JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.196.45.228

172.196.45.228 was found in our database!

This IP was reported 309 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.196.45.228

Whois 172.196.45.228

IP Abuse Reports for 172.196.45.228:

This IP address has been reported a total of 309 times from 250 distinct sources. 172.196.45.228 was first reported on July 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ki3	2026-07-24 09:54:38 (1 hour ago)	Fail2Ban: Web App Attacks and Forum Spam 172.196.45.228 1784886869.7374723(JST)	Web Spam Bad Web Bot Web App Attack
🇯🇵 ki3	2026-07-24 07:02:20 (4 hours ago)	Fail2Ban: Web App Attacks and Forum Spam 172.196.45.228 1784876532.271302(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2026-07-24 06:32:56 (4 hours ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇮🇳 evicky2002	2026-07-24 06:00:00 (5 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-07-24 05:15:45 (6 hours ago)	1418 attacks on PHP URLs, ACME URLs: GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 ... show more 1418 attacks on PHP URLs, ACME URLs: GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 GET /.well-known/acme-challenge/about.php HTTP/1.1 show less	Web App Attack
🇧🇪 taivas.nl	2026-07-24 04:32:41 (6 hours ago)	Many_bad_calls	Web App Attack
🇺🇸 Charlesiv	2026-07-24 02:03:31 (9 hours ago)	Triggered Cloudflare WAF (botFight) from NZ. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from NZ. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /extremecrw.php Timestamp: 2026-07-24T01:17:28Z Ray ID: a1ff15da4cadaeb5 UA: Empty string show less	Bad Web Bot
Anonymous	2026-07-24 02:01:01 (9 hours ago)		Web App Attack
Anonymous	2026-07-24 01:31:08 (9 hours ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇨🇦 csnavarro2020	2026-07-24 01:30:34 (9 hours ago)	Automated scan for known vulnerable/nonexistent path: /wp-content/plugins/hellopress/wp_filemanager. ... show more Automated scan for known vulnerable/nonexistent path: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack Hacking
🇺🇸 CollideTech	2026-07-24 01:27:51 (9 hours ago)	probing for vulnerabilities	Web App Attack
🇺🇸 Epimetheus	2026-07-24 01:16:30 (10 hours ago)	Unauthorized access attempts: [GET] /wp-content/plugins/hellopress/wp_filemanager.php UA: Unknown	Web App Attack
Anonymous	2026-07-24 01:08:52 (10 hours ago)	(caddyscan) Scanner path probe from 172.196.45.228 (NZ/New Zealand/-): 5 in the last 3600 secs; Port ... show more (caddyscan) Scanner path probe from 172.196.45.228 (NZ/New Zealand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.196.45.228 - - [24/Jul/2026:01:07:02 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 172.196.45.228 - - [24/Jul/2026:01:08:33 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 172.196.45.228 - - [24/Jul/2026:01:08:34 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" [REDACTED] 200 2627 172.196.45.228 - - [24/Jul/2026:01:08:42 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" [REDACTED] 200 2627 172.196.45.228 - - [24/Jul/2026:01:08:50 +0000] "GET /wp-admin/css/ HTTP/1.1" show less	Port Scan
Anonymous	2026-07-24 01:07:13 (10 hours ago)	Automated web scanner. Requested suspicious paths: /wp-content/index.php \| /by.php \| /wp-content/plu ... show more Automated web scanner. Requested suspicious paths: /wp-content/index.php \| /by.php \| /wp-content/plugins/hellopress/wp_filemanager.php \| /wm.php \| /x.php \| /bajah.php \| /this_is_a_new_hello_world.php \| /coffexium.php \| /cream1.php \| /heat3.php \| /cxs.php \| /asdf.php \| /lim.php \| /wp-includes/sodium_compat/ \| /red.php \| /177.php \| /199.php \| /wp-admin/css/colors/coffee/wp-adochan.php \| /greap.php \| /footer.php \| /file52.php \| /wp-includes/Text/ \| /122.php \| /zoro.php \| /green1.php \| /wp-content/uploads/. UTC: 2026-07-24 00:36:52. show less	Web App Attack
Anonymous	2026-07-24 01:05:45 (10 hours ago)	172.196.45.228 - - [23/Jul/2026:21:05:17 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 16 ... show more 172.196.45.228 - - [23/Jul/2026:21:05:17 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:18 -0400] "GET /x.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:18 -0400] "GET /by.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:19 -0400] "GET /cxs.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:20 -0400] "GET /coffexium.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:20 -0400] "GET /asdf.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:20 -0400] "GET /red.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:21 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.0" 403 199 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:21 -0400] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.0" 404 16 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:22 -0400] "GET /wp-includes/Text/ HTTP/1.0" 403 199 "-" "-" 172.196.45.228 - - [23/Jul/2026:21:05:2 ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 309 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 110.35.80.116

🇮🇳 59.98.126.104

🇳🇱 176.65.148.252

🇨🇳 121.229.156.87

🇯🇵 118.237.24.238

🇫🇷 85.204.70.92

🇮🇩 182.253.64.224

🇨🇳 106.37.72.234

🇺🇸 91.230.168.129

🇨🇴 69.6.234.27

🇲🇾 49.236.193.1

🇬🇧 35.203.210.68

🇭🇺 195.228.108.101

🇺🇸 174.138.57.46

🇺🇸 104.239.78.200

🇳🇱 91.92.42.126

🇺🇸 20.64.105.91

🇩🇪 4.182.219.135

🇩🇪 213.209.159.227

🇦🇺 134.199.162.1