51.12.216.87

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
54% Elevated
97 reports
44 reporters · latest 1 day ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇸🇪 Sweden
City
Gavle, Gavleborg
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
97 from 44 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 9 🇳🇱 Netherlands 4 🇲🇳 Mongolia 3
Most common categories Port Scan 21 Hacking 4 Web App Attack 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
37810/udp (1 or more attempts)
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 12 events observed. 4 distinct ports targeted. Reported automatically from a honeypot sensor.
Port Scan
🇭🇰 sandra361
Port scan detected: 6 packets across 1 port (17000). | Evidence: REAPER_TARPIT: IN=eth0 SRC=51.12.216.87 LEN=58 TOS=0x14 PREC=0x00 TTL=36 ID=1926 DF PROTO=TCP SPT=46764 DPT=17000 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 CyberFox
37810/udp (1 or more attempts)
Port Scan
🇳🇱 donarev419
Connection to port 17000 with data transfer. Data preview: GET / HTTP/1.0
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 19 hits on ports [17000, 35000, 37810] (automated)
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (32 bytes of payload); 37777 [1], 35000 [1], 17000 [1] TCP
Port Scan
🇳🇱 donarev419
Connection to port 17000 with data transfer. Data preview: GET / HTTP/1.0
Port Scan Hacking
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (64 bytes of payload); 37777 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 6 events observed. 3 distinct ports targeted. Reported automatically from a honeypot sensor.
Port Scan
🇭🇰 sandra361
Port scan detected: 5 attempts across 1 port (37777). | Evidence: GHOST_SCAN: IN=eth0 SRC=51.12.216.87 LEN=60 TOS=0x14 PREC=0x00 TTL=38 ID=32576 DF PROTO=TCP SPT=36212 DPT=37777 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.0 request on 17000 GET /; 17000 [1], 37777 [1], 35000 [1] TCP
Web App Attack
🇭🇰 CyberFox
37810/udp (1 or more attempts)
Port Scan
🇳🇱 donarev419
Connection to port 17000 with data transfer. Data preview: GET / HTTP/1.0
Port Scan Hacking
🇵🇱 sefinek.net
Honeypot hit: HTTP/1.0 request on 17000 GET /; 17000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 194.5.82.43
🇳🇱 176.65.148.126
🇮🇳 175.101.17.226
🇺🇸 161.35.1.64
🇭🇰 152.32.171.73
🇩🇪 128.140.97.184
🇩🇪 123.3.0.4
🇨🇳 117.26.88.114
🇵🇭 112.202.103.44
🇺🇸 73.117.132.160
🇺🇸 72.56.58.2
🇺🇸 66.132.172.213
🇮🇳 49.206.116.56
🇺🇸 45.79.181.94
🇨🇳 14.103.86.48
🇮🇳 203.81.240.173
🇷🇴 193.32.162.84
🇮🇩 182.10.100.83
🇦🇷 179.36.234.60
🇫🇮 172.83.254.85
feedback