JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.200.96

172.182.200.96 was found in our database!

This IP was reported 1,817 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.200.96

Whois 172.182.200.96

IP Abuse Reports for 172.182.200.96:

This IP address has been reported a total of 1,817 times from 752 distinct sources. 172.182.200.96 was first reported on August 16th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 clauss	2026-08-23 23:41:13 (7 minutes ago)	172.182.200.96 - - [24/Aug/2026:02:35:39 +0300] "GET /wp-login.php HTTP/2.0" 404 37599 "-" "-" 172.1 ... show more 172.182.200.96 - - [24/Aug/2026:02:35:39 +0300] "GET /wp-login.php HTTP/2.0" 404 37599 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:36:37 +0300] "GET /wp-admin/css/colors/index.php HTTP/2.0" 301 0 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:36:37 +0300] "GET /wp-admin/css/colors/index.php HTTP/2.0" 301 0 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:36:48 +0300] "GET /wp-admin/user/802277/index.php HTTP/2.0" 301 0 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:36:48 +0300] "GET /wp-admin/user/802277/index.php HTTP/2.0" 301 0 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:37:02 +0300] "GET /wp-admin/install.php HTTP/2.0" 403 6221 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:37:02 +0300] "GET /wp-admin/install.php HTTP/2.0" 403 6221 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:37:23 +0300] "GET //wp-admin/maint/wp-login.php HTTP/2.0" 404 37607 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:37:23 +0300] "GET //wp-admin/maint/wp-login.php HTTP/2.0" 404 37607 "-" "-" 172.182.200.96 - - [24/Aug/2026:02:37:34 +030 ... show less	Brute-Force Web App Attack
🇩🇪 itsolon	2026-08-23 23:38:01 (11 minutes ago)	[24/Aug/2026:01:38:00 +0200] 178752828024.790254 172.182.200.96 17088 217.154.7.177 80 [24/Aug/2026: ... show more [24/Aug/2026:01:38:00 +0200] 178752828024.790254 172.182.200.96 17088 217.154.7.177 80 [24/Aug/2026:01:38:00 +0200] 178752828024.420410 172.182.200.96 17088 217.154.7.177 80 [24/Aug/2026:01:38:00 +0200] 178752828079.672447 172.182.200.96 17088 217.154.7.177 80 [24/Aug/2026:01:38:00 +0200] 178752828014.011337 172.182.200.96 17088 217.154.7.177 80 [24/Aug/2026:01:38:01 +0200] 178752828194.103038 172.182.200.96 17088 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇫🇷 phoenix1jl96	2026-08-23 23:37:43 (11 minutes ago)	[Mon Aug 24 01:27:32.269303 2026] [proxy_fcgi:error] [pid 140463:tid 140463] [client 172.182.200.96: ... show more [Mon Aug 24 01:27:32.269303 2026] [proxy_fcgi:error] [pid 140463:tid 140463] [client 172.182.200.96:8710] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:37:38.741912 2026] [proxy_fcgi:error] [pid 141508:tid 141508] [client 172.182.200.96:8711] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:37:41.002430 2026] [proxy_fcgi:error] [pid 141508:tid 141508] [client 172.182.200.96:8711] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:37:41.439169 2026] [proxy_fcgi:error] [pid 141508:tid 141508] [client 172.182.200.96:8711] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:37:42.036393 2026] [proxy_fcgi:error] [pid 141508:tid 141508] [client 172.182.200.96:8711] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2026-08-23 23:20:47 (28 minutes ago)	by Attack Lagwatch(gw)	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
🇫🇷 phoenix1jl96	2026-08-23 23:17:22 (31 minutes ago)	[Mon Aug 24 01:17:16.563345 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96: ... show more [Mon Aug 24 01:17:16.563345 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96:8734] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:17:17.380668 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96:8734] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:17:18.677561 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96:8734] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:17:19.402122 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96:8734] AH01071: Got error 'Primary script unknown' [Mon Aug 24 01:17:20.123337 2026] [proxy_fcgi:error] [pid 140455:tid 140455] [client 172.182.200.96:8734] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2026-08-23 23:11:10 (38 minutes ago)	172.182.200.96 - - [23/Aug/2026:18:11:02 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.182.200.96 - - [23/Aug/2026:18:11:02 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:02 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:02 -0500] "GET /wp-includes/theme-compat/index.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:02 -0500] "GET /wp-includes/ID3/index.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:03 -0500] "GET /wp-includes/blocks/comment-template/index.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:03 -0500] "GET /wordpress/wp-includes/Requests/index.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:03 -0500] "GET /wp-login.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:03 -0500] "GET /test/index.php HTTP/1.0" 403 199 "-" "-" 172.182.200.96 - - [23/Aug/2026:18:11:03 -0500] "GET /wp-includes/blocks/read-more/index.php HTTP/1.0" 40 ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ArturShelby	2026-08-23 22:37:18 (1 hour ago)	Suspicious file access: /.well-known/file.php	Web App Attack
🇺🇸 Starburst SysOp Team	2026-08-23 22:31:33 (1 hour ago)	Restricted File Access Attempt. Matched phrase "config.php" at REQUEST_FILENAME. (930130-mnz6-1)	Hacking Web App Attack
🇫🇷 largo-it.net	2026-08-23 22:25:04 (1 hour ago)	Aug 24 00:25:00 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:00.381] www_f ... show more Aug 24 00:25:00 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:00.381] www_frontend~ sav_largo_cluster/sav_https 0/0/10/145/155 404 7536 - - ---- 51/6/0/0/0 0/0 "GET /uploadx.php HTTP/1.1" Aug 24 00:25:00 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:00.825] www_frontend~ sav_largo_cluster/sav_https 0/0/11/117/128 404 7536 - - ---- 52/7/0/0/0 0/0 "GET /browse.php HTTP/1.1" Aug 24 00:25:01 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:01.241] www_frontend~ sav_largo_cluster/sav_https 0/0/11/152/163 404 7536 - - ---- 52/7/0/0/0 0/0 "GET /wp-includes/js/crop/index.php HTTP/1.1" Aug 24 00:25:01 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:01.695] www_frontend~ sav_largo_cluster/sav_https 0/0/10/215/225 404 7536 - - ---- 53/7/0/0/0 0/0 "GET /wp-content/upgrade-temp-backup/index.php HTTP/1.1" Aug 24 00:25:02 vps-9f3cdc33 haproxy[3419377]: 172.182.200.96:14238 [24/Aug/2026:00:25:02.207] www_fro ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 GEDAL	2026-08-23 22:19:20 (1 hour ago)	Fail2ban webexploits @ <hostname> : 172.182.200.96 - - [24/Aug/2026:00:19:18 +0200] "GET /wp-admin/c ... show more Fail2ban webexploits @ <hostname> : 172.182.200.96 - - [24/Aug/2026:00:19:18 +0200] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "-" show less	Brute-Force SSH
🇸🇬 lancernz	2026-08-23 22:15:10 (1 hour ago)	Auto-detected: 83 hits on autosport.org.nz within 100 log lines. Blocked by Cowork server monitoring ... show more Auto-detected: 83 hits on autosport.org.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇺🇸 Epimetheus	2026-08-23 22:12:32 (1 hour ago)	Zombie network / Bot scanner detected: [GET] /wp-admin/js/index.php [GET] /wp-admin/network/index.p ... show more Zombie network / Bot scanner detected: [GET] /wp-admin/js/index.php [GET] /wp-admin/network/index.php [GET] /mentos.php [GET] /wp-includes/blocks/post-terms/index.php [GET] /.well-known/acme-challenge/local-access.php [GET] /ws58.php [GET] /wp-includes/wp-conflg.php [GET] /wp-content/themes/twentytwentyfour/index.php [GET] /2.php [GET] /wp-includes/IXR/index.php [GET] /wp-includes/PHPMailer/index.php [GET] /first.php [GET] /well-known/index.php [GET] //dropdown.php [GET] /wp-content/themes/twentytwentytwo/index.php [GET] /wp-includes/js/thickbox/index.php [GET] /tinynologin.php [GET] /wp-content/wp-plugins/aspose-pdf-importer/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [GET] /wp-admin/gQ2zxmHJ3RF.php [GET] /wp-includes/js/jcrop/Jcrop.php [GET] /wpupex.php [GET] /museu/yhweq.php [GET] /wp-admin/css/wp-login.php [GET] /wp-includes/Requests/about.php [GET] /wp-admin/user/802277/index.php [GET] /images/class-config.php [GET] /css/index.php [GET] /wp-login.php [GET] / ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
🇩🇪 Hary74656	2026-08-23 22:10:28 (1 hour ago)	[Mon Aug 24 00:10:27.985544 2026] [core:info] [pid 686635:tid 686721] [client 172.182.200.96:15573] ... show more [Mon Aug 24 00:10:27.985544 2026] [core:info] [pid 686635:tid 686721] [client 172.182.200.96:15573] AH00128: File does not exist: /home/harald/www/default_host/wp-includes/php-compat/index.php ... show less	Bad Web Bot
🇩🇪 macrob	2026-08-23 22:06:16 (1 hour ago)	2026/08/23 22:06:13 [error] 3874541#3874541: 512883653 access forbidden by rule, client: 172.182.20 ... show more 2026/08/23 22:06:13 [error] 3874541#3874541: 512883653 access forbidden by rule, client: 172.182.200.96, server: bin.partners, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "bin.partners" 2026/08/23 22:06:14 [error] 3874541#3874541: 512883688 access forbidden by rule, client: 172.182.200.96, server: bin.partners, request: "GET /wp-includes/theme-compat/index.php HTTP/2.0", host: "bin.partners" 2026/08/23 22:06:14 [error] 3874541#3874541: 512883709 access forbidden by rule, client: 172.182.200.96, server: bin.partners, request: "GET /wp-includes/ID3/index.php HTTP/2.0", host: "bin.partners" ... show less	Web App Attack
🇫🇷 breubit	2026-08-23 22:05:31 (1 hour ago)	172.182.200.96 - - [24/Aug/2026:00:05:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.182.200.96 - - [24/Aug/2026:00:05:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 448 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 1817 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 80.66.66.68

🇧🇬 79.124.62.230

🇵🇭 2001:4451:83de:2c00:70a0:ae50:ca05:ad9a

🇪🇸 213.232.78.198

🇭🇰 199.45.155.67

🇩🇪 104.207.62.120

🇸🇬 101.47.134.75

🇬🇧 2.57.17.244

🇨🇳 193.112.105.97

🇨🇳 182.54.23.138

🇨🇳 123.7.77.60

🇺🇸 172.68.174.114

🇷🇴 92.118.39.71

🇩🇰 92.113.150.135

🇺🇦 91.234.25.251

🇨🇦 85.217.149.41

🇳🇱 193.47.62.69

🇺🇸 172.68.174.243

🇬🇧 35.203.211.59

🇺🇸 172.110.223.159