JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.208.95.224

104.208.95.224 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.208.95.224

Whois 104.208.95.224

IP Abuse Reports for 104.208.95.224:

This IP address has been reported a total of 60 times from 44 distinct sources. 104.208.95.224 was first reported on July 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-11 07:28:26 (2 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
Anonymous	2026-07-09 17:07:55 (4 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-09 05:16:31 (4 days ago)	115 attacks on PHP URLs: GET /X7ROOT.PHP HTTP/1.1	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-08 22:00:23 (5 days ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking
Anonymous	2026-07-08 18:48:52 (5 days ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 R.G.	2026-07-08 18:05:45 (5 days ago)	(ScanningForFiles) Scanning for files triggerd 104.208.95.224 (HK/Hong Kong/-): 10 in the last 900 s ... show more (ScanningForFiles) Scanning for files triggerd 104.208.95.224 (HK/Hong Kong/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:58:52 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 104.208.95.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.208.95.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:58:49.106912 2026] [security2:error] [pid 7408:tid 7408] [client 104.208.95.224:7716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ibiocat.com"] [uri "/wp-config.php"] [unique_id "ak6P2dXjtyBjfGtUhexNrAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-08 17:47:20 (5 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 netclix.gr	2026-07-08 17:43:39 (5 days ago)	(aggressive_scan) Aggressive Web Exploit Scan 104.208.95.224 (HK/Hong Kong/-): 5 in the last 4600 se ... show more (aggressive_scan) Aggressive Web Exploit Scan 104.208.95.224 (HK/Hong Kong/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.208.95.224 - - [08/Jul/2026:20:43:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-" 104.208.95.224 - - [08/Jul/2026:20:43:33 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-" 104.208.95.224 - - [08/Jul/2026:20:43:33 +0300] "GET /index.php/wp-includes/PHPMailer/ HTTP/1.1" 503 3371 "-" "-" 104.208.95.224 - - [08/Jul/2026:20:43:33 +0300] "GET /wk/index.php HTTP/1.1" 404 808 "-" "-" 104.208.95.224 - - [08/Jul/2026:20:43:34 +0300] "GET /function/function.php HTTP/1.1" 404 808 "-" "-" show less	Port Scan
🇫🇷 Catalin Negru	2026-07-08 17:40:31 (5 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇬🇧 Apache	2026-07-08 17:08:56 (5 days ago)	(mod_security) mod_security (id:942100) triggered by 104.208.95.224 (HK/Hong Kong/-): 5 in the last ... show more (mod_security) mod_security (id:942100) triggered by 104.208.95.224 (HK/Hong Kong/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 raph	2026-07-08 17:07:30 (5 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-07-08 17:04:43 (5 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
Anonymous	2026-07-08 16:55:10 (5 days ago)	T: f2b 404 5x	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 16:39:43 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 104.208.95.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.208.95.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:39:35.668229 2026] [security2:error] [pid 25464:tid 25464] [client 104.208.95.224:8850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jesushijomodelo.com"] [uri "/wp-config.php"] [unique_id "ak59R5ScOCD3XgtlgNIJIwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 165.154.51.221

🇨🇳 121.22.99.2

🇺🇸 108.179.211.49

🇺🇸 158.46.196.150

🇨🇳 120.52.18.124

🇷🇺 95.26.61.65

🇳🇱 46.151.178.13

🇳🇱 45.148.10.141

🇺🇸 2607:f8b0:4003:c3e::12c

🇩🇪 212.168.42.69

🇧🇷 205.210.31.147

🇺🇸 205.210.31.109

🇲🇽 187.217.36.136

🇧🇷 177.11.196.79

🇮🇳 144.79.114.250

🇩🇪 139.59.210.225

🇮🇳 106.222.232.1

🇸🇬 104.23.176.3

🇺🇸 100.29.192.33

🇬🇧 35.203.211.65