JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.208.72.93

104.208.72.93

Recent Activity

147 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇭🇰 Hong Kong

City

Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.208.72.93:

This IP address has been reported a total of 147 times from 126 distinct sources. 104.208.72.93 was first reported on September 3rd 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Germany with 36 reports; United States of America with 26 reports; France with 13 reports. The most common categories in these recent reports were: Web App Attack 115 times; Hacking 33 times; Brute-Force 33 times; Bad Web Bot 25 times; Port Scan 16 times; Other 19 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Epimetheus	2026-09-04 06:48:04 (1 hour ago)	Unauthorized access attempts: [GET] /root.php [GET] /install.php [GET] /wp-contentt.php [GET] /conf ... show more Unauthorized access attempts: [GET] /root.php [GET] /install.php [GET] /wp-contentt.php [GET] /config.php7 [GET] /locale.php [GET] /feeds.php [GET] /room.php [GET] /gecko-new.php [GET] /wp-2019.php [GET] /flower.php [GET] /admin.php [GET] /post.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 Zundapper	2026-09-04 06:47:53 (1 hour ago)	104.208.72.93 - - [04/Sep/2026:08:47:40 +0200] "GET /edit.phpA HTTP/1.1" 404 178 "-" "Mozilla/5.0 (W ... show more 104.208.72.93 - - [04/Sep/2026:08:47:40 +0200] "GET /edit.phpA HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [04/Sep/2026:08:47:45 +0200] "GET /alfa-rex.php7 HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [04/Sep/2026:08:47:47 +0200] "GET /xmlrpc.php0 HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [04/Sep/2026:08:47:51 +0200] "GET /alfanew.php7 HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - - [04/Sep/2026:08:47:53 +0200] "GET /config.php7 HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/53 ... show less	Web App Attack Port Scan
🇩🇪 febrian.de	2026-09-04 06:45:16 (1 hour ago)	Excessive HTTP(S) probing or bad web bot detected by Fail2Ban	Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-09-04 06:40:27 (1 hour ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-09-04 06:27:56 (1 hour ago)	2026/09/04 06:27:24 [error] 339400#339400: 554634512 access forbidden by rule, client: 104.208.72.9 ... show more 2026/09/04 06:27:24 [error] 339400#339400: 554634512 access forbidden by rule, client: 104.208.72.93, server: antzfund.com, request: "GET /admin.php HTTP/1.1", host: "antzfund.com" 2026/09/04 06:27:46 [error] 339395#339395: 554634548 access forbidden by rule, client: 104.208.72.93, server: antzfund.com, request: "GET /xmlrpc.php HTTP/1.1", host: "antzfund.com" 2026/09/04 06:27:55 [error] 339395#339395: 554634857 access forbidden by rule, client: 104.208.72.93, server: antzfund.com, request: "GET /install.php HTTP/1.1", host: "antzfund.com" ... show less	Web App Attack
🇭🇺 DumaNet	2026-09-04 06:17:00 (1 hour ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Sep 04. 06:04:36 Source IP: 104.20 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Sep 04. 06:04:36 Source IP: 104.208.72.93 Portion of the log(s): 104.208.72.93 - [04/Sep/2026:06:04:36 +0200] "GET /wp-2019.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:06:04:36 +0200] "GET /user.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:06:04:35 +0200] "GET /hehe.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:06:04:35 +0200] "GET /goods.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:06:04:34 +0200] "GET /randkeyword.php HTTP/1.1" 404 555 "-" "Mozilla show less	Web App Attack
🇺🇸 Charlesiv	2026-09-04 06:01:48 (2 hours ago)	Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from HK. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /autoload_classmap.php Timestamp: 2026-09-04T05:28:40Z Ray ID: a35a9792ad49ddbc UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇭🇺 DumaNet	2026-09-04 05:59:00 (2 hours ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Sep 04. 05:31:05 Source IP: 104.20 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Sep 04. 05:31:05 Source IP: 104.208.72.93 Portion of the log(s): 104.208.72.93 - [04/Sep/2026:05:31:05 +0200] "GET /user.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:05:31:04 +0200] "GET /hehe.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:05:31:04 +0200] "GET /goods.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:05:31:03 +0200] "GET /randkeyword.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.208.72.93 - [04/Sep/2026:05:31:03 +0200] "GET /about.php HTTP/1.1" 404 555 "-" "Mo show less	Web App Attack
Anonymous	2026-09-04 05:51:51 (2 hours ago)	[Fri Sep 04 07:51:50.257343 2026] [authz_core:error] [pid 2676] [client 104.208.72.93:8687] AH01630: ... show more [Fri Sep 04 07:51:50.257343 2026] [authz_core:error] [pid 2676] [client 104.208.72.93:8687] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 04 07:51:50.666311 2026] [authz_core:error] [pid 2676] [client 104.208.72.93:8687] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 04 07:51:51.058510 2026] [authz_core:error] [pid 2676] [client 104.208.72.93:8687] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇵🇱 sefinek.net	2026-09-04 05:42:57 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /plugin.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-09-04 05:42:08 (2 hours ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇫🇷 Baking333	2026-09-04 05:33:02 (2 hours ago)	[redacted] 104.208.72.93 - - [04/Sep/2026:06:32:59 +0100] "GET /[redacted] HTTP/1.1" 302 1574 0/3770 ... show more [redacted] 104.208.72.93 - - [04/Sep/2026:06:32:59 +0100] "GET /[redacted] HTTP/1.1" 302 1574 0/37701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 104.208.72.93 - - [04/Sep/2026:06:33:00 +0100] "GET /xmlrpc.php0 HTTP/1.1" 302 1574 0/117174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-09-04 05:32:27 (2 hours ago)	ave-21 : Rogue PHP files=>/1.php	Hacking
🇬🇧 thetomtaylor.co.uk	2026-09-04 05:30:05 (2 hours ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01]	Hacking SQL Injection Web App Attack
🇺🇸 Epimetheus	2026-09-04 05:24:04 (2 hours ago)	Unauthorized access attempts: [GET] /autoload_classmap.php UA: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Unauthorized access attempts: [GET] /autoload_classmap.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.112.237.233

🇸🇬 193.37.32.147

🇧🇷 187.92.28.238

🇨🇳 166.111.236.96

🇫🇮 147.185.133.228

🇺🇸 143.42.1.53

🇳🇱 91.92.42.36

🇧🇷 24.152.119.48

🇹🇼 1.169.128.14

🇩🇪 194.88.98.125

🇷🇺 185.245.184.230

🇫🇷 77.239.124.213

🇲🇾 47.250.189.20

🇺🇸 45.79.138.115

🇬🇧 35.203.211.142

🇺🇸 20.65.146.233

🇳🇱 185.184.222.129

🇻🇳 113.161.149.20

🇭🇰 83.229.125.128

🇩🇪 69.5.169.9