JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.213.244.85

172.213.244.85 was found in our database!

This IP was reported 247 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.213.244.85

Whois 172.213.244.85

IP Abuse Reports for 172.213.244.85:

This IP address has been reported a total of 247 times from 212 distinct sources. 172.213.244.85 was first reported on July 26th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-27 09:01:49 (13 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇨🇿 sajmon0011	2026-07-27 08:46:57 (28 minutes ago)	172.213.244.85 - - [27/Jul/2026:10:46:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.213.244.85 - - [27/Jul/2026:10:46:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇳🇱 Brict IT	2026-07-27 08:46:00 (29 minutes ago)		Bad Web Bot Web App Attack
🇫🇷 Campus France	2026-07-27 08:39:18 (36 minutes ago)	[Mon Jul 27 03:24:55.976269 2026] [php:error] [pid 3285675] [client 172.213.244.85:27862] script '/v ... show more [Mon Jul 27 03:24:55.976269 2026] [php:error] [pid 3285675] [client 172.213.244.85:27862] script '/var/www/html/campus-perpignan/znuab.php' not found or unable to stat [Mon Jul 27 10:39:18.084239 2026] [php:error] [pid 3505063] [client 172.213.244.85:60160] script '/var/www/nextcloud/this_is_a_new_hello_world.php' not found or unable to stat [Mon Jul 27 10:39:18.084239 2026] [php:error] [pid 3505063] [client 172.213.244.85:60160] script '/var/www/nextcloud/this_is_a_new_hello_world.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇺🇸 Gabriel Camargo	2026-07-27 08:38:26 (37 minutes ago)	172.213.244.85 - - [27/Jul/2026:03:38:23 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.213.244.85 - - [27/Jul/2026:03:38:23 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 172.213.244.85 - - [27/Jul/2026:03:38:25 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 172.213.244.85 - - [27/Jul/2026:03:38:25 -0500] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 301 178 "-" "-" ... show less	Brute-Force SSH
🇳🇱 i-turnradio.nl	2026-07-27 08:11:58 (1 hour ago)	2026-07-27 @ 10:11:57 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-27 @ 10:11:57 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇬🇧 ISPLtd	2026-07-27 07:41:45 (1 hour ago)	172.213.244.85 [27/Jul/2026:04:41:45 -0300] claire.target.domain:80 URL:/wp-content/plugins/hellopre ... show more 172.213.244.85 [27/Jul/2026:04:41:45 -0300] claire.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php 172.213.244.85 [27/Jul/2026:04:41:45 -0300] claire.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show less	Hacking Web App Attack
🇫🇮 Christopher Hughes	2026-07-27 07:39:59 (1 hour ago)	[Mon Jul 27 08:29:57.294020 2026] [proxy_fcgi:error] [pid 2268409:tid 139825596323392] [client 172.2 ... show more [Mon Jul 27 08:29:57.294020 2026] [proxy_fcgi:error] [pid 2268409:tid 139825596323392] [client 172.213.244.85:14663] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:29:57.337006 2026] [proxy_fcgi:error] [pid 2268409:tid 139824925234752] [client 172.213.244.85:14663] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:39:58.289030 2026] [proxy_fcgi:error] [pid 2268409:tid 139826535847488] [client 172.213.244.85:4751] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:39:58.331179 2026] [proxy_fcgi:error] [pid 2268409:tid 139825587930688] [client 172.213.244.85:4751] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:39:58.373469 2026] [proxy_fcgi:error] [pid 2268409:tid 139825571145280] [client 172.213.244.85:4751] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-27 07:19:55 (1 hour ago)	[Mon Jul 27 08:19:55.089295 2026] [proxy_fcgi:error] [pid 2268030:tid 139826418415168] [client 172.2 ... show more [Mon Jul 27 08:19:55.089295 2026] [proxy_fcgi:error] [pid 2268030:tid 139826418415168] [client 172.213.244.85:9033] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:19:55.172770 2026] [proxy_fcgi:error] [pid 2268030:tid 139826527454784] [client 172.213.244.85:9033] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:19:55.215195 2026] [proxy_fcgi:error] [pid 2268030:tid 139826502276672] [client 172.213.244.85:9033] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:19:55.256130 2026] [proxy_fcgi:error] [pid 2268030:tid 139825504036416] [client 172.213.244.85:9033] AH01071: Got error 'Primary script unknown' [Mon Jul 27 08:19:55.297208 2026] [proxy_fcgi:error] [pid 2268030:tid 139826410022464] [client 172.213.244.85:9033] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇵🇱 swiszczu	2026-07-27 07:12:34 (2 hours ago)	Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 172.213.244.85 - - [ ... show more Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 172.213.244.85 - - [27/Jul/2026:09:12:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /000.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /tx79.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /znuab.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/2026:09:12:33 +0200] "GET /htrpu.php HTTP/1.1" 403 153 "-" "-" "-" 172.213.244.85 - - [27/Jul/20 show less	Hacking Web App Attack
🇺🇸 chronos	2026-07-27 06:54:36 (2 hours ago)	[AUTORAVALT][[27/07/2026 - 03:54:36 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [172. ... show more [AUTORAVALT][[27/07/2026 - 03:54:36 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [172.213.244.85] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various oth] ... show less	Hacking Web App Attack
Anonymous	2026-07-27 06:53:20 (2 hours ago)	172.213.244.85 - - [27/Jul/2026:14:53:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.213.244.85 - - [27/Jul/2026:14:53:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-" 172.213.244.85 - - [27/Jul/2026:14:53:18 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 172.213.244.85 - - [27/Jul/2026:14:53:18 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 172.213.244.85 - - [27/Jul/2026:14:53:18 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 404 196 "-" "-" 172.213.244.85 - - [27/Jul/2026:14:53:18 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 404 196 "-" "-" 172.213.244.85 - - [27/Jul/2026:14:53:19 +0800] "GET /000.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-27 06:43:02 (2 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-07-27 06:30:25 (2 hours ago)	Automated scanning of WordPress installation	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-07-27 06:28:41 (2 hours ago)	Unauthorized access attempts: [GET] /n3yUmQ6Q9xwQ8ocdefault.php [GET] /gptsh.php [GET] /sa.php7 [GE ... show more Unauthorized access attempts: [GET] /n3yUmQ6Q9xwQ8ocdefault.php [GET] /gptsh.php [GET] /sa.php7 [GET] /mds.php [GET] /ws56.php [GET] /this_is_a_new_hello_world.php [GET] /mac.php [GET] /edit-tags.php UA: Unknown show less	Web App Attack

Showing 1 to 15 of 247 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇲🇩 188.237.233.180

🇩🇪 80.158.109.51

🇧🇷 34.39.230.93

🇧🇪 34.38.20.1

🇨🇴 191.95.165.238

🇲🇽 189.206.189.150

🇸🇦 175.110.145.6

🇺🇸 162.40.203.80

🇪🇨 157.100.198.255

🇭🇰 150.5.154.160

🇺🇸 66.132.186.135

🇭🇰 46.247.61.213

🇧🇷 45.178.19.238

🇩🇪 3.122.103.36

🇧🇷 2804:2d24:2ea:6a00:32c5:99ff:fecc:e3d3

🇧🇷 177.10.119.54

🇺🇸 165.232.60.54

🇺🇸 162.217.100.196

🇰🇷 161.118.153.29