JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.212.190.20

172.212.190.20 was found in our database!

This IP was reported 175 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.212.190.20

Whois 172.212.190.20

IP Abuse Reports for 172.212.190.20:

This IP address has been reported a total of 175 times from 127 distinct sources. 172.212.190.20 was first reported on May 8th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TheJimmo	2026-05-09 01:36:34 (3 weeks ago)	172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:32 +0000] "GET /cache.php HTTP/1.1" 404 36 "-" ... show more 172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:32 +0000] "GET /cache.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:33 +0000] "GET /an.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:33 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:33 +0000] "GET /wp-conf.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.190.20 172.212.190.20 - - [09/May/2026:01:36:33 +0000] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 404 36 "-" "Mozi ... show less	Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-05-09 01:36:22 (3 weeks ago)		Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-05-09 01:26:58 (3 weeks ago)	Unauthorized access attempts: [GET] /wp-content/themes/index.php [GET] /classwithtostring.php [GET] ... show more Unauthorized access attempts: [GET] /wp-content/themes/index.php [GET] /classwithtostring.php [GET] /wp-includes/html-api/ [GET] /sf.php [GET] /chosen.php [GET] /wp-content/plugins/WordPressCore/ [GET] /class-t.api.php [GET] /wp-admin/images/ [GET] /wp-content/admin.php [GET] /wp-content/uploads/ [GET] /ws.php [GET] /index/function.php [GET] /randkeyword.PhP7 [GET] /an.php [GET] /wp-good.php [GET] /wp-conf.php [GET] /themes.php [GET] /wk/index.php [GET] /adminfuns.php [GET] /abc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇷🇴 iulianh	2026-05-09 01:26:28 (3 weeks ago)	80,443	Brute-Force SSH
🇺🇸 ipblock.com	2026-05-09 01:23:00 (3 weeks ago)	IPBlock protected site ID [1438-do]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-09 01:20:10 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-05-09 01:07:29 (3 weeks ago)	Web App Attack Exploid from 172.212.190.20	Web App Attack
🇬🇧 andypiper	2026-05-09 01:02:52 (3 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-05-09 00:57:56 (3 weeks ago)	[Sat May 09 01:57:55.022089 2026] [proxy_fcgi:error] [pid 3118917:tid 140445883553344] [client 172.2 ... show more [Sat May 09 01:57:55.022089 2026] [proxy_fcgi:error] [pid 3118917:tid 140445883553344] [client 172.212.190.20:41344] AH01071: Got error 'Primary script unknown' [Sat May 09 01:57:55.163914 2026] [proxy_fcgi:error] [pid 3118917:tid 140446009378368] [client 172.212.190.20:41344] AH01071: Got error 'Primary script unknown' [Sat May 09 01:57:55.464598 2026] [proxy_fcgi:error] [pid 3118917:tid 140447309624896] [client 172.212.190.20:41344] AH01071: Got error 'Primary script unknown' [Sat May 09 01:57:55.607377 2026] [proxy_fcgi:error] [pid 3118917:tid 140447523268160] [client 172.212.190.20:41344] AH01071: Got error 'Primary script unknown' [Sat May 09 01:57:55.923310 2026] [proxy_fcgi:error] [pid 3118917:tid 140446672074304] [client 172.212.190.20:41344] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇱 CryptoYakari	2026-05-09 00:54:36 (3 weeks ago)	[Sat May 09 03:54:32.278010 2026] [proxy_fcgi:error] [pid 2448622:tid 2448656] [client 172.212.190.2 ... show more [Sat May 09 03:54:32.278010 2026] [proxy_fcgi:error] [pid 2448622:tid 2448656] [client 172.212.190.20:0] AH01071: Got error 'Primary script unknown' [Sat May 09 03:54:32.437650 2026] [proxy_fcgi:error] [pid 2448622:tid 2448645] [client 172.212.190.20:0] AH01071: Got error 'Primary script unknown' [Sat May 09 03:54:32.752565 2026] [proxy_fcgi:error] [pid 2448622:tid 2448657] [client 172.212.190.20:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇺🇸 Mundo Bueno	2026-05-09 00:42:56 (3 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10.0; ... show more [ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: US \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇩🇪 macrob	2026-05-09 00:36:43 (3 weeks ago)	2026/05/09 00:36:40 [error] 516949#516949: 212069956 access forbidden by rule, client: 172.212.190. ... show more 2026/05/09 00:36:40 [error] 516949#516949: 212069956 access forbidden by rule, client: 172.212.190.20, server: fastcredit.net.ua, request: "GET /wp-content/uploads/index.php HTTP/2.0", host: "fastcredit.net.ua" 2026/05/09 00:36:42 [error] 516951#516951: 212069994 access forbidden by rule, client: 172.212.190.20, server: fastcredit.net.ua, request: "GET /wp-content/themes/hideo/network.php HTTP/2.0", host: "fastcredit.net.ua" 2026/05/09 00:36:42 [error] 516952#516952: 212069685 access forbidden by rule, client: 172.212.190.20, server: fastcredit.net.ua, request: "GET /wp-login.php HTTP/2.0", host: "fastcredit.net.ua" ... show less	Web App Attack
🇺🇸 NicoID	2026-05-09 00:10:37 (3 weeks ago)	172.212.190.20 - - [08/May/2026:15:22:46 -0600] "GET /wp-login.php HTTP/1.1" 404 2104 "-" "Mozilla/5 ... show more 172.212.190.20 - - [08/May/2026:15:22:46 -0600] "GET /wp-login.php HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇬🇧 thetomtaylor.co.uk	2026-05-09 00:07:02 (3 weeks ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]	Hacking Bad Web Bot
🇦🇺 nzhost.co.nz	2026-05-09 00:03:26 (3 weeks ago)	$f2bV_matches	Hacking Brute-Force

Showing 61 to 75 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.206.139

🇩🇪 139.59.151.64

🇳🇱 91.124.209.51

🇨🇳 49.72.111.25

🇺🇸 20.65.194.87

🇬🇧 188.240.59.61

🇺🇸 185.223.152.184

🇺🇸 147.185.132.204

🇨🇳 123.145.9.174

🇨🇳 106.117.117.91

🇺🇸 64.62.156.152

🇨🇳 61.53.1.98

🇨🇳 14.103.118.167

🇸🇬 2a09:bac5:55fd:25b9::3c2:4c

🇬🇧 2a06:4880:6000::8d

🇩🇪 213.209.159.158

🇸🇬 212.73.148.22

🇺🇸 205.210.31.40

🇳🇱 192.142.24.7

🇺🇸 185.255.100.197