JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.213.144.209

172.213.144.209 was found in our database!

This IP was reported 1,224 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.213.144.209

Whois 172.213.144.209

IP Abuse Reports for 172.213.144.209:

This IP address has been reported a total of 1,224 times from 578 distinct sources. 172.213.144.209 was first reported on July 22nd 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Axel	2026-07-28 02:42:52 (1 minute ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.gitignore.p ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.gitignore.php Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇩🇪 febrian.de	2026-07-28 02:37:51 (6 minutes ago)	Malicious HTTP(S) probing detected by Fail2Ban	Web App Attack
🇫🇮 Christopher Hughes	2026-07-28 02:18:20 (26 minutes ago)	[Tue Jul 28 03:08:08.684253 2026] [proxy_fcgi:error] [pid 2292052:tid 139826393237056] [client 172.2 ... show more [Tue Jul 28 03:08:08.684253 2026] [proxy_fcgi:error] [pid 2292052:tid 139826393237056] [client 172.213.144.209:27155] AH01071: Got error 'Primary script unknown' [Tue Jul 28 03:08:08.769107 2026] [proxy_fcgi:error] [pid 2292052:tid 139826410022464] [client 172.213.144.209:27155] AH01071: Got error 'Primary script unknown' [Tue Jul 28 03:08:08.853210 2026] [proxy_fcgi:error] [pid 2292052:tid 139826376451648] [client 172.213.144.209:27155] AH01071: Got error 'Primary script unknown' [Tue Jul 28 03:08:08.937726 2026] [proxy_fcgi:error] [pid 2292052:tid 139825403389504] [client 172.213.144.209:27155] AH01071: Got error 'Primary script unknown' [Tue Jul 28 03:18:20.219139 2026] [proxy_fcgi:error] [pid 2292112:tid 139824942020160] [client 172.213.144.209:10047] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-28 02:12:40 (32 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 172.213.144.209 (IT/Italy/-)	SQL Injection
🇺🇸 Epimetheus	2026-07-28 02:06:51 (37 minutes ago)	Zombie network / Bot scanner detected: [GET] /sixxis.php [GET] /r.php [GET] /domvf.php [GET] /crgio ... show more Zombie network / Bot scanner detected: [GET] /sixxis.php [GET] /r.php [GET] /domvf.php [GET] /crgio.php [GET] /login.php [GET] /install.php [GET] /wp-login.php [GET] /edit.php UA: Unknown show less	Bad Web Bot Exploited Host Web App Attack
🇫🇮 Christopher Hughes	2026-07-28 01:58:04 (46 minutes ago)	[Tue Jul 28 02:58:03.063578 2026] [proxy_fcgi:error] [pid 2292112:tid 139826519062080] [client 172.2 ... show more [Tue Jul 28 02:58:03.063578 2026] [proxy_fcgi:error] [pid 2292112:tid 139826519062080] [client 172.213.144.209:9390] AH01071: Got error 'Primary script unknown' [Tue Jul 28 02:58:03.147316 2026] [proxy_fcgi:error] [pid 2292112:tid 139825873151552] [client 172.213.144.209:9390] AH01071: Got error 'Primary script unknown' [Tue Jul 28 02:58:03.231937 2026] [proxy_fcgi:error] [pid 2292112:tid 139825973798464] [client 172.213.144.209:9390] AH01071: Got error 'Primary script unknown' [Tue Jul 28 02:58:03.328103 2026] [proxy_fcgi:error] [pid 2292112:tid 139825998976576] [client 172.213.144.209:9390] AH01071: Got error 'Primary script unknown' [Tue Jul 28 02:58:03.914191 2026] [proxy_fcgi:error] [pid 2292112:tid 139826510669376] [client 172.213.144.209:9390] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇱 tpjg	2026-07-28 00:38:00 (2 hours ago)	Automated: 15 requests with error status in 120s window from 172.213.144.209. Evidence: /blacks.php: ... show more Automated: 15 requests with error status in 120s window from 172.213.144.209. Evidence: /blacks.php:301,/kir.php:404,/kir.php:301,/hypo.php:404,/hypo.php:301,/fpwch.php:404,/fpwch.php:301,/bootstrap.php:404,/bootstrap.php:301,/images.php:404,/images.php:301,/this_is_a_new_hello_world.php:404,/this_is_a_new_hello_world.php:301,/wp-content/plugins/hellopress/wp_filemanager.php:404,/wp-content/plugins/hellopress/wp_filemanager.php:301 (+35 more) show less	Web App Attack
🇺🇸 helios.live	2026-07-28 00:34:12 (2 hours ago)	2026/07/28 00:34:11 [error] 2269710#2269710: 2958192 FastCGI sent in stderr: "Primary script unknow ... show more 2026/07/28 00:34:11 [error] 2269710#2269710: 2958192 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.213.144.209, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 172.213.144.209 - - [28/Jul/2026:00:34:11 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-" 2026/07/28 00:34:12 [error] 2269710#2269710: *2958192 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.213.144.209, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 172.213.144.209 - - [28/Jul/2026:00:34:12 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-" 2026/07/28 00:34:12 [error] 2269710#2269710: ... show less	Web App Attack
🇪🇸 alferez	2026-07-28 00:09:38 (2 hours ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇨🇭 lufi	2026-07-28 00:06:13 (2 hours ago)	2026-07-28T02:06:12+02:00 lufischer04 ids442 2026-07-28 02:06:12 172.213.144.209: blacklisted Patter ... show more 2026-07-28T02:06:12+02:00 lufischer04 ids442 2026-07-28 02:06:12 172.213.144.209: blacklisted Pattern: wp-content/ ... show less	Web Spam Brute-Force Hacking Web App Attack
🇺🇸 rdpguard.com	2026-07-28 00:04:11 (2 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2026-07-27 23:52:40 (2 hours ago)	172.213.144.209 - - [27/Jul/2026:23:52:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager. ... show more 172.213.144.209 - - [27/Jul/2026:23:52:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 509 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-27 23:33:55 (3 hours ago)	Automated Report: Fail2Ban block triggered by nginx-limit-req jail.	Brute-Force SSH
🇩🇪 itsolon	2026-07-27 23:30:58 (3 hours ago)	[28/Jul/2026:01:30:58 +0200] 178519505881.994040 172.213.144.209 13726 217.154.7.177 80 [28/Jul/2026 ... show more [28/Jul/2026:01:30:58 +0200] 178519505881.994040 172.213.144.209 13726 217.154.7.177 80 [28/Jul/2026:01:30:58 +0200] 178519505871.674265 172.213.144.209 13726 217.154.7.177 80 [28/Jul/2026:01:30:58 +0200] 178519505832.992828 172.213.144.209 13726 217.154.7.177 80 [28/Jul/2026:01:30:58 +0200] 178519505899.327306 172.213.144.209 13726 217.154.7.177 80 [28/Jul/2026:01:30:58 +0200] 178519505856.561015 172.213.144.209 13726 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇬🇧 innovacommunications	2026-07-27 23:30:03 (3 hours ago)	Reported from Imunify360 blocklist	Brute-Force SSH

Showing 1 to 15 of 1224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.176.210.17

🇨🇳 116.179.32.19

🇬🇧 101.36.97.205

🇨🇦 99.79.50.46

🇺🇸 205.210.31.21

🇨🇳 192.140.185.8

🇺🇸 162.216.150.9

🇭🇰 123.1.147.204

🇰🇷 115.68.177.11

🇨🇳 113.88.242.136

🇨🇳 106.12.34.116

🇩🇰 89.150.152.42

🇺🇸 66.132.224.233

🇰🇷 211.240.117.71

🇩🇪 209.50.184.85

🇺🇸 205.210.31.78

🇩🇪 202.61.233.195

🇹🇳 197.0.212.212

🇨🇴 190.165.80.4

🇺🇦 178.216.13.14