JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.212.160.49

172.212.160.49 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 58%: ?

58%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.212.160.49

Whois 172.212.160.49

IP Abuse Reports for 172.212.160.49:

This IP address has been reported a total of 17 times from 12 distinct sources. 172.212.160.49 was first reported on April 12th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-01 13:20:44 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 12:46:34 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:46:27.670863 2026] [security2:error] [pid 26588:tid 26588] [client 172.212.160.49:44041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.63"] [uri "/.git/HEAD"] [unique_id "akUMIxX06nS1AQRdWUAkaAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Petre 21_ip	2026-07-01 10:28:17 (6 days ago)	2026-07-01T12:10:13.241097+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-01T12:10:13.241097+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=172.212.160.49 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=51258 DF PROTO=TCP SPT=43911 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 pm33	2026-07-01 09:27:47 (6 days ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 08:45:34 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:45:29.867452 2026] [security2:error] [pid 16990:tid 16990] [client 172.212.160.49:43414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.91"] [uri "/.git/HEAD"] [unique_id "akTTqQT68PXzjQgjIKIXLAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 djboddington	2026-07-01 08:27:07 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 ecs.ge	2026-07-01 08:24:03 (6 days ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇳🇱 Savvii	2026-06-25 15:59:35 (1 week ago)	20 attempts against mh-misbehave-ban on mist	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-25 14:04:39 (1 week ago)	2026-06-25 14:04:39 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 13:44:15 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.212.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:44:11.419728 2026] [security2:error] [pid 22547:tid 22547] [client 172.212.160.49:21570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.166"] [uri "/.git/HEAD"] [unique_id "aj0wq0gv_EY9PM2NQtcPQgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-25 13:32:04 (1 week ago)	tcp port scan (8 or more attempts)	Port Scan
Anonymous	2026-06-25 10:47:20 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-04-12 03:03:30 (2 months ago)	2026-04-12T05:03:28.740949+02:00 mail sshd[4172141]: Failed password for root from 172.212.160.49 po ... show more 2026-04-12T05:03:28.740949+02:00 mail sshd[4172141]: Failed password for root from 172.212.160.49 port 37602 ssh2 2026-04-12T05:03:27.554763+02:00 mail sshd[4172137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.160.49 user=root 2026-04-12T05:03:29.050856+02:00 mail sshd[4172137]: Failed password for root from 172.212.160.49 port 37059 ssh2 2026-04-12T05:03:27.606565+02:00 mail sshd[4172139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.160.49 user=root 2026-04-12T05:03:29.102814+02:00 mail sshd[4172139]: Failed password for root from 172.212.160.49 port 37101 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-12 02:20:04 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-04-12 02:03:24 (2 months ago)	2026-04-12T04:03:04.404881+02:00 mail sshd[4169517]: Failed password for root from 172.212.160.49 po ... show more 2026-04-12T04:03:04.404881+02:00 mail sshd[4169517]: Failed password for root from 172.212.160.49 port 38165 ssh2 2026-04-12T04:03:12.836675+02:00 mail sshd[4169537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.160.49 user=root 2026-04-12T04:03:15.387847+02:00 mail sshd[4169537]: Failed password for root from 172.212.160.49 port 38229 ssh2 2026-04-12T04:03:20.395650+02:00 mail sshd[4169541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.160.49 user=root 2026-04-12T04:03:23.046804+02:00 mail sshd[4169541]: Failed password for root from 172.212.160.49 port 38235 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 51.68.236.73

🇬🇧 35.203.210.37

🇳🇱 192.42.116.63

🇰🇷 121.189.198.60

🇰🇷 112.162.111.205

🇨🇳 111.113.88.60

🇫🇷 91.231.89.198

🇫🇷 91.231.89.55

🇸🇪 45.84.107.33

🇺🇸 23.129.64.155

🇨🇭 209.99.184.143

🇺🇸 162.216.150.135

🇨🇳 115.190.113.93

🇺🇸 107.150.98.68

🇵🇰 72.255.26.78

🇺🇸 35.230.48.229

🇨🇳 221.0.15.138

🇺🇸 216.73.217.8

🇨🇳 183.230.155.13

🇺🇦 176.103.6.8