JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.202.30.101

172.202.30.101 was found in our database!

This IP was reported 350 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.202.30.101

Whois 172.202.30.101

IP Abuse Reports for 172.202.30.101:

This IP address has been reported a total of 350 times from 254 distinct sources. 172.202.30.101 was first reported on July 20th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-22 06:36:45 (10 hours ago)	Excessive multi-domain requests	Brute-Force
🇨🇱 SinaiCL	2026-07-22 03:55:13 (13 hours ago)	WAF Multiple Hits	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-22 03:13:10 (14 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 172.202.30.101 172.69.7.21 - - [20/Jul/2026:16:30:3 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 172.202.30.101 172.69.7.21 - - [20/Jul/2026:16:30:39 -0300] "GET /adminfuns.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-07-21 19:03:24 (22 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-07-21 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-07-21 05:14:02 (1 day ago)	8228 attacks on PHP URLs: GET /wp-content/plugins/atomlib.php HTTP/1.1	Web App Attack
🇮🇹 paoloartone	2026-07-21 05:00:23 (1 day ago)	Reverse proxy TCO: 180 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 20/07/202 ... show more Reverse proxy TCO: 180 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 20/07/2026. show less	Web App Attack Hacking Port Scan
🇧🇪 taivas.nl	2026-07-21 04:32:57 (1 day ago)	Many_bad_calls	Web App Attack
🇧🇷 Peregrine	2026-07-21 03:11:41 (1 day ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 172.202.30.101 172.69.7.208 - - [20/Jul/2026:16:30:40 -0 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 172.202.30.101 172.69.7.208 - - [20/Jul/2026:16:30:40 -0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 404 18193 172.202.30.101 172.69.7.208 - - [20/Jul/2026:16:30:40 -0300] "GET /wk/index.php HTTP/1.1" 404 18193 172.202.30.101 172.69.7.21 - - [20/Jul/2026:16:30:41 -0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 404 18193 172.202.30.101 172.69.7.208 - - [20/Jul/2026:16:30:41 -0300] "GET /inputs.php HTTP/1.1" 404 18193 172.202.30.101 104.22.62.75 - - [20/Jul/2026:16:30:41 -0300] "GET /wp-admin/network/index.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇩🇪 SiyCah	2026-07-21 03:00:02 (1 day ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇭🇺 DumaNet	2026-07-21 02:35:00 (1 day ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 21. 01:48:38 Source IP: 172.202.30.101 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 21. 01:48:38 Source IP: 172.202.30.101 Portion of the log(s): 172.202.30.101 - [21/Jul/2026:01:48:38 +0200] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:48:38 +0200] "GET /wp-includes/PHPMailer/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:48:37 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:48:37 +0200] "GET /mini.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:48:37 +0200] "GET /wp show less	Web App Attack Hacking
🇭🇺 DumaNet	2026-07-21 02:20:00 (1 day ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 21. 01:36:28 Source IP: 172.202.30.101 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 21. 01:36:28 Source IP: 172.202.30.101 Portion of the log(s): 172.202.30.101 - [21/Jul/2026:01:36:28 +0200] "GET /wp-content/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:36:27 +0200] "GET /wp-file.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:36:27 +0200] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:36:27 +0200] "GET /wso.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - [21/Jul/2026:01:36:27 +0200] "GET /about.php HTTP/1.1" 404 show less	Web App Attack Hacking
🇳🇱 CryptoYakari	2026-07-21 01:43:10 (1 day ago)	172.202.30.101 - - [21/Jul/2026:04:43:05 +0300] "GET /wp-admin/js/index.php HTTP/1.0" 404 8484 "-" " ... show more 172.202.30.101 - - [21/Jul/2026:04:43:05 +0300] "GET /wp-admin/js/index.php HTTP/1.0" 404 8484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - - [21/Jul/2026:04:43:05 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.0" 404 8484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - - [21/Jul/2026:04:43:06 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 8484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - - [21/Jul/2026:04:43:06 +0300] "GET /wp-content/about.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.202.30.101 - - [21/Jul/2026:04:43:06 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Wi ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇫🇮 Christopher Hughes	2026-07-21 01:31:01 (1 day ago)	[Tue Jul 21 02:30:58.639857 2026] [proxy_fcgi:error] [pid 2001177:tid 139824925234752] [client 172.2 ... show more [Tue Jul 21 02:30:58.639857 2026] [proxy_fcgi:error] [pid 2001177:tid 139824925234752] [client 172.202.30.101:62102] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:30:59.756804 2026] [proxy_fcgi:error] [pid 2001177:tid 139824925234752] [client 172.202.30.101:62102] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:31:00.301069 2026] [proxy_fcgi:error] [pid 2001177:tid 139826634544704] [client 172.202.30.101:62102] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:31:00.436906 2026] [proxy_fcgi:error] [pid 2001177:tid 139826527454784] [client 172.202.30.101:62102] AH01071: Got error 'Primary script unknown' [Tue Jul 21 02:31:01.125737 2026] [proxy_fcgi:error] [pid 2001177:tid 139825965405760] [client 172.202.30.101:62102] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 pscriptos	2026-07-21 01:27:25 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking

Showing 1 to 15 of 350 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.192.25.149

🇭🇺 195.199.210.194

🇦🇴 193.163.125.44

🇲🇾 47.254.231.12

🇨🇳 36.32.3.208

🇺🇸 20.38.43.85

🇩🇪 2.26.99.220

🇷🇺 185.92.139.162

🇨🇳 180.95.238.34

🇨🇳 175.30.48.83

🇮🇩 124.40.252.3

🇺🇸 91.230.168.26

🇨🇦 85.217.149.40

🇺🇸 73.147.135.220

🇺🇸 45.38.249.157

🇺🇸 45.3.35.97

🇬🇧 198.244.226.123

🇺🇸 184.72.84.154

🇹🇭 118.194.250.31

🇫🇷 92.183.14.16