104.210.66.173
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇦🇺 Australia
- City
- Sydney, New South Wales
No reports in the last 60 days
104.210.66.173 has been reported 119 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
119 from
99 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,wa01,wa02]
|
Bad Web Bot Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx03]
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 214 malicious requests on 2026-05-08 (e.g., env/backup probes, brute-force, or error bursts).
|
Web App Attack SSH Hacking | |
| 🇬🇧 openstrike.co.uk |
200 attacks on ACME URLs, PHP URLs:
GET /.well-known/acme-challenge/index.php HTTP/1.1
GET /admin/function.php HTTP/1.1
|
Web App Attack | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Webshell probing
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Ba-Yu |
WordPress hacking/exploits/scanning
|
Web Spam Hacking Brute-Force Exploited Host Web App Attack | |
| 🇫🇷 phoenix1jl96 |
|
DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack | |
| 🇩🇪 mondor.ro |
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 104.210.66.173, Reason:[104.210.66.173 (AU/Australia/-), more than 60 Apache 404 hits in the last 3600 secs]; Ports: 80,443; Direction: in; Trigger: LF_CLUSTER; Logs:
|
Port Scan | |
| 🇫🇷 bazter.pro |
Fail2Ban: plesk-bot-aggressive - 15 failures
|
Port Scan Bad Web Bot Web App Attack | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking Bad Web Bot | |
| 🇺🇦 URAN Publishing Service |
104.210.66.173 - - [08/May/2026:11:22:06 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 3340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
|
Web App Attack | |
| 🇳🇱 Mangelot Hosting |
(upload_shell) srv101 Shell upload 104.210.66.173 (AU/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown