JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.12.216.205

51.12.216.205 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.12.216.205

Whois 51.12.216.205

IP Abuse Reports for 51.12.216.205:

This IP address has been reported a total of 107 times from 55 distinct sources. 51.12.216.205 was first reported on June 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 slartybartfast69420blazit	2026-06-14 20:45:39 (1 day ago)	Fail2ban picked up 51.12.216.205 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2026-06-12 20:46:23 (3 days ago)	Fail2ban picked up 51.12.216.205 attacking nginx	Web App Attack
🇳🇱 Selckie	2026-06-09 10:57:15 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇹🇷 Threat.live	2026-06-07 18:00:03 (1 week ago)	Threat.live: Web Scan	Web App Attack
🇩🇪 Axel	2026-05-18 05:59:34 (4 weeks ago)	[2026-05-18 05:59:34 UTC] Honeypot WebLogic connection attempt \| AXFRA HONEYPOT	Web App Attack
🇳🇱 BIV	2026-05-18 05:38:53 (4 weeks ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 37777. Automated t ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 37777. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
Anonymous	2026-05-17 06:09:02 (4 weeks ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇧🇷 diego	2026-05-17 02:05:41 (4 weeks ago)	[probe-44-49] 2026-05-17 01:47:32, Client: 51.12.216.205, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-05-17 01:47:32, Client: 51.12.216.205, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇮🇩 sockominfo	2026-05-15 00:00:40 (1 month ago)	Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 3.5/10 (LOW). Confidence: 30 ... show more Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-05-14 23:47:02 (1 month ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/51.12.216.205 2026-05-14 03:11 ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/51.12.216.205 2026-05-14 03:11:20 / show less	Web App Attack
🇮🇩 sockominfo	2026-05-14 23:00:39 (1 month ago)	Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 3.6/10 (LOW). Confidence: 30 ... show more Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-14 20:00:13 (1 month ago)	Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 0/10 (INFORMATIONAL). Report ... show more Suspicious user agent detected Python/3.11 aiohttp/3.9.1. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇯🇵 mkaraki	2026-05-13 17:38:36 (1 month ago)	1778693908 # Service_probe # SIGNATURE_SEND # source_ip:51.12.216.205 # dst_port:35000 ...	Port Scan
🇨🇳 ThreatBook.io	2026-05-11 23:44:42 (1 month ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/51.12.216.205 2026-05-11 01:33 ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/51.12.216.205 2026-05-11 01:33:51 / 2026-05-11 01:51:52 / 2026-05-11 02:21:29 / 2026-05-11 02:27:23 / 2026-05-11 01:57:40 / show less	Web App Attack
Anonymous	2026-05-11 15:52:41 (1 month ago)	Reported from Nginx log analysis 11. Log: 51.12.216.205 - - [11/May/2026:xx:xx:xx 0200] "GET / HTTP ... show more Reported from Nginx log analysis 11. Log: 51.12.216.205 - - [11/May/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Python/3.11 aiohttp/3.9.1" "-" "SE Sweden -" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.172.146

🇩🇪 213.209.159.56

🇯🇵 212.135.211.50

🇺🇸 184.105.139.85

🇺🇸 162.216.149.176

🇧🇷 129.121.50.86

🇮🇩 103.155.47.102

🇫🇷 91.231.89.150

🇸🇪 90.231.51.54

🇳🇱 89.21.67.163

🇺🇸 66.132.195.61

🇮🇪 54.74.134.78

🇺🇸 195.184.76.215

🇳🇱 185.223.235.60

🇳🇱 176.65.149.201

🇩🇪 167.94.146.59

🇺🇸 162.216.150.213

🇯🇵 160.251.233.185

🇮🇳 122.185.146.18

🇬🇧 101.36.97.88