JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.213.9.3

Recent Activity

Abuse Confidence Score

100% Critical

615 reports

411 reporters · latest 42 minutes ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇹 Italy
City: Milan, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

615 from 411 distinct reporters

First reported

November 2nd 2026

Most recent report

42 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 148 🇺🇸 United States of America 101 🇫🇷 France 72

Most common categories Web App Attack 481 Brute-Force 164 Bad Web Bot 151 Hacking 143 Port Scan 46

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bescared	2026-11-06 15:28:32 UTC · (42 minutes ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
Anonymous	2026-11-06 15:12:06 UTC · (58 minutes ago)	172.213.9.3 - - [06/Nov/2026:20:12:02 +0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:04 +0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" ... show more 172.213.9.3 - - [06/Nov/2026:20:12:02 +0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:04 +0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:04 +0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:04 +0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:04 +0500] "GET /rapid.php HTTP/1.1" 301 162 "-" "-" 172.213.9.3 - - [06/Nov/2026:20:12:05 +0500] "GET /rapid.php HTTP/1.1" 404 27 "-" "-" ... show less	Brute-Force
🇫🇷 Campus France	2026-11-06 15:09:15 UTC · (1 hour ago)	[Fri Nov 06 16:09:15.294118 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Nov 06 16:09:15.312923 2026] [php:error] [pid 105551] [client 172.213.9.3:4966 ... show more [Fri Nov 06 16:09:15.294118 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Nov 06 16:09:15.312923 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/rapid.php' not found or unable to stat [Fri Nov 06 16:09:15.372636 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/ggg.php' not found or unable to stat [Fri Nov 06 16:09:15.397744 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/zzxx.php' not found or unable to stat [Fri Nov 06 16:09:15.417794 2026] [php:error] [pid 105551] [client 172.213.9.3:49668] script '/var/www/html/link.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2026-11-06 14:45:27 UTC · (1 hour ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇬🇧 MrTumnus	2026-11-06 14:26:54 UTC · (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇺🇸 RamSet	2026-11-06 14:24:38 UTC · (1 hour ago)	[wx] HTTP-Probe on port 443 (via domain). 120 distinct paths probed in 40s. Sustained 240 req/min, 120 nonexistent paths (404). Paths: /adminer.php, /alfa.php, //cgi-bin/index.php, ///admin.php, //admin.php, //adminfuns.php, //wp-admin/js/index.php, ... show more [wx] HTTP-Probe on port 443 (via domain). 120 distinct paths probed in 40s. Sustained 240 req/min, 120 nonexistent paths (404). Paths: /adminer.php, /alfa.php, //cgi-bin/index.php, ///admin.php, //admin.php, //adminfuns.php, //wp-admin/js/index.php, /0.php, /1.php, /122.php, /12r.php, /155.php, /1ac.php, /2.php, /222.php, /3PJcpMFsD8B.php, /40341.php, /403dd.php, /4PJcpMFsD8B.php, /8.php, /9g987h.php, /BDKR28WP.php, /Component.php, /Ffile.php, /a.php, /aa.php, /ab.php, /admin.php?, /aks.php, /alfa-rex.php7, /alls.php, /als.php, /av.php, /b.php, /c.php, /cache.php, /cc.php, /cheng.php, /chosen.php, /class-walker-footer-dev.php?p=, /classwithtostring.php?p=, /coffexiumimage.php, /czq.php, /dejavu.php, /dex.php, /dropdown.php, /echkmss.php, /f35.php, /faiy.php, /fferr.php, /file.php?, /flamini.php, /fling.php?p=, /g1.php, /ggg.php, /goods.php, /h02ugyh.php, /img.php, /index/function.php, /init-notica.php show less	Bad Web Bot Web App Attack
🇵🇱 stareradia.pl	2026-11-06 14:06:14 UTC · (2 hours ago)	[Fri Nov 06 15:06:13.030769 2026] [php:error] [pid 3921455:tid 3921455] [client 172.213.9.3:0] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Nov 06 15:06:13.120680 2026] [php:error] [pid 3933328:tid 3933328] [c ... show more [Fri Nov 06 15:06:13.030769 2026] [php:error] [pid 3921455:tid 3921455] [client 172.213.9.3:0] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Fri Nov 06 15:06:13.120680 2026] [php:error] [pid 3933328:tid 3933328] [client 172.213.9.3:0] script '/var/www/html/rapid.php' not found or unable to stat [Fri Nov 06 15:06:13.225990 2026] [php:error] [pid 3930333:tid 3930333] [client 172.213.9.3:0] script '/var/www/html/ggg.php' not found or unable to stat [Fri Nov 06 15:06:13.533786 2026] [php:error] [pid 3934496:tid 3934496] [client 172.213.9.3:0] script '/var/www/html/zzxx.php' not found or unable to stat ... show less	Web App Attack
🇮🇹 VHosting	2026-11-06 14:05:04 UTC · (2 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-11-06 14:04:17 UTC · (2 hours ago)	(y3) Failed scan -byebye- from 172.213.9.3 (IT/Italy/-): (CF_ENABLE)	Hacking
🇬🇧 jackalek	2026-11-06 13:56:56 UTC · (2 hours ago)	172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [ ... show more 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /rapid.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /ggg.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /zzxx.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /link.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /md5.php3 HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /ab.php HTTP/1.1" 404 480 "-" "-" 172.213.9.3 - - [06/Nov/2026:13:56:55 +0000] "GET /wp-content/about.php HTTP/1.1" 404 480 "-" "-" ... show less	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-11-06 13:50:15 UTC · (2 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇷🇴 iulianh	2026-11-06 13:31:14 UTC · (2 hours ago)	80,443	Brute-Force SSH
🇩🇪 BlueWire Hosting	2026-11-06 13:25:40 UTC · (2 hours ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇺🇦 ukrpack.net	2026-11-06 13:20:01 UTC · (2 hours ago)	WEB_Brute-Force	Brute-Force
🇳🇱 MyGlobalFlowers	2026-11-06 12:48:30 UTC · (3 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 615 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.93

🇺🇸 152.163.101.69

🇧🇷 104.28.214.216

🇳🇬 102.140.97.134

🇺🇸 69.164.203.32

🇮🇳 45.119.237.209

🇺🇦 194.44.209.201

🇮🇳 168.144.116.230

🇷🇺 95.174.121.189

🇻🇳 45.119.212.99

🇮🇳 45.112.21.250

🇫🇷 163.172.66.206

🇺🇸 162.216.150.74

🇺🇸 129.121.139.180

🇺🇸 52.179.208.167

🇺🇸 50.6.206.244

🇷🇺 45.10.247.63

🇮🇳 43.255.141.80

🇳🇱 35.234.171.19

🇺🇸 35.232.76.162