4.249.21.215

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
10 reports
10 reporters · latest 2 weeks ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Phoenix, Arizona
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
10 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇺🇸 United States of America 3 🇩🇪 Germany 2
Most common categories Port Scan 7 Web App Attack 2 Hacking 2 Bad Web Bot 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 0x44
Abusive host detected - Web probing for vulnerabilities
Web App Attack Hacking
🇺🇸 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)
Hacking Bad Web Bot
🇳🇱 Ilop
[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 443,80 from 4.249.21.215 — WAN scan (automated sensor)
Port Scan
🇨🇦 smithoo4
4.249.21.215 - - [26/Oct/2026:12:54:09 -0400] "GET /health/liveliness HTTP/1.1" 444 0 "-" "curl/8.18.0" 4.249.21.215 - - [26/Oct/2026:12:54:09 -0400] "GET /health/liveliness HTTP/1.1" 444 0 "-" "curl/8.18.0" ...
Port Scan Bad Web Bot
🇫🇷 Kejult
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Excessive port scans. -c23856ef-
Port Scan
🇺🇸 freehosts.eu
Blocked by UFW [4000/tcp] | SPT: 51902 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 eselpcore.com
Requests to non‑existent directory and files (404 scanning)
Web App Attack
🇫🇷 GabrielJST
*Port Scan* detected from 4.249.21.215 (US/United States/-).
Port Scan
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 2 observed events targeting TCP/443, TCP/80.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.12
🇺🇸 195.184.76.93
🇦🇲 176.32.193.16
🇩🇪 43.131.9.169
🇪🇸 185.184.2.6
🇦🇷 181.170.120.214
🇲🇽 177.242.157.43
🇨🇳 111.225.214.153
🇫🇷 103.110.163.233
🇻🇳 103.60.242.169
🇳🇱 86.54.31.38
🇩🇪 46.151.182.71
🇺🇸 45.148.126.179
🇮🇷 37.202.168.251
🇩🇪 4.182.219.135
🇷🇴 2.57.122.209
🇷🇴 2.57.121.112
🇺🇸 207.57.142.88
🇺🇸 159.65.218.92
🇨🇳 124.220.107.95
feedback