JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.212.142.241

172.212.142.241 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 84%: ?

84%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.212.142.241

Whois 172.212.142.241

IP Abuse Reports for 172.212.142.241:

This IP address has been reported a total of 15 times from 14 distinct sources. 172.212.142.241 was first reported on July 14th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-07-14 22:05:20 (3 days ago)	Xmlrpc Caught (10)	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-07-14 21:58:27 (3 days ago)	Web vulnerability probing: /xmlrpc.php	Web App Attack
🇩🇪 london2038.com	2026-07-14 21:57:19 (3 days ago)	Attacking WordPress 172.212.142.241 - - [14/Jul/2026:23:57:15 +0200] "POST /xmlrpc.php HTTP/1.1" 503 ... show more Attacking WordPress 172.212.142.241 - - [14/Jul/2026:23:57:15 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 21:52:14 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 172.212.142.241 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 172.212.142.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 17:52:07.399458 2026] [security2:error] [pid 17710:tid 17710] [client 172.212.142.241:25320] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 172.212.142.241 (+1 hits since last alert)\|psicologos-omega.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "psicologos-omega.com"] [uri "/xmlrpc.php"] [unique_id "alavh3ZMlZhp5yS09oZUyQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-07-14 21:31:51 (3 days ago)	172.212.142.241 - - [14/Jul/2026:23:31:51 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 172.212.142.241 - - [14/Jul/2026:23:31:51 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇳🇱 ipoac.nl	2026-07-14 21:26:32 (3 days ago)	-:443 172.212.142.241 - - [14/Jul/2026:23:26:31 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 7454 "-" "M ... show more -:443 172.212.142.241 - - [14/Jul/2026:23:26:31 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 7454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-14 21:22:06 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 172.212.142.241 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 172.212.142.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 17:22:02.077496 2026] [security2:error] [pid 7910:tid 7910] [client 172.212.142.241:24958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 172.212.142.241 (+1 hits since last alert)\|esdulemba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "esdulemba.com"] [uri "/xmlrpc.php"] [unique_id "alaoes9m1CPauIlbgCO8MQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-14 21:15:45 (3 days ago)	[TueJul1423:15:41.5061842026][security2:error][pid2540046:tid2540064][client172.212.142.241:0]ModSec ... show more [TueJul1423:15:41.5061842026][security2:error][pid2540046:tid2540064][client172.212.142.241:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"solaristech.ch\"][uri\"/xmlrpc.php\"][unique_id\"alam_XpVN0UsWAhO6FxMdQAAAE8\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 Burayot	2026-07-14 20:59:16 (3 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.212.142.241 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.212.142.241 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇮🇹 VHosting	2026-07-14 20:55:03 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-14 20:49:51 (3 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 172.212.142.241 (US/United States/-): 1 in the ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 172.212.142.241 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 172.212.142.241 - - [14/Jul/2026:22:49:44 +0200] "POST /xmlrpc.php HTTP/1.1" 404 87098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" host=costruirebene.it show less	Port Scan
🇧🇪 voormedia	2026-07-14 20:46:02 (3 days ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇳🇴 jad-abuse	2026-07-14 20:44:51 (3 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 2 hits. show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-14 20:36:13 (3 days ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-07-14 20:21:33 (3 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 172.212.142.241 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 172.212.142.241 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 179.60.150.153

🇻🇳 171.243.151.51

🇳🇱 45.148.10.151

🇺🇸 35.188.112.111

🇺🇸 2a09:bac1:76c0:460::5e:65

🇯🇵 163.44.101.215

🇬🇧 137.220.120.12

🇧🇩 116.204.228.180

🇫🇮 104.28.156.91

🇸🇪 45.84.107.174

🇸🇬 43.160.208.253

🇭🇰 42.200.66.164

🇩🇪 194.88.98.118

🇨🇳 183.184.53.175

🇺🇸 162.216.150.240

🇺🇸 162.216.150.189

🇺🇸 147.185.132.159

🇨🇳 118.26.136.202

🇲🇾 113.211.131.146

🇨🇳 106.12.18.199