172.173.112.161
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
Abuse Reports
Total reports
269 from
211 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇱 Fernando Soto |
WAF propio vps1 (CL): sensx2 score 8 en 1h. sondeo rutas sensibles.
|
Web App Attack | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| Anonymous |
172.173.112.161 - - [27/Oct/2026:08:33:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 503 5350 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 neckaralb-admin.de |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇺🇸 slay3r9903 |
IP address blocked by Cloudflare Rate Limiting rule due to suspicious activity and security violations.
|
Hacking Bad Web Bot | |
| 🇧🇷 Halux |
172.173.112.161 Probing protected path or service
|
Web App Attack | |
| 🇺🇸 TheCluePhone |
Automated vulnerability scanner: 78 exploit-path requests since 2026-10-27 probing webshell, wordpress. Blocked/404'd at CDN edge.
|
Web App Attack Bad Web Bot | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
Web probing (132 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
|
Web App Attack | |
| 🇨🇭 backslash |
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
|
Bad Web Bot | |
| 🇺🇸 Rocky Mountain Bioengineering Symposium |
172.173.112.161 - - [27/Oct/2026:00:03:02 -0600] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 473 "-" "-"
...
|
Web App Attack | |
| 🇺🇸 mc4bbs |
|
Web App Attack Hacking | |
| 🇫🇷 Campus France |
|
Brute-Force Web App Attack | |
| 🇺🇸 ambor |
Honeypot triggered: /wp-content/plugins/hellopress/wp_filemanager.php on ifebridge.com. User-Agent: unknown. Method: GET
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown