JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.213.216.126

172.213.216.126 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.213.216.126

Whois 172.213.216.126

IP Abuse Reports for 172.213.216.126:

This IP address has been reported a total of 171 times from 153 distinct sources. 172.213.216.126 was first reported on July 27th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-27 20:45:43 (12 minutes ago)	(PERMBLOCK) 172.213.216.126 (IT/Italy/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 172.213.216.126 (IT/Italy/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 Hugopvigo	2026-07-27 20:45:09 (13 minutes ago)	"2026-07-27 20:45:09+00:00 172.213.216.126 IP con score alto (100) detectada en el log."	Brute-Force SSH
🇬🇧 Greg Poulson	2026-07-27 20:25:14 (33 minutes ago)	Our website was hit by this DDOS at a rate of 204 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇩🇪 auridh	2026-07-27 20:07:32 (50 minutes ago)	Ip 172.213.216.126 performed 'crowdsecurity/http-probing' (11 events over 676.478926ms) at 2026-07-2 ... show more Ip 172.213.216.126 performed 'crowdsecurity/http-probing' (11 events over 676.478926ms) at 2026-07-27 19:03:12.334958119 +0000 UTC show less	Web App Attack
Anonymous	2026-07-27 19:47:34 (1 hour ago)	CADANECOM WEBEXPLOIT 172.213.216.126 (172.213.216.126)	Web App Attack
🇩🇪 Guardian	2026-07-27 19:47:29 (1 hour ago)	Multi abuses [2]: Scanning for installed WordPress and vulnerabilities (x2), Unauthorized connection ... show more Multi abuses [2]: Scanning for installed WordPress and vulnerabilities (x2), Unauthorized connection attempt / Port scanning (x15) 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /images.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /bootstrap.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /fpwch.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /hypo.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /kir.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /blacks.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /cap.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /ccc.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GET /wp-5jbk59g.php HTTP/1.1" 172.213.216.126 [27/Jul/2026:21:47:28 +0200] "GE show less	Port Scan Web App Attack
🇫🇷 Quarks Solutions	2026-07-27 19:41:07 (1 hour ago)	crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-07-27 19:39:45 (1 hour ago)	[Mon Jul 27 19:39:44.693867 2026] [proxy_fcgi:error] [pid 856103:tid 135003933484736] [client 172.21 ... show more [Mon Jul 27 19:39:44.693867 2026] [proxy_fcgi:error] [pid 856103:tid 135003933484736] [client 172.213.216.126:25512] AH01071: Got error 'Primary script unknown' [Mon Jul 27 19:39:44.745150 2026] [proxy_fcgi:error] [pid 856103:tid 135002826204864] [client 172.213.216.126:25512] AH01071: Got error 'Primary script unknown' [Mon Jul 27 19:39:44.795208 2026] [proxy_fcgi:error] [pid 856103:tid 135004328130240] [client 172.213.216.126:25512] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇫🇷 omartin	2026-07-27 19:34:48 (1 hour ago)	HTTP Vulnerability Scanning / Bot Probing	Hacking Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-27 19:29:04 (1 hour ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-135)	Hacking Web App Attack
🇩🇪 0x44	2026-07-27 19:28:16 (1 hour ago)	Web probing - backdoors/webshells with missing User-Agent	Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-27 19:27:55 (1 hour ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default:80 172.213.216.126 - - [27/Jul/2026:22:27 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default:80 172.213.216.126 - - [27/Jul/2026:22:27:54 +0300] "GET /cmd.php HTTP/1.1" 404 418 "-" "-" show less	Web App Attack
🇨🇭 4server	2026-07-27 19:24:35 (1 hour ago)	[MonJul2721:24:29.2809382026][security2:error][pid1771919:tid1772235][client172.213.216.126:0]ModSec ... show more [MonJul2721:24:29.2809382026][security2:error][pid1771919:tid1772235][client172.213.216.126:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\\|wp-file-manager\\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"443\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"autodiscover.cacciatorichiasso.ch\"][uri\"/wp-content/plugins/hellopress/wp_filemanager.php\"][unique_id\"amewbSqRPuMK2yNfBKkZzQAAARM\"] show less	Hacking Web App Attack
🇺🇸 Lee Daniel	2026-07-27 19:10:37 (1 hour ago)	172.213.216.126 - - [27/Jul/2026:15:10:36 -0400] "GET /shell.php HTTP/1.1" 404 21793 "-" "-" ...	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 auridh	2026-07-27 19:04:58 (1 hour ago)	Ip 172.213.216.126 performed 'crowdsecurity/http-backdoors-attempts' (2 events over 565.925428ms) at ... show more Ip 172.213.216.126 performed 'crowdsecurity/http-backdoors-attempts' (2 events over 565.925428ms) at 2026-07-27 19:03:13.040086664 +0000 UTC show less	Web App Attack

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a0e:1d47:c20b:5200:10d1:759d:1ff7:474a

🇺🇸 195.184.76.168

🇧🇷 191.36.152.28

🇵🇱 176.53.159.198

🇷🇺 94.154.84.215

🇺🇸 23.95.25.133

🇰🇷 219.248.4.146

🇺🇸 162.216.150.31

🇵🇰 153.117.15.1

🇻🇳 103.1.210.25

🇧🇬 78.128.114.66

🇳🇱 45.148.10.151

🇳🇱 192.42.116.18

🇫🇮 147.185.133.99

🇫🇷 147.135.212.151

🇨🇳 120.26.58.94

🇫🇷 90.1.23.212

🇧🇷 20.226.90.242

🇨🇭 209.99.190.99

🇪🇨 177.234.213.67