172.204.92.243
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇳🇿 New Zealand
- City
- Auckland, Auckland
Abuse Reports
Total reports
13 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 onlyops.app |
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
|
Exploited Host | |
| 🇺🇸 markawes |
|
Web App Attack Port Scan | |
| 🇩🇪 ManagedStack |
Probing access to unauthorized locations
|
Hacking Exploited Host Web App Attack | |
| 🇩🇪 Grossmann-Gruppe |
Plesk Fail2Ban: plesk-modsecurity
|
Hacking Brute-Force | |
| 🇬🇧 venus.launch.bz |
(mod_security) mod_security triggered on hostname [redacted] 172.204.92.243 (NZ/New Zealand/-)
|
SQL Injection | |
| 🇪🇸 Yoeph |
Malicious probe on /config.php (Permanently Banned) by TurnoControlPro Web Shield
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 netman |
HTTP: 172.204.92.243 blocked because of 100 failures
...
|
DDoS Attack Web App Attack | |
| 🇫🇮 Kimmo Rieskaniemi |
CrowdSec triggered crowdsecurity/http-probing
|
Web App Attack Hacking | |
| 🇩🇪 gadix |
|
Web App Attack | |
| Anonymous |
[elearning.zebs.ch] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.aws/config | fast_lane=true kernel_at=2026-11-04T11:44:14+00:00 | requests=1
|
Hacking Web App Attack | |
| 🇩🇪 DyhnenTv |
CrowdSec webserver: crowdsecurity/http-probing
|
Web App Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown