JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.213.232.128

172.213.232.128 was found in our database!

This IP was reported 901 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.213.232.128

Whois 172.213.232.128

IP Abuse Reports for 172.213.232.128:

This IP address has been reported a total of 901 times from 305 distinct sources. 172.213.232.128 was first reported on July 29th 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-08-04 17:26:43 (6 minutes ago)	[TueAug0419:26:39.4697052026][security2:error][pid1604853:tid1604901][client172.213.232.128:0]ModSec ... show more [TueAug0419:26:39.4697052026][security2:error][pid1604853:tid1604901][client172.213.232.128:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"\^/wp-content/$uploads\\|cache\\|backup\\|backups\\|upgrade\\|ai1wm-backups$/.\*\\\\\\\\.ph$p[0-9]\?\\|tml\\|ar$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"317\"][id\"990070\"][msg\"PHPexecutionblockedinstoragedirectory\"][hostname\"sito-online.ch\"][uri\"/wp-content/upgrade/function.php\"][unique_id\"anIgz--tBO5H8EbdUbIyUgAAAEg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-08-04 17:26:21 (6 minutes ago)	Zombie network / Bot scanner detected: [GET] /files/autoload_classmap.php [GET] /wp-includes/style- ... show more Zombie network / Bot scanner detected: [GET] /files/autoload_classmap.php [GET] /wp-includes/style-engine/about.php/ [GET] /wp-content/plugins/erinyani/flower.php [GET] //wp-content/languages/wp-login.php [GET] /wp-content/uploads/wpr-addons/forms/ [GET] /repair.php [GET] /.xa/class-wp-http-client.php [GET] /impressumen.php [GET] /dashboardwp.php [GET] /phpunit/src/Util/PHP/uss.php [GET] /doiconvs.php [GET] /nok.php [GET] /wp-content/upgrade/function.php [GET] /edit-tags.php [GET] /wp-includes.bak/html-api/about.php [GET] /jindex.php [GET] /wp-includes/rx.php [GET] /wp-content/themes/aahana/autoload_classmap.php [GET] /wp-content/plugins/apikey/xleet.php [GET] /cw.php [GET] /dokumenbypass.php [GET] /templates/ [GET] /ms-load-wp.php [GET] /config_load.php [GET] /include/bussubmit.php [GET] /wp-admin/contrjibus.php [GET] /evil.php [GET] /wp-includes/Requests/about.php7 [GET] /wp-includes/IXR/flower.php [GET] /admin/xleet.php [GET] /wp-content/xleet.php [GET] /wawe.php [GE ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-08-04 17:08:49 (23 minutes ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇩🇪 febrian.de	2026-08-04 17:01:11 (31 minutes ago)	Malicious HTTP(S) probing detected by Fail2Ban	Web App Attack
🇧🇪 Saec	2026-08-04 16:54:08 (38 minutes ago)	Jarvis auto-ban: CF honeypot path /classwithtostring.php (1× on saec.me)	Port Scan Web App Attack
🇩🇪 conseilgouz	2026-08-04 16:37:13 (55 minutes ago)	vee-17 : Block hidden directories=>/.tmb/(/)	Hacking
🇦🇺 Klaverstyn	2026-08-04 16:25:31 (1 hour ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 miriks	2026-08-04 16:10:52 (1 hour ago)	Automated scan detected: GET /.well-known/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ... show more Automated scan detected: GET /.well-known/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇬🇧 Apache	2026-08-04 16:01:36 (1 hour ago)	(PERMBLOCK) 172.213.232.128 (IT/Italy/-) has had more than 4 temp blocks in the last 86400 secs	Brute-Force
🇳🇱 Site.eu	2026-08-04 15:49:56 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 macrob	2026-08-04 15:41:55 (1 hour ago)	2026/08/04 15:41:44 [error] 1918375#1918375: 445451102 access forbidden by rule, client: 172.213.23 ... show more 2026/08/04 15:41:44 [error] 1918375#1918375: 445451102 access forbidden by rule, client: 172.213.232.128, server: finami.ph, request: "GET /.tmb/ HTTP/2.0", host: "finami.ph" 2026/08/04 15:41:44 [error] 1918375#1918375: 445448826 access forbidden by rule, client: 172.213.232.128, server: finami.ph, request: "GET /.tmb/la.php HTTP/2.0", host: "finami.ph" 2026/08/04 15:41:54 [error] 1918376#1918376: 445447601 access forbidden by rule, client: 172.213.232.128, server: finami.ph, request: "GET /admin.php HTTP/2.0", host: "finami.ph" ... show less	Web App Attack
🇩🇪 cloudmax	2026-08-04 15:37:23 (1 hour ago)	Cloudmax Protect [WEB BLOCK] - Too many 400/500 requests. Possible attack or hacking attempt	Hacking Web App Attack
🇫🇷 demomodule	2026-08-04 15:27:25 (2 hours ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇺🇸 Epimetheus	2026-08-04 15:26:21 (2 hours ago)	Unauthorized access attempts: [GET] /chosen.php [GET] /autoload_classmap.php [GET] /appreciators.ph ... show more Unauthorized access attempts: [GET] /chosen.php [GET] /autoload_classmap.php [GET] /appreciators.php [GET] /config.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 thesimonmanuel	2026-08-04 15:21:10 (2 hours ago)	172.213.232.128 - - [04/Aug/2026:20:51:10 +0530] "GET /cgi-bin/about.php HTTP/1.1" 403 141 "-" "Mozi ... show more 172.213.232.128 - - [04/Aug/2026:20:51:10 +0530] "GET /cgi-bin/about.php HTTP/1.1" 403 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128" show less	Web App Attack

Showing 1 to 15 of 901 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.62

🇺🇸 189.81.70.168

🇻🇳 113.164.234.27

🇻🇳 103.82.22.235

🇱🇹 62.60.130.235

🇫🇮 2a09:bac5:31c3:2db9::48e:74

🇷🇴 92.118.39.14

🇮🇪 80.233.77.136

🇳🇱 45.148.10.151

🇺🇸 45.33.94.76

🇳🇱 34.178.47.95

🇷🇴 193.32.162.27

🇦🇺 187.15.117.65

🇨🇳 144.52.54.121

🇳🇱 45.148.10.147

🇬🇧 35.203.210.93

🇺🇦 31.202.180.245

🇻🇳 27.79.4.71

🇷🇴 2.57.122.238

🇨🇳 218.59.111.98