JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.216.72.72

217.216.72.72

Neutral Activity

28 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS141995

Hostname(s)

vmi3426044.contaboserver.net

Domain Name

contabo.com

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

217.216.72.72 has been reported 28 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 217.216.72.72:

This IP address has been reported a total of 28 times from 18 distinct sources. 217.216.72.72 was first reported on January 9th 2026, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 Staging	2026-02-23 18:15:00 (6 months ago)	banned for ever asn	Bad Web Bot Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-02-05 19:11:07 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 14:11:02.351522 2026] [security2:error] [pid 17704:tid 17704] [client 217.216.72.72:55813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.greatchristianadventure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greatchristianadventure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYTrRsVFWJvuyfz3Z00PTAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-05 18:28:21 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 13:28:16.216501 2026] [security2:error] [pid 2247:tid 2247] [client 217.216.72.72:58971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kmelson.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYThQB4v67y0prxwTwqrYQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-05 17:42:06 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 12:42:01.407253 2026] [security2:error] [pid 2695:tid 2695] [client 217.216.72.72:64248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.saadeh.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.saadeh.ws"] [uri "/wp-json/wp/v2/users"] [unique_id "aYTWaQjMMKm05aoV8f__IQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 MWA SOC	2026-02-04 18:58:06 (7 months ago)		Hacking
🇹🇷 ToRnedo	2026-02-04 16:00:00 (7 months ago)	The IP 217.216.72.72 performed automated attacks against a WordPress website. Observed activity i ... show more The IP 217.216.72.72 performed automated attacks against a WordPress website. Observed activity includes: - User enumeration via REST API endpoints: GET /wp-json/wp/v2/users - Multiple password reset abuse attempts: POST /wp-login.php?action=lostpassword - Invalid password reset attempts using forged keys: GET /wp-login.php?action=rp&key=invalid - Repeated reset attempts for multiple usernames in a short time window This activity triggered WordPress password reset emails and matches automated brute-force / web application attack behavior. Timestamps: 2026-02-04 19:00–19:01 UTC+3 Affected platform: WordPress Attack type: Web application attack / brute-force / bad bot show less	Blog Spam Hacking Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-02-04 04:42:00 (7 months ago)	Fail2Ban banned 217.216.72.72 for security violations in jail wp-armour. Log: 2026/02/04 04:41:59 [e ... show more Fail2Ban banned 217.216.72.72 for security violations in jail wp-armour. Log: 2026/02/04 04:41:59 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 217.216.72.72 \| Target: losspassword" , client: 217.216.72.72, server: [REDACTED], request: "POST /wp-login.php?action=lostpassword HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-02-04 00:17:27 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 217.216.72.72 (vmi2919208.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 19:17:22.580136 2026] [security2:error] [pid 607:tid 607] [client 217.216.72.72:52996] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.zezel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.zezel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYKQEkjLvqRqtQnzlLuCxgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-02-04 00:10:39 (7 months ago)	Brute-forcing login against websites (D1-1) #1	Hacking Web App Attack
🇿🇦 Tokolosh Hunters	2026-02-03 06:38:47 (7 months ago)	AutoBlockWindow-Known bad useragent query-2026-02-03 06:38:46	Bad Web Bot
🇦🇺 MAGIC	2026-02-03 01:25:37 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2026-02-02 19:14:57 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇬🇷 Staging	2026-01-31 08:13:00 (7 months ago)	Highly Polluted ASN, perma banned	Hacking SQL Injection Bad Web Bot
🇱🇻 garmtech.com	2026-01-31 00:44:56 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-01-31 00:44:55 (7 months ago)	IM360 WAF: RCE in File Manager < 6.9 & Elfinder 2.1.47 WordPress plugin (CVE-2019-9194) MV:/wp-conte ... show more IM360 WAF: RCE in File Manager < 6.9 & Elfinder 2.1.47 WordPress plugin (CVE-2019-9194) MV:/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php show less	Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.189.182.234

🇸🇬 185.150.0.49

🇺🇸 165.22.158.12

🇿🇦 156.0.239.89

🇮🇩 123.231.202.162

🇮🇳 123.201.92.20

🇻🇳 103.118.28.222

🇵🇱 91.231.2.151

🇫🇷 91.196.152.52

🇺🇸 34.48.71.44

🇰🇷 125.141.83.17

🇰🇷 121.66.124.148

🇨🇳 106.38.205.224

🇺🇸 104.236.236.121

🇮🇩 103.90.25.243

🇫🇷 85.204.70.102

🇩🇪 51.89.38.137

🇺🇸 34.58.124.191

🇨🇭 31.7.57.58

🇺🇸 23.170.200.122