JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.208.116.216

104.208.116.216

Neutral Activity

41 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇭🇰 Hong Kong

City

Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.208.116.216 has been reported 41 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.208.116.216:

This IP address has been reported a total of 41 times from 33 distinct sources. 104.208.116.216 was first reported on June 28th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 nextweb	2022-07-02 03:37:35 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 104.208.116.216 (HK/Hong Kong/Central and Weste ... show more (mod_security) mod_security (id:210410) triggered by 104.208.116.216 (HK/Hong Kong/Central and Western District/Central/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2022-07-01 21:54:25 (4 years ago)	chaangnoifulda.de 104.208.116.216 [02/Jul/2022:03:54:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 ... show more chaangnoifulda.de 104.208.116.216 [02/Jul/2022:03:54:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" chaangnoifulda.de 104.208.116.216 [02/Jul/2022:03:54:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇺🇸 Federalist	2022-07-01 19:42:54 (4 years ago)	4 failed login attempts (2 lockout(s)) from IP 104.208.116.216	Web Spam Blog Spam Hacking Spoofing Web App Attack
🇺🇸 raymarron.com	2022-07-01 13:29:41 (4 years ago)	GET /sito/wp-includes/wlwmanifest.xml GET /cms/wp-includes/wlwmanifest.xml GET /site/wp-includes/w ... show more GET /sito/wp-includes/wlwmanifest.xml GET /cms/wp-includes/wlwmanifest.xml GET /site/wp-includes/wlwmanifest.xml GET /wp2/wp-includes/wlwmanifest.xml GET /media/wp-includes/wlwmanifest.xml GET /test/wp-includes/wlwmanifest.xml GET /wp1/wp-includes/wlwmanifest.xml GET /shop/wp-includes/wlwmanifest.xml GET /2019/wp-includes/wlwmanifest.xml GET /2018/wp-includes/wlwmanifest.xml GET /news/wp-includes/wlwmanifest.xml GET /wp/wp-includes/wlwmanifest.xml GET /website/wp-includes/wlwmanifest.xml GET /wordpress/wp-includes/wlwmanifest.xml GET /web/wp-includes/wlwmanifest.xml GET /blog/wp-includes/wlwmanifest.xml GET /xmlrpc.php?rsd GET /wp-includes/wlwmanifest.xml show less	Web App Attack
🇧🇷 AC - Team	2022-06-30 23:49:19 (4 years ago)	104.208.116.216 - - [01/Jul/2022:00:49:24 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 10 ... show more 104.208.116.216 - - [01/Jul/2022:00:49:24 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Exploited Host Web App Attack
🇮🇱 Dolphi	2022-06-30 23:49:04 (4 years ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 tradenet	2022-06-30 21:47:49 (4 years ago)	104.208.116.216 - - [30/Jun/2022:20:47:33 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5 ... show more 104.208.116.216 - - [30/Jun/2022:20:47:33 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:20:47:35 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:20:47:37 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:20:47:38 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:20:47:40 -0500] "POST //xmlrpc.php HTTP/2.0" 200 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ... show less	Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2022-06-30 21:25:51 (4 years ago)	104.208.116.216 - - [01/Jul/2022:04:25:46 +0300] "GET / HTTP/1.0" 403 569 "-" "Mozilla/5.0 (Windows ... show more 104.208.116.216 - - [01/Jul/2022:04:25:46 +0300] "GET / HTTP/1.0" 403 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [01/Jul/2022:04:25:47 +0300] "GET //?author=1 HTTP/1.0" 403 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [01/Jul/2022:04:25:47 +0300] "GET //?author=2 HTTP/1.0" 403 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇯🇵 koji	2022-06-30 18:53:56 (4 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇸🇬 pusathosting.com	2022-06-30 17:35:03 (4 years ago)	can 104.208.116.216 [01/Jul/2022:03:41:02 "-" "POST /wp-login.php 200 13738 104.208.116.216 [01/Jul/ ... show more can 104.208.116.216 [01/Jul/2022:03:41:02 "-" "POST /wp-login.php 200 13738 104.208.116.216 [01/Jul/2022:04:31:43 "-" "POST /wp-login.php 200 13738 104.208.116.216 [01/Jul/2022:04:31:43 "-" "POST /wp-login.php 200 13752 show less	Brute-Force Web App Attack
🇺🇸 SleepyHosting	2022-06-30 14:36:18 (4 years ago)	(WPLOGIN) WP Login Attack 104.208.116.216 (HK/Hong Kong/-): 5 in the last 3600 secs	Brute-Force
🇩🇪 eveng	2022-06-30 05:09:49 (4 years ago)	(wordpress) Failed wordpress login from 104.208.116.216 (HK/Hong Kong/-)	Brute-Force
🇳🇱 CryptoYakari	2022-06-30 04:54:26 (4 years ago)	104.208.116.216 - - [30/Jun/2022:11:54:19 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 35 ... show more 104.208.116.216 - - [30/Jun/2022:11:54:19 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:11:54:19 +0300] "GET //xmlrpc.php?rsd HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:11:54:21 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:11:54:21 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.208.116.216 - - [30/Jun/2022:11:54:22 +0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 4 ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 Database.red	2022-06-30 04:37:37 (4 years ago)	[2022-06-30 04:37:37] Exploit probing - //wp-includes/wlwmanifest.xml	Hacking Brute-Force Web App Attack
🇩🇪 Ba-Yu	2022-06-30 01:18:55 (4 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 109.160.32.24

🇨🇳 94.231.206.248

🇪🇸 84.236.153.81

🇸🇬 45.118.134.109

🇩🇪 213.209.159.208

🇪🇨 201.46.114.60

🇨🇳 94.231.206.249

🇺🇸 204.48.23.197

🇨🇳 111.53.185.153

🇫🇷 93.95.60.4

🇫🇷 51.38.185.245

🇺🇸 34.182.171.225

🇮🇹 5.89.75.194

🇸🇬 165.154.236.104

🇲🇦 105.159.222.9

🇨🇭 51.107.1.72

🇩🇿 41.111.172.25

🇺🇸 20.14.75.5

🇧🇪 104.155.25.18

🇮🇩 103.162.69.11