JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.209.5.150

104.209.5.150 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 71%: ?

71%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.209.5.150

Whois 104.209.5.150

IP Abuse Reports for 104.209.5.150:

This IP address has been reported a total of 21 times from 20 distinct sources. 104.209.5.150 was first reported on November 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 dzpk	2026-06-22 02:32:37 (1 week ago)	[22/Jun/2026:04:32:32 +0200] 178209555296.978686 104.209.5.150 44070 HOST 80 [22/Jun/2026:04:32:34 + ... show more [22/Jun/2026:04:32:32 +0200] 178209555296.978686 104.209.5.150 44070 HOST 80 [22/Jun/2026:04:32:34 +0200] 17820955543.742918 104.209.5.150 44065 HOST 80 [22/Jun/2026:04:32:37 +0200] 178209555794.226391 104.209.5.150 44078 HOST 80 show less	Web App Attack
🇷🇸 Scan	2026-06-22 00:01:21 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇧🇷 ludarkstar99	2026-06-15 06:00:04 (2 weeks ago)	Blocked by os-abuseipdb; 16 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,443,80	Port Scan Hacking
🇧🇪 webbie	2026-06-15 05:38:52 (2 weeks ago)	104.209.5.150 - - [15/Jun/2026:07:38:37 +0200] "GET /.env.save HTTP/1.1" 404 400 "-" "Mozilla/5.0 (X ... show more 104.209.5.150 - - [15/Jun/2026:07:38:37 +0200] "GET /.env.save HTTP/1.1" 404 400 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.209.5.150 - - [15/Jun/2026:07:38:41 +0200] "GET /wp-config.php HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.209.5.150 - - [15/Jun/2026:07:38:43 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 104.209.5.150 - - [15/Jun/2026:07:38:44 +0200] "GET /.aws/credentials HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.209.5.150 - - [15/Jun/2026:07:38:50 +0200] "GET /actuator/env HTTP/1.1" 404 400 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124. ... show less	Brute-Force Web App Attack
🇩🇪 kivitendo.de	2026-06-15 05:37:05 (2 weeks ago)	{"reqId":"0hcyv1sQaHMyhbm1XSyd","level":1,"time":"2026-06-15T05:36:54+00:00","remoteAddr":"104.209.5 ... show more {"reqId":"0hcyv1sQaHMyhbm1XSyd","level":1,"time":"2026-06-15T05:36:54+00:00","remoteAddr":"104.209.5.150","user":"--","app":"core","method":"GET","url":"/.git/HEAD","scriptName":"/index.php","message":"Trusted domain error. \"104.209.5.150\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"hHwGZ1imaj80I0GDejWI","level":1,"time":"2026-06-15T05:36:55+00:00","remoteAddr":"104.209.5.150","user":"--","app":"core","method":"GET","url":"/.git/config","scriptName":"/index.php","message":"Trusted domain error. \"104.209.5.150\" tried to access using \"37.24.44.97\" as host.","userAgent":"Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36","version":"32.0.6.1","data":{"app":"core"}} {"reqId":"rwbRvS4g3AS72WaEwybM","level":1,"time":"2026-06-15T05:36:58+00 ... show less	Brute-Force Web App Attack
🇺🇸 MPL	2026-06-15 05:24:25 (2 weeks ago)	tcp port scan (9 or more attempts)	Port Scan
🇹🇼 kk_it_man	2026-06-15 03:50:12 (2 weeks ago)		Port Scan
🇩🇪 maxpower	2026-06-15 03:39:59 (2 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 104.209.5.150 (US/United States/-): 2 in ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 104.209.5.150 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.209.5.150 - - [15/Jun/2026:05:39:54 +0200] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "-" host=145.239.233.177 104.209.5.150 - - [15/Jun/2026:05:39:55 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" host=145.239.233.177 show less	Port Scan
Anonymous	2026-06-15 03:04:18 (2 weeks ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇩🇪 Lino Project	2026-06-15 02:55:21 (2 weeks ago)	104.209.5.150 - - [15/Jun/2026:04:55:18 +0200] "GET /.git/config HTTP/1.1" 404 360 "-" "Mozilla/5.0 ... show more 104.209.5.150 - - [15/Jun/2026:04:55:18 +0200] "GET /.git/config HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-15 02:28:02 (2 weeks ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 sumnone	2026-06-15 02:23:33 (2 weeks ago)	Port probing on unauthorized port 2078	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-06-15 02:17:51 (2 weeks ago)	Web vulnerability probing: /.aws/credentials	Web App Attack
🇩🇪 centurion	2026-06-15 01:10:42 (2 weeks ago)	Blocked by UFW on ns02 [80/tcp] Source port: 38496 TTL: 37 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [80/tcp] Source port: 38496 TTL: 37 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-15 01:10:33 (2 weeks ago)	Port Scan	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.207.9.246

🇩🇪 69.5.169.250

🇺🇸 66.132.172.127

🇨🇦 45.194.92.57

🇮🇷 5.235.242.22

🇺🇸 216.180.246.39

🇰🇷 210.90.155.178

🇺🇸 205.210.31.46

🇳🇱 195.178.110.30

🇩🇪 185.30.32.114

🇧🇷 179.179.199.225

🇯🇵 172.253.235.27

🇺🇸 154.217.253.190

🇨🇳 139.212.61.213

🇳🇱 84.82.14.214

🇷🇺 81.22.60.16

🇦🇺 40.82.214.8

🇯🇵 34.146.54.105

🇩🇪 18.197.109.248

🇻🇳 14.225.7.70