| method: GET \| path: http://www.google.com:80/search?q={query}{unique_id}&ie=UTF-8 ... show more Open proxy probe \| method: GET \| path: http://www.google.com:80/search?q={query}{unique_id}&ie=UTF-8&oe=UTF-8&hl=en \| ua: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 \| 2026-10-07 20:30 UTC show less	Hacking Open Proxy
🇩🇪 Ano_Nym	2026-10-07 20:29:36 (3 days ago)	CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-open-proxy	Web App Attack
🇩🇪 HoneyPotFRI	2026-10-07 20:26:52 (3 days ago)	217.19.214.155 - - [07/Oct/2026:22:26:36 +0200] "x05x02x00x02" 400 157 "-" "-" ...	Bad Web Bot Web App Attack
Anonymous	2026-10-07 20:25:07 (3 days ago)	217.19.214.155 - - [07/Oct/2026:20:25:05 +0000] "CONNECT example.com:443 HTTP/1.1" 405 157 "-" "Mozi ... show more 217.19.214.155 - - [07/Oct/2026:20:25:05 +0000] "CONNECT example.com:443 HTTP/1.1" 405 157 "-" "Mozilla/5.0" "-" "example.com" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-10-07 20:25:05 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-open-proxy	Web App Attack
🇫🇷 id2i	2026-10-07 20:13:40 (3 days ago)	2026-10-07T22:13:40.041959+02:00 coraza-spoa[262622]: [client "217.19.214.155"] Coraza: Access denie ... show more 2026-10-07T22:13:40.041959+02:00 coraza-spoa[262622]: [client "217.19.214.155"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 8) show less	Hacking Web App Attack
🇫🇷 Bensay	2026-10-07 20:10:52 (3 days ago)	Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ... show more Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 170.78.195.148

🇺🇸 162.216.150.225

🇨🇳 120.219.175.59

🇷🇺 94.72.35.226

🇳🇱 91.148.244.131

🇸🇬 85.203.23.125

🇨🇳 14.103.118.150

🇹🇼 198.235.24.73

🇯🇵 177.3.92.13

🇳🇱 160.119.66.206

🇺🇸 129.121.116.121

🇻🇳 123.31.31.125

🇨🇳 113.31.115.157

🇮🇪 86.42.136.171

🇳🇱 77.239.124.204

🇨🇳 39.163.9.184

🇹🇼 211.75.198.217

🇹🇭 203.150.157.180

🇺🇸 159.89.191.210

🇫🇮 147.185.133.173