Showing current intelligence for this indicator.

IP Information for 172.202.104.166

Location —
ASN AS8075 — MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US
BGP Prefix 172.200.0.0/13
Registry ripencc
IP Address 172.202.104.166

IOC Matches

ID Type Tag Source Last seen Comments
65152 IP honeypot 4 2026-06-02 16:22:34
  • 2026-06-02: Observed 22 times. Targeted ports: 11743. Country: United States.
  • 2026-05-30: Observed 20 times. Targeted ports: 9999. Country: United States. Reputation: known attacker.
  • 2026-05-26: Observed 3 times. Targeted ports: 161. Country: United States. Reputation: known attacker.
  • 2026-05-16: Observed 2 times. Targeted ports: 8291. Country: United States. Reputation: known attacker.
  • 2026-05-15: Observed 26 times. Targeted ports: 3000. Country: United Kingdom. Reputation: known attacker. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).
  • 2026-05-07: Observed 22 times. Targeted ports: 5269. Country: United States. Reputation: known attacker.
  • 2026-04-28: Observed 15 times. Targeted ports: 27017. Country: United States. Reputation: known attacker.
  • 2026-04-23: Observed 16 times. Targeted ports: 9200. Country: United States. Reputation: known attacker. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).
  • 2026-03-27: Observed 18 times. Targeted ports: 7474. Country: United States. Reputation: known attacker. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).
  • 2026-03-25: Observed 23 times. Targeted ports: 20547. Country: United States. Reputation: known attacker.
  • 2026-03-18: Observed 3 times. Targeted ports: 3050. Country: United States. Reputation: known attacker.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 172.202.104.166.

Search History

ID Source Last seen
64749 web 2026-06-11 18:57:58

Whois

No Whois record yet. The worker will fetch it when this IP is in the queue.