JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.203.123.152

172.203.123.152

Neutral Activity

32 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Limited

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.203.123.152 has been reported 32 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.203.123.152:

This IP address has been reported a total of 32 times from 17 distinct sources. 172.203.123.152 was first reported on March 23rd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 elm-st	2025-03-24 09:18:00 (1 year ago)	Multiple 404 requests	Brute-Force Web App Attack
Anonymous	2025-03-24 01:45:22 (1 year ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 01:04:00 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 21:03:56.222059 2025] [security2:error] [pid 31651:tid 31651] [client 172.203.123.152:7328] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|housingdeautor.cerrovictoria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "housingdeautor.cerrovictoria.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CvfBzZxIhGOgwwQN22tgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 00:43:57 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 20:43:52.750847 2025] [security2:error] [pid 3044674:tid 3044674] [client 172.203.123.152:6018] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|ballantinepaintinganddrywall.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ballantinepaintinganddrywall.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CqyFX8eI0GA38PIWSjXwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 00:22:17 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 20:22:13.140658 2025] [security2:error] [pid 17337:tid 17337] [client 172.203.123.152:4232] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.elkesmuesli.systemcapacityoptimization.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.elkesmuesli.systemcapacityoptimization.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CltZ7kMTjqjFqmyyrN0wAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 23:30:29 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 19:30:22.909069 2025] [security2:error] [pid 29370:tid 29370] [client 172.203.123.152:8832] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|vittariadesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vittariadesign.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CZjq93SPCKspBCh_lY_gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-23 23:22:09 (1 year ago)	Inappropriate script execution attempts	Hacking Brute-Force
🇮🇩 penjaga BRIN	2025-03-23 23:13:11 (1 year ago)	apache-alfa-111	Web App Attack
Anonymous	2025-03-23 22:54:48 (1 year ago)	172.203.123.152 (US/United States/-), more than 20 Apache 403 hits	Hacking
🇩🇪 Francio	2025-03-23 22:41:05 (1 year ago)	abuser	Brute-Force
🇮🇩 Burayot	2025-03-23 22:35:12 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.203.123.152 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.203.123.152 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 22:03:40 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 18:03:36.536444 2025] [security2:error] [pid 2359:tid 2359] [client 172.203.123.152:8458] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.electricmeatgrinder.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.electricmeatgrinder.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CFOFgRtVbs3aIQHtdK6gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 21:45:06 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 17:45:01.843597 2025] [security2:error] [pid 21277:tid 21277] [client 172.203.123.152:6275] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|oxygenfarm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "oxygenfarm.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CA3T16TNt5BFM0h4GMsQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2025-03-23 21:39:11 (1 year ago)	172.203.123.152 - - [23/Mar/2025:21:37:33 +0000] "GET /cgi-bin/fm.php HTTP/1.1" 404 40782 "-" rt="0. ... show more 172.203.123.152 - - [23/Mar/2025:21:37:33 +0000] "GET /cgi-bin/fm.php HTTP/1.1" 404 40782 "-" rt="0.120" "-" "-" h="www.wp-cli.es" sn="www.wp-cli.es" ru="/cgi-bin/fm.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpcli82.sock" us="404" uct="0.000" urt="0.120" 172.203.123.152 - - [23/Mar/2025:21:37:33 +0000] "GET /cgi-bin/fm.php HTTP/1.1" 404 40782 "-" "-" "-" 172.203.123.152 - - [23/Mar/2025:21:38:26 +0000] "GET /cgi-bin/1.php HTTP/1.1" 404 40782 "-" rt="0.115" "-" "-" h="www.wp-cli.es" sn="www.wp-cli.es" ru="/cgi-bin/1.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpcli82.sock" us="404" uct="0.000" urt="0.115" 172.203.123.152 - - [23/Mar/2025:21:38:27 +0000] "GET /cgi-bin/admin.php HTTP/1.1" 404 40782 "-" rt="0.133" "-" "-" h="www.wp-cli.es" sn="www.wp-cli.es" ru="/cgi-bin/admin.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpcli82.sock" us="404" uct="0.000" urt="0.134" 172.203.123.152 - - [23/Mar/2025:21:38:31 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 40782 "-" rt="0.11 ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-03-23 21:23:24 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 172.203.123.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 17:23:19.212170 2025] [security2:error] [pid 369:tid 369] [client 172.203.123.152:5617] [client 172.203.123.152] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|kingstoneproperties.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "kingstoneproperties.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-B7x_E1wuMRjbT9H7faAgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 212.47.66.37

🇺🇸 172.203.212.21

🇺🇸 147.90.234.41

🇱🇰 122.255.14.70

🇧🇬 109.160.32.33

🇺🇸 87.58.197.174

🇷🇴 80.94.92.55

🇺🇸 52.186.183.216

🇳🇱 45.156.128.121

🇺🇸 45.79.115.59

🇭🇰 42.201.192.46

🇯🇵 34.97.101.100

🇨🇳 27.42.136.76

🇨🇳 220.250.52.111

🇭🇰 218.250.115.177

🇨🇦 216.73.162.49

🇺🇸 216.25.89.118

🇵🇱 194.180.49.217

🇺🇸 192.81.209.153

🇨🇴 181.189.16.243